{"type": "bundle", "id": "bundle--c348a824-8488-48fa-8763-07fccefb67e9", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--1d64d888-8408-41fa-89d7-f6b7f0a6d411", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--8230af30-f84a-4b44-9116-448016c873ae", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--f32c372f-1481-4759-b2eb-dff34544c148", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--b8bac290-78e1-439d-b2bd-c61e28d8e882", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--643bd870-c682-4dca-ad98-c9063bce5d2a", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--646306b4-30ed-405a-9037-7b6d4f18c118", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4564a4d3-f9b4-44ff-8309-aa06bc355de3", "relationship_type": "located-at", "source_ref": "infrastructure--646306b4-30ed-405a-9037-7b6d4f18c118", "target_ref": "location--1d64d888-8408-41fa-89d7-f6b7f0a6d411", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--c5a65727-ce7e-4c57-862b-36d6c472063e", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf5edc4-dac4-454b-a7e5-840391dc64de", "relationship_type": "located-at", "source_ref": "infrastructure--c5a65727-ce7e-4c57-862b-36d6c472063e", "target_ref": "location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5274c3b0-0144-4411-a9e4-c128ef2dad04", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6054224b-62bd-4677-8f36-df54899fb218", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd8905ba-3e9c-448d-ab27-39b6cf940d21", "relationship_type": "located-at", "source_ref": "infrastructure--6054224b-62bd-4677-8f36-df54899fb218", "target_ref": "location--8230af30-f84a-4b44-9116-448016c873ae", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--783ffe15-3eff-4078-940f-691524d4ec3a", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--121c6698-a13b-452c-b0d2-7196f385fe04", "relationship_type": "located-at", "source_ref": "infrastructure--783ffe15-3eff-4078-940f-691524d4ec3a", "target_ref": "location--f32c372f-1481-4759-b2eb-dff34544c148", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3c3379ba-8968-496e-92f9-522372a24ec8", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76a0dbba-809d-49cf-bf2f-dc301d77954f", "relationship_type": "located-at", "source_ref": "infrastructure--3c3379ba-8968-496e-92f9-522372a24ec8", "target_ref": "location--b8bac290-78e1-439d-b2bd-c61e28d8e882", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0b494328-f818-4fe4-9b75-7cac94e5d52c", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1073ae66-c74a-4a55-8f70-62ce4159f1cd", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--16be0500-8592-4e4b-b961-d895c98911bc", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a69bb2-681c-43bd-b9f8-0cf2019b0d39", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '/>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42ec558-62fe-4eb7-bf10-8efe9f21b6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.1.220.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25862df-8959-4500-b82b-1a576aa0cc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.51.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f146828a-6efe-44ef-9e2d-e75b922c5b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.176.252.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009f7ce5-67bc-445e-ad8f-43b9d01ffebf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.213.196.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18458a7a-25f8-4d55-929d-a40da743b6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ae8b55-dd66-40f8-9e44-4ff748eea32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff37653-8402-4b0e-bad4-ebd96a8d0cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127b0c98-262b-485a-92b8-2bc6ff1dea02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7735d806-02f5-4a7a-8650-dc015b8f8571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52f5629-98d9-4ece-a140-3ed950160fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bcdf7b-460f-4f9f-b63a-3a40147e73ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c2edde-b3dd-411b-bd12-78c4b6afadff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37040528-e289-4b96-aaf5-325f2bd91453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4881d5-f99f-4a97-9262-4194931263d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970a1281-428c-4286-a359-95f7d3e8a109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf792ace-fac8-4f7e-b6d6-8e5692470a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270e2b26-bdb8-4d6f-8191-2604dc4ba394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80575832-3e23-450f-81ab-79f391a75f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2206ba88-b7b3-4eb8-88dd-aafeef1982bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95020ec7-f873-4bdb-abb7-1c66e42dfb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128e8f06-f1c0-463d-a262-618ed4816443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c3aaa1-9de2-45b1-8322-028738c7e20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcc1f85-e8f9-48d7-9bbd-2393e8a28ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620f5c35-861c-4104-a365-a95141cc7b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b2348c-e7ef-4604-99df-c8e6ffba7c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba70b536-ceb5-435b-b806-f26678bf9b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04ff51f-fab1-4902-9996-c20edca85c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97393947-0f1b-4247-8d6f-1ba4c0e09027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe03cce-b1c3-483b-a040-2a14e3c46c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c243bd0a-cbbc-49bc-bd6f-c178bd945b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c218a8-09cc-4cde-9398-2717aae8a46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfef2dc9-64d9-4f5e-a91a-9e26173d560d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefb1cde-881c-447f-b552-7ac1744c9d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f114e0f-1158-42ff-b08e-d68259c67cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a43faea-e531-48d7-9cc9-6b1f0284631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333133fc-bbf1-462c-81e7-468d42b019b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.4.212.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69364c31-c06c-4070-bb92-c371b475a074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d757b69-3c1b-421d-b05a-8aa484b550a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22153d74-df42-49f8-8792-b514a811a7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262d6af0-d508-4f9b-ab2e-0923292c36b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.12.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6c6e2e-bdcb-42cb-a23f-32687bfabbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.135.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4203aaf-5489-447a-b357-3ba7010ab7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.154.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f6ac87-a703-4f99-9751-860082a61278", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.88.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3acefda-4cf3-4852-abaa-75cdbafc1014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.91.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fda89c-eaa1-4e24-a286-5974692740df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.133.170.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fec6be-ce74-46aa-99d1-8736bcb8d93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.255.158.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a9d1ee-f363-437d-a6c7-fec5ca91850c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.248.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a678f5ce-c4a1-4f9c-bf0c-7272b1cccc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.52.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba63077-deec-463c-8c0d-baf34511db88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.34.60.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1e3df7-3bdb-44d5-b453-58aee79471b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41b68e4-7ef5-4190-827b-e26eb34faa44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3b5cf3-6843-440c-a49c-c4cb96ad6437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5a76fb-4a67-4183-8b50-d4f60becc6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27eba9d6-5fc5-4f3b-bd91-1fc5614017fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8980391d-cb16-42fc-8356-37bbf4f84d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74414113-5330-49f7-9f5a-0f77027ffd42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.111.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955f90d4-e128-42ed-a737-bfa6592479d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b957a644-8e49-4ed7-9224-512b7887d4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2d05de-6fb9-48d2-acbf-d8558378d29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3faefd97-81e8-40b3-9601-3474f9da8347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9748eb00-462a-4e5e-9b4a-5f51c31b4be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846c226b-738e-4477-b123-a25655c47458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb14d73-10cb-4723-9f7c-c7a222df8155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0510d603-100f-4b6f-8be8-62ef0d3def7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad8d013-1657-491c-930d-726738f4dc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76affde-a9d0-42ad-bea4-120318fe7074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba64bf2-67e2-4329-82ab-45710a78064d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b198408-0e0a-44e6-9ffc-37ad87f56ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402d087b-134c-4096-8de5-9641d45679f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cd27d0-abcb-42bb-9c9c-a78504ee0e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d70f5d8-5dc2-408c-af90-fb4324be0aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5ad948-6542-4282-af3e-bc7eb52408df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3265fb-cc11-4c32-8e31-1cf65a7d90bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a40d1c-08da-4a5e-bdb9-ab25e03bbb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4673639-7867-4898-acc6-bdfb0ea45d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.160.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5936f5de-d9ff-4a15-8e81-d49b18851110", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af13430-6fcc-4cca-8001-775bcd248989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdffad20-c48d-498d-87be-8c9b6d347a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.148.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bf19ae-b350-43de-8586-5d8db88d0b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9561a1-906b-4ff4-9bfa-2f49c34b2fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c81a2e-3d7b-452d-b8d1-de3a5de339fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.223.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f07ade-d6af-4387-8969-9e0c685670ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.235.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8589d2ca-0963-4764-b079-72d37cd79dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.130.125.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed002b65-405e-47d2-9d32-f716f77d50f0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.13.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf724e2a-d1f1-4843-bd35-9b5efe81a5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.209.221.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239ec9a5-bbee-42b9-88ff-5d9f917064d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.214.36.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52650233-7444-4f91-bc2e-cd89574ed98c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.1.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3214a3d6-2575-4004-8002-5354d3193ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.217.240.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467c5e6a-97d9-4afd-8498-aff6b7c11646", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.218.89.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14b4a2f-0383-43a0-a114-aebc8ce7fc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693328cb-1553-4cdc-a2ef-85de459fd1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.69.167.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c192ad6-c0d8-4b90-9043-79f89751a7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.114.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f4144f-5a14-4dba-9f6f-139dbfae8891", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.98.30.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a97828e-067d-497f-9e10-0b29f0cac691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2407dc3c-154a-445e-bed6-528851b71b55", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.106.232.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf6423c-80f5-46f5-9e52-4b52c4b1b8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.117.184.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08927b53-c3ca-4d81-a645-8c2394912049", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b535193-7f0b-4c86-9273-087957fed3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.121.172.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dad0fd6-0382-402b-82d1-6e48b037ea1c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45673f84-120c-470a-b7e0-f8a71d8b553f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37551a63-72e8-48c4-853f-748b16617546", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.159.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5701f3e4-bd95-464a-a369-55d65631d53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.105.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4642e2b-92c3-41fa-aa2e-44d0cb4a073e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.46.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ff5ed0-c25c-469a-9159-5c99fbc69081", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.183.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd162fe-8f28-41c5-b618-c70ea602cc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.157.88.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a478ab4-81e8-4fe3-b667-2bd6b4625b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.29.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8877d3-85b9-41bf-b402-917de32d71ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.112.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abca7fea-6b10-4b2b-bb43-be265acc9d25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.170.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d6c323-a763-4df1-b2b1-5a71af1be197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f60a6e6-f639-4005-b136-a0555218520c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.184.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36b4332-6ca9-4334-b864-b9c18054386a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.107.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7add58ea-788a-41a3-a68a-9619f1c8b35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.157.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff82f82-bfbc-468b-80a8-6cb6f3274c03", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.5.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e484ea10-409b-4980-8f4e-f0efd17ba931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.83.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fe9f5c-dcf3-4fd3-bbec-d62ac19e2444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.236.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fe2d4b-b4c7-4f10-aa00-22b1cff61062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5256a849-4573-4090-9519-41aa55209c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe3effb-a17f-47dc-9024-70062d861385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.67.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee05ee1d-af21-46b0-9d67-b99cc2a0719d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.100.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa217f49-0951-4d52-9c8c-96eecbd9ddc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.223.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f864035-749d-47a2-8dd0-16a02ef9672e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687c32aa-3fcd-45a1-a4d1-172c237d53da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d11eea7-8364-427a-8087-bd1a91426d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605ecbed-e4fb-4360-9b4a-90f958300498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f38af7c-6aee-480b-805e-779cec3a1b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b802e98c-9f0e-4322-960c-c35424bf2ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68faf4f0-2a3b-4c2b-82e8-0d5253702e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.207.1.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedb954b-5808-4653-88f0-0dd13e85c1ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.18.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ded384f-834d-4427-aeb4-52f7634e222c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3bac5c-9e44-45d8-bfb8-251fd65f4f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.69.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b10293-0c04-461d-82af-039052c1e736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688250b7-2aed-47f5-90e9-621a73e769f7", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcdcce1c-6cc3-496e-b50e-69e27176b4c5", "relationship_type": "indicates", "source_ref": "indicator--688250b7-2aed-47f5-90e9-621a73e769f7", "target_ref": "vulnerability--0b494328-f818-4fe4-9b75-7cac94e5d52c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--907bf418-569b-4939-a713-ef943a76106b", "relationship_type": "indicates", "source_ref": "indicator--688250b7-2aed-47f5-90e9-621a73e769f7", "target_ref": "vulnerability--1073ae66-c74a-4a55-8f70-62ce4159f1cd", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcebae04-5a5f-4251-aaa9-651545c168fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb76a4d-2e46-4a42-972b-271a92e2218c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.224.171.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e919884c-91ff-40b9-bef5-010a120db69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532bcd9-08b0-4ee5-acbb-7ee95223e4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2aa3be-9262-446b-9a49-7dd2780959c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f20906-ebf6-4dc5-9fef-b310a5bc7d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e5e77b-9bc8-4006-a3ae-27b8f3a076c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b843e3fe-af20-47a5-ab8c-f89609ce63f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd631b1-9e76-4461-be82-287dfa46199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7963c967-baba-4406-bbb4-f7cd7a053d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af3182a-0923-46ee-811a-2fc218249ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6582a46-0ea8-4b18-82d5-867f7beb70ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9068f67f-9066-4eb2-af9a-7b79f19691e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ab53c-7a64-4657-a5d2-c37e4c11cd07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5204f33a-0b71-462b-ae63-ad32adf50ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232220a6-1e01-43f4-9d1d-041727c5141a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade95768-8d11-4a83-84a2-8465b651bbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.246.193.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dfce03-7ca5-4f6d-acca-26b295e14802", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.246.84.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56abe4a3-9e0a-431b-b9b7-4eb2b078a3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.123.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e650c4d-0616-4532-82c9-a366d5ed48dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.36.10.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6084b94e-a9b6-487b-b7ef-31151b8f8f70", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.62.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44daa11-6a75-43f4-be0d-1addc4f24567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.52.154.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d8f745-a571-47ff-9be2-80e184df280e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.114.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad2b138-478c-45c1-8eca-ed7faa270eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791a77df-a7fc-4ffa-bcdc-a794011ac3d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.160.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1473d46c-9094-4e53-9fb5-51842f5222f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.139.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437b4746-ac2f-4074-9b18-186db7a9d996", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.199.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dd9f96-e970-4390-b58f-439032a866f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3be0a7-4efa-4bd4-8549-4f920099aaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffde97bd-9e7d-4618-a54f-f040611cafce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c49f1ef-6807-4d9b-b038-0355f284483c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.1.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6325a5f3-92f3-4da4-b1e3-f3332230d1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.116.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0b266a-3e72-460d-8147-fc13592c164a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.85.180.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9b0bd7-2c30-490e-b0a0-ba7be0efcecd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.76.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d9746a-3817-4518-8026-9f905dca3783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018fd1fe-285f-43de-a6c5-11b32a0dce64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd9ad9f-bf38-41c0-90ce-f023776564bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.105.78.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554b1f86-1935-4014-856e-608d10d2c928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.128.140.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb146dc-d82a-4e43-b9c9-b698e85ebffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.11.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8907131a-38f5-40f5-895e-5fa82565f977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745a0c43-050d-42cd-804f-4bee34cf59ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.145.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dece0aa-820b-418c-8273-ba1e564ba6c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.196.130.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e50af8e-f466-4d89-a49a-ff0ee824bcc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d132f111-5955-4992-971e-bb3280d7b5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6704646-f252-4fad-9978-b18fb993aea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f133cf-4a5b-485e-8077-777db8641391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef53eddc-499b-4952-b5cf-d9a7a05b365e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2cb50-d5ab-472c-ac32-666102a7692a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef65fcf1-86d8-4494-b477-372c82346dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.139.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c742ba-2782-4069-8871-89705f9ae4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.147.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9721e7cf-dfe5-4c97-a921-f148c2b168cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71b67fc-d29e-4a77-abb9-968be0197376", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.118.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e875e278-562d-4b8a-815f-3110b425c726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca91b07c-c3d0-473e-a009-96ff0cd7d4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae4fd63-0480-47e5-ac0d-249677c506ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2b0401-1a3a-4cae-82c8-70fe74b59e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c48345-d941-4e09-8508-008db4e35bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.75.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8130f5-2913-43bf-9aa3-611ad9ddf4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742e1fa6-05e6-4064-8385-be89f4ba6e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.126.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba04e4c-c7df-469f-b572-d3bbc6158494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.126.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7486f277-f819-47c9-ae3f-0ba1fd3c6ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ad37d7-3f00-4cbd-8992-dac5e1535521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29077ac-5993-4d6c-b804-a1ea30d67692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.213.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0513ad6-65bc-40e8-b5a5-7175210d73c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9569eeb-0d4f-4735-bf6c-2777b4532d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.235.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69c891f-6649-4446-ae61-29edaf844aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.250.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd315e49-f652-490b-bd46-430a4fdd8bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.37.185.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9deb7c93-9238-4e48-b951-908694fb8e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.112.24.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fbbdcc-ac66-46fc-a8bc-e7756afb5794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.178.119.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6b68e9-01c6-4c5d-bb44-1269846afba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.184.220.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb02e91c-59b5-41b8-b0c5-6536ce139355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.24.184.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5793cc-6623-47f5-b390-660ab2df72d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.0.40.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc7a4e8-1f22-4165-a82b-5ccf100dd54a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.176.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2c0d79-f68f-4c50-a1dd-2a483a63fbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.18.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1c8341-cf33-4767-8020-6d11b10e43b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.219.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b69dcf-67af-4810-bb82-fa67e4d224d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.6.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20662a99-8ff0-4f58-ab6c-b4e15161324e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.122.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1d532b-741b-425f-8d11-7384ffea2206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.198.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e039a78a-c9fb-473b-b9f3-e169b27e134b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.192.16.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e91c2d6-bcca-4c29-9e02-8495c4e40314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.192.45.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b78fcc-b051-4aac-89f4-73bda201dbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.75.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e4eb02-ffdd-4e16-92b3-ebc773974dd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9ab300-08f3-4011-a007-706efcb7ce2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9e4f87-663a-460c-92cf-6b3f96b1c481", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5244d599-2368-4afa-a51d-cb12a3071ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.71.225.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c749252c-179d-4d75-8973-08d4677e8fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edfd85b-aafd-4bf1-8998-de1adba288d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2883cce6-016c-429c-bc01-55bc6479b4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64f15ef-3cde-4720-9a05-caf9ba6641ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670711b8-4f37-419e-acb3-fc009a26d0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29a52b1-0709-490d-bfc9-656a12e04e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce45e418-cb7c-4179-8267-39e8d2b705a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd9c2a2-f255-4473-80ff-01e4b45d17cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cef907-0003-44f8-a49d-7d694cdbf2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efeba8b0-7e87-48a6-ab10-1bbe3becfa8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54a5377-48c4-4cee-82c5-3707e56fa34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6b134a-8507-49e5-99a4-40e9800feaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bde910-5728-46e5-8285-b894d346192b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc1ebda-2d30-4cc2-8687-e586043454c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.230.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8ba7d1-c46f-4d31-a732-433b62f76c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.71.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11a5ad0-169a-4773-9980-6c360b75a2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9854e1cd-8d99-416e-883d-313905725429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eacb61a-1c5f-4edd-933d-3ea84f06e498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a70149f-4569-4f69-9782-3157e721d1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861b748d-217a-4850-a1bd-a5a53b688365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedfaea5-f71c-460a-a90a-a095ba694afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ec2fa2-8bed-4f32-b158-2f72874dc49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c3f3ab-4897-4de7-843f-5fc34d8235e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98db4262-4f78-4fc4-9f4b-1073e365e4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2642a8-ddb6-47c1-a3f2-300a183085eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c9db17-da0c-470d-9b42-7a2a01c88fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5929113e-e9e2-4ce3-a3c2-ed2384e00b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce235bce-6654-41c9-ac59-48a66dad44c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779731c5-d965-4d22-b204-a431684e7227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c15021f-6afc-465a-937d-953295d743fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9f439b-9b79-4344-81f5-dd3af05a263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cd902e-c652-4882-b065-3764cf063697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c00e2b-0125-41a7-8b83-9262fe71552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a339534-ee6b-4cb8-8597-1131090fd73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05e17aa-7bc8-4aaf-b616-8bad790e4ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da17707b-777c-49d9-9bf0-582e168883c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28043e10-c1b0-4394-b54f-4c2ec1bf454b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bb888c-0634-420c-85e7-f32ac578ff2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43f70b2-a165-4d1f-b3f0-2aadf5423344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ad2a3b-d5a2-45ae-a5bb-17ea41fe4859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0476787a-0a65-472d-9436-97db413054da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2515ee0e-2b10-4903-bd98-3816fdddeaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4097a6c5-e3ad-4f0d-b000-9a18899ba819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.63.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f637d9cf-ff96-4bd4-b4e0-8d8ee50da49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.79.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b5cc8c-8d78-4983-afaa-0c458843ede8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.238.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ed412f-52fb-45f0-835d-65317d443ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.164.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cc0b7a-cf7f-402a-a234-19e927a8e5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.182.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0266dc-16fc-4507-a484-380b5fa45f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.14.95.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528979ea-1fd9-41fe-87e2-d8606b7b6ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.95.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522c91fb-420c-4599-9c0e-20c42f2e2671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29a693-0c1a-427a-8b26-424847493ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.11.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb026bbc-e32c-4c4a-b713-1da22474072d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.177.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbc14c5-2178-4161-a21e-a91e6df6934a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.18.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daceaae9-8aba-4921-9702-beb0a287ea2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0109fc53-b646-44dc-82e8-b0f6c17fb7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.24.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b21a2b-89ba-43db-83ec-0bdb3707530a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.4.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0546161-2cd7-459a-b992-94a7b6816fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.56.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a1331f-f457-42ab-bf64-90736b28444d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caadc02-7b88-4715-869c-75735f9f8885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d91ee1-3c6a-4af5-864e-80831e8a65c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d86bd29-e185-43bc-b964-96842e1eeecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15887823-2f15-44b5-bf37-7cc48a9f3490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f377c18-da89-4535-a0d1-8f3b84c5afeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a390c364-bd7b-4964-a913-ed61aa7374f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41308fb2-8d31-415f-bc2e-2e3f9feb9485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435c0fd-c5eb-4751-8e94-18588c6fb361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13909554-297f-4fd7-b611-e571be968299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbc1a4c-6f4b-47fd-8b9a-bde125145f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e09af5-a66e-4d51-acc8-a93c93bed10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ed000-530d-42c4-b122-ec7cbc76a3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.227.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f61ee4-db98-41f8-9fcf-195118992bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.133.252.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f172e6b0-6623-4519-ad47-656c7196f4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.176.207.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93894271-5eed-435b-9149-836747ae7219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03334faa-3625-433c-8af0-ce71e07d8ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cf9586-c0fd-45c0-9f0d-148be82b0639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.14.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988adcf8-c33f-4313-b1b5-ee9b95c568af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.73.205.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff68656-00be-4362-9f30-301b019b4407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35529cce-29f2-44ee-a1db-7ea78eaca6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88631143-7264-42c0-8be8-9dc683906d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.98.184.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04848a77-e740-40c0-9dcd-b3ddd748cef0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca072c4-ee5d-404d-bd1c-f2e6959f1988", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.154.105.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874a94da-49f3-409a-ab6c-c18ed8c97cb8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.225.253.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53134598-ddac-47b9-bcf5-8dfcd5328959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.38.254.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f735017-cf34-438b-bd25-ccc9412c3ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.206.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cd7b13-a79c-4cff-ab5e-8f13364ae0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.123.41.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b2ed62-0014-4a0c-823e-c646f7cd36af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.175.88.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a62cc4-7576-4db1-a5e8-72aabfbee0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.25.34.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1778ee24-88dd-41cd-83dd-d9b0306d6f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.35.7.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce13f1d-851a-4bd7-bb3f-0c976c53bf17", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.70.48.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52099bcb-16b9-4681-9476-5f4227db5388", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.105.1.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc11208-1e05-493d-a613-8359dc46e428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.236.209.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23f3b64-eb38-44dc-bd1c-a0b185594d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.242.178.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5767eb6b-4e2b-4d54-9e4a-85907079571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b46934-ff31-45aa-977d-9691ae096357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.125.55.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af765f0a-84d6-44cf-9351-079278ff4b08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.137.40.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af98de6-7837-4ac3-94ab-407dba9627ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.132.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7967d14c-9ac1-41e5-8b0e-bed30ed845b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.22.197.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a05632f-6936-4476-ac2b-a3465f2a16d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.231.11.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af9689d-3033-42ae-a9ae-c8912a21cb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.239.217.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c31b73-7c36-4697-9888-88381ccf526d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.250.184.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5544ec-d77c-447a-b8f2-d15b3e79ac94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.31.124.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d973459-f9d6-4e5e-858e-1827254958dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.59.150.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c326b9-589d-4a23-ae05-dd49a6a922a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.13.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a21a92b-6f44-48e4-be05-1f8ee3c72abe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c5bbf6-5b16-4009-bf60-5c7088538ca3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e01b50-fcda-42ab-befb-ca0824e20cf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2ed449-3b03-4429-bfb7-49bca105a734", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceca090-595d-4f9f-93b2-fa180be0cab5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf0b717-af58-4310-af73-6a49346faa04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abd3ef0-7274-402c-94e7-ca7c9ea757ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d6f4d7-c9a4-472f-a1c9-31371e557603", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8dab9-93cf-4795-b14b-e251c5280682", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38675f2b-3f66-486a-9c65-f035f9d2c743", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ff7c2f-c6ca-48bd-84d0-e9633c83fd06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9de701-1139-406c-9665-5a69c56a179b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e291de-7185-4387-8ce7-8cd80293349c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.216.2.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c7ef8d-8d4b-4c0b-86f4-0df7b3a71905", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.238.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6ff3b2-38e5-4f04-b075-f2681b7463b2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.31.180.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8536c9be-b5aa-4580-97c3-02be9b619ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.222.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2858ed-2f8d-4375-9181-da81e1c09104", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8935d025-adce-4fc3-ad5b-cfa0bd23df75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.59.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db610065-f0c4-4040-be45-a69a45729660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.55.236.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91be11c4-6032-4585-854c-e61ef3273a6a", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce1e43b-dd7f-417f-9f29-37ad6b2bf165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.135.196.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e691436c-11c9-4345-9877-595ce7c704d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.160.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a677b496-49c1-4ebc-a6bb-af0527ed7132", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.166.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d16663-911a-47f6-80c6-36e2dcd4954a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.179.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce61f41-9be3-49a9-9c14-bbc28afbd76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.190.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be15842-f29a-4d98-9786-1533c2af33f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.211.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bc8ab6-4ac8-4998-b721-ef3e5f83395b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.46.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356114b6-9e2a-4453-b85d-cb2bb71fd1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.64.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f2bb39-048a-4c2f-8683-730a14c5c713", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.136.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc57b0f7-f45b-4271-b54d-abb2e7fbc427", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.190.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df36964d-9d4f-420f-8300-f8cb2fbb5e82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.229.170.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4488c2-f926-45f9-bf51-18bd7da114dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e49c60d-450b-41e5-8ca3-ac4c60d03b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.46.109.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd75353c-bc89-4773-84fb-fc0ac6b057b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.208.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9537ddfb-fcaa-471a-a7e8-74cd70444386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.84.87.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d77de6-9bbd-4972-aca3-2424ab08de55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.0.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d08dd-2edc-46a1-afd4-555ba51d269c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.111.182.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dafc19c-5210-4ecf-bdd6-9b1323959b40", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.109.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd28b36-8e68-4775-8e2c-739012d06f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.93.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73897ccc-6f69-48aa-a778-be7e78815e89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d32704-6772-4da9-9360-e084b5964ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.246.41.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d94de76-190a-4edf-b01c-e38917920707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.26.7.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5003aa1-ae3b-4c01-b5d2-a6a67b572f05", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.34.14.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3949ab3a-6365-4017-b13a-f8f1f829b3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.114.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22edc40-490e-4392-8e8a-727e76d3dbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.132.5.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6176ad-b9d2-40f8-b0d4-8350b071a22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268840e6-8589-402e-9cac-0f55cccd2b94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.124.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0945194-6826-4b26-aa95-0759a76c905c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.251.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3212027e-f634-4f40-a59c-1c631e7887c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.3.63.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c69f13f-70de-48ee-b9c3-b6014f0adf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.41.181.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d133934-392b-47f6-a44a-dd7a9243b95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.55.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e144f7a-1a4e-40c5-90ed-3c087f66ec9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.6.44.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2406b9d-b155-491c-9d5a-36dd18ce3fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.104.129.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ca9715-0dfd-4e41-ae76-55a7d45fb570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.104.83.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ba290f-e6f9-40a3-a091-aaf2bedbcfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.102.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42f997-8686-422b-8aa1-ffc6e3e0a075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.166.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5238cb3-20d7-46b9-a08a-f7891a81944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a82646-6b7b-42ae-b33c-2a9f62fa04cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.246.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5151ac9-d1e6-4baf-856f-dea6dd124985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.186.7.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332080a4-9b7f-404e-b3cc-267bd87fa0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930f291d-0161-4846-b18b-3c94277af2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323bd645-4dfb-48e1-9074-21b9a57652c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bedd16-2132-45ab-9b37-f0f84880e94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3028b8-dd9a-4442-9ae5-9cd4770d3172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db241dfe-d2f8-4e3c-8fb9-232e42e9516d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0db3b63-a537-4a70-8684-bbe1271bc5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b99211d-5aac-46f5-9d33-fceb56f3f9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06805d2-8c13-4f60-bb5c-23444eee41fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf9e92a-aeb6-4e3b-93f6-89ebf50d7ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7033f1-f230-4e0e-8bd0-ea55320f3b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a91653-1164-42ef-9fe4-ac6a7c616f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf938f6-c393-4801-b820-990544fc2fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8563f42-ba40-4a4a-8535-6fefc129371a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af11340-0c8c-4e33-9da5-e795c71e0d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ea5270-f73a-4087-acc2-85a8da2bc8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1d03aa-64ce-40e9-bb91-fe60ee47addd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b058bc-fbb6-48c8-ac4b-b42658263a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c854ffc7-f285-4dda-848c-1c5423b54496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38b227d-a2df-4ca9-ae83-ee223039329f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a81158f-4894-4abe-a131-879d692abdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691ddad0-c8c3-4071-ab26-5961d317adda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789626c5-9305-4afb-8ca2-7f6c7fe055e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c13c0a-2153-4453-8d1c-14de49b2fbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b5df86-3910-479a-bf8a-b41b029ca17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd814f3-591c-4358-97ef-3cc513b183af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a297e824-8d5c-4f77-9e42-87e128c6e0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9e6234-18e3-45ba-991f-3545ec61f3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df6f609-97ab-452b-bf3b-52499fe79b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8ed297-f5e2-4dac-acdf-56ceacd60bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090010ec-5977-4a80-81f8-2f10121a2563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db96382-1534-4db8-ae6b-1ea6dd222281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4836856e-7358-42ae-8ac2-d5b8cac2137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a966169-1a0b-4f53-99f1-279f35028405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e8e947-5f68-4ca4-9092-72b0cb38bb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2085b6-bf80-4cbb-8d6d-c06390559c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd899f9-d4e2-4de0-a9dd-9c1f2f74a6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0289be94-9e1e-4cfb-b99a-f08257beb83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52a22ad-e8a7-4eb3-abc3-ee168367ece1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02c763b-0ff0-4dd8-b421-1b867b6eee70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4092493-5dcf-4911-b130-d870cc1eb3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759e7fc6-5741-4274-a774-e673e9f5d3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e98313-252e-4d5c-8ca1-e13c537c39e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a75e01-75a2-4eac-b7f9-f641e0ca3e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386e733d-35e4-4326-88b4-2d7fdaa13a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fb348b-0561-44af-a37d-4e8436ed3b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2115e1-0e6b-4d49-b748-905c560f4555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119b888e-f64e-4f81-8689-55a9c7674b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f148e86f-1eab-4f7a-822d-cadf621f4fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e076f44a-deea-476d-9362-d37b986f3785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.16.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b72fef-621d-444b-9ac3-8ccfa67142db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.200.221.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d8632a-a633-4355-8060-99aa12b32fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.229.43.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b572b27f-05db-452e-bdc4-67cc34746c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e25998a-c6ac-43cd-9f7e-0cdefb6b5300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4540a612-bc0e-4c82-9fa3-d176b53767bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe052b0-70ca-4d05-a95c-ad5eebecbeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5a94ee-44ca-455b-b6d0-7bcf13445307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.236.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673989ef-af70-4447-a5d8-81ff3850bb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.185.39.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6b14a0-6753-4e2a-a0d0-97b0b0ec3411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.195.255.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d0f6c3-203a-4463-8297-c384acae1073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.204.233.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf73a31-8a52-44d7-a82d-f1c748594b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.107.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f96807-f5a5-4372-aee0-855efceb32ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.30.118.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ccf45-713d-4757-85d8-c7dbd8b8ded3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.30.119.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20332bae-78ea-4cbe-8fee-3760f3c3c409", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.70.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bb714f-88ba-4f84-877d-5f0b7a3e7b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.82.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf44b23-e344-4ef2-a7f1-708672714217", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.3.142.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8f68ba-73ff-445b-ac3d-22b29115b77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.203.25.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abccec29-72c2-4938-b519-9d463301a615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.27.154.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd876628-b0f9-46cb-8c71-d5a6535200d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.194.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd87e6ce-5f19-4968-a734-c02f4bc65d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.139.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde7d12e-6514-48c8-a3f9-82001a4f0abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.177.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690de7c9-0aba-4d7a-a116-c7fd58d28794", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.178.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2429378f-3627-4f9c-bae4-71cec77245fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.42.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f67c78-b0ab-4958-ac1e-b8027fec6521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.103.188.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84690ada-a98d-46cb-b9e9-ca3bd56e2263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.94.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37aa2907-6b2a-4a5e-8148-44da2e894876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.162.72.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d74f64-a1ec-4eea-a60e-3e63a049e67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.167.240.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5a9258-d5eb-417b-b42a-c1881421d3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e316ac-9847-4523-b4b7-be8559d858a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.184.54.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9df1d67-7aea-4db2-a4e8-9de8f7072992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.187.184.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ae9318-6e37-40f7-b13b-cf1053fca6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.27.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ea9a5b-c925-401c-a26c-51c2a73285de", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.160.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e104d4a2-8eec-441b-a2b9-8c7aa8cb0f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.31.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56de627-4191-4193-8bed-0237b433ad36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.84.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845974c1-9442-4b3f-b18e-9067252d7613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2480d305-fe7b-418a-a9bb-4dc6e6aa2fa0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.96.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9515129f-b40d-44e0-9c8e-3100eecd2718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa1eca8-1f08-4f7a-bd53-c4e0ce44b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.84.236.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f75434a-dcc8-4a61-8d27-939983ee8dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.13.25.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f062bd0a-0f02-4cbe-88b6-1a68d3c2701e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.9.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20fc198-5f50-4de7-ac8b-169ac63f7970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.163.178.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b481da3-b6df-442a-9dc0-31f60c0a1a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.169.192.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34310793-7898-43b8-9c4b-01ea4eddda7d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.58.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5f969a-5309-4ef4-9e80-8003a09add00", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.228.86.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c246cf84-b389-4b98-882e-9038183b3953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.231.137.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5138a69e-b925-432e-81e2-831ec0f0bc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.234.227.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ef0a23-7fe7-4a48-a2a1-f678fb026511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.38.8.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b81cdd9-43fc-467b-bbf5-89e486bbce3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.73.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a9247d-8765-4193-9993-a060569d5406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.144.25.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2d06ce-70be-45a9-bd84-ec6d2ed7509e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a2c3b0-e66f-4194-859c-35484ac1c0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaf6117-f7dc-4fb6-bf42-a45cd6f331ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f49c87-e74a-4424-b222-900d8ca3c374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.209.99.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9aa2e64-b55c-49a1-9be2-3040697624f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.248.60.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe8c9e7-87fa-4248-b494-85b94915fd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.28.182.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c313f0-f475-42f4-9e39-69ba30591fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f69351-2a42-4276-8390-ec4cf5597d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.51.70.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0c1853-6111-4bbd-915e-e55d1ca30b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cca5a7a-f03e-4961-b04c-30d36e06aa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e984fc5f-d8a9-445c-8cbe-3f39eeb1cc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e46e9d7-8797-4195-a97c-fc725f1a2d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2ce4a8-d29f-4d0b-b01b-2988ddb8f5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.97.194.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6986c3-d798-4011-9b61-d673e70d63d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.193.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a10d2c-d6ba-4a37-9ebe-051ca6d5bc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c73e3d-b714-4c5e-9992-34bd7c50e58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.132.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842743d5-7066-4b76-bfde-376a463812a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.217.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc3e2e2-5f4a-4bb8-a72d-efffd0133246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.165.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a422ca00-8c45-4b24-b00f-12f0304f3cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.78.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4261cac0-9ece-4f81-8ac1-f20b47913408", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.9.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992f6849-513f-415b-81ac-e40a831a0cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.57.12.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626b36c-81fd-4ee3-84b1-b048da2e2ecf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba25e564-3c41-445f-95c2-c9192344029d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.22.162.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318daeb-9a87-4163-ac5e-0563aec1d73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.230.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f27445-233e-4db2-bf9a-2b605660d615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.244.141.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c780c434-d13a-49e7-b420-640737783271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cb0617-a119-4d1f-854e-0d87748d9998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb567c44-9040-4511-beeb-99b606903b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0132f5ec-92ef-4621-8ad0-a8d6c99148aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a304333e-4534-4a25-aee7-872e41891165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39cf63e-b279-4a89-b779-96f4d7640b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c604ca-901e-437a-a1dd-445fb980c363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a07030-2ff8-4b07-88e9-03be2a77c36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d786a66-5399-4c37-9b22-abb81f2c7681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ee2a09-f4ee-4495-b629-2db95c87df26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3fed2b-9491-482f-be8d-ad47fa4f2f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79716792-ab02-41a9-8c2a-825fadb62dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0472b3c-746c-4e6c-a2ac-eceab44aeed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.89.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62d5d5b-8915-47ad-b3c2-2d0d30f86d5a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.121.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a09dd6-3b58-424b-930d-f6ffb699ff9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.172.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bd0d83-8fec-471e-886e-19324e55f36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439535e9-9c7b-4b94-a71a-decdcc743149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.177.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086e69bc-2f93-494d-a48b-c8ec726c39be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.167.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f4723f-2090-4516-88c3-4c1de9ab9165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.22.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4467d58f-4ca3-4870-afe4-3d96e04e33b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.97.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf15da9-b1d4-4815-871c-6b2e386400ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfc5ba-3620-4eb2-b565-469ae4dd5f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.248.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31a03c1-de50-4c70-bcd9-3e246c1fa628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.51.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e52092b-15cf-4bfd-9093-432d8a6c4091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.242.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc68d2e9-814f-4bb6-9fd9-500947a21952", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.74.146.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f805a93e-30e4-4bcd-acb3-6ef115f328cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b7d7a4-18a6-4a7d-9c46-9ed2150324a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0ea9a1-b8ab-4010-8055-765ee393c2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6946b574-3d14-49af-9986-700f10f61b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b335c672-05e6-463e-8014-a36b6f5e50d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3741830a-3793-429c-b6c1-1157b2990731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e932476-f9da-40f6-89c9-83079417de35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a84f4a-94a2-40d6-b3d6-72b75ca5c123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae59faf7-8b30-4fb8-9949-f27f7c602b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995b8be6-dc5d-4634-a264-1cfba894ce69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b158447-dfbb-48d7-869c-0a42b44a4f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b335f6b-c0ee-4a59-a07f-feb55c934bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bff9557-cea4-4e7a-87df-c1044c491e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8895a8-1ba5-40eb-8f48-782d1e131908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9083521-03f4-430e-a442-8f0c5d78861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f668818-5bbd-4156-95bc-066740951e5a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.181.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fed5fef-e47d-4534-a8bf-9fdffe068a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fe3dd0-b129-4d41-84b3-9ddcf0233ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f14e3a9-d2be-4453-949e-7c95853c9483", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.193.255.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cdbfcf-a655-48e7-a907-d321a323c955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.57.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f1f515-090a-44dd-8ecc-25ccd8694934", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.152.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5879301-c564-4c19-8ba5-75db28de7925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.108.128.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e54d73-cd8a-49e4-9a4f-9fcd66e6a13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.102.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab089c6-2119-4fea-b21e-4c952a0b422a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.172.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f76635-aff7-4a27-9798-99825517d71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.211.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ea7697-60e8-42e6-bd41-d44a195da531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.116.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115a8991-05f7-4552-91a2-7661de92a473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.121.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093741db-1fc3-4e9f-8ff5-75844e1b55a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.123.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1184332b-c44f-4625-acd9-4dde85dc73d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020cec10-983d-4df3-a4a6-39f72be31afd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.21.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf90c3f-8992-4fa4-9990-297d6e6898be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.23.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4730c4ac-5e0c-4c65-9e17-481ff95a304a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.26.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2c96d3-b883-4a66-a407-695f13abd237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.41.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8d0ff3-f3c7-40ca-98e0-e7db5eb73cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.60.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d88d46-81e4-4c2a-b657-05b5a42853bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.152.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4578f9c4-6534-483e-a41a-d2be6e5637d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.160.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2568480f-c733-41e4-b15f-94334f2a64dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.165.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6779590e-af77-4908-82ad-9f694ead2a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.167.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c56029-448a-48aa-8be0-d9e90654617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.168.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e17909-522d-4067-8b22-4c4c5ca25c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.168.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2e4acc-e36f-4a82-89cb-670699ff70b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.172.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787d97e8-5d80-489e-a85b-c81221184ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.214.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c23dda0-e16a-4032-9ff9-1d4d519166e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.216.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13db2fc-f0b3-4b4f-883a-2825e10e1cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.221.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3a55ba-048d-4a0e-85ad-472fda212a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.232.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0fa01e-e4fc-4e25-87cd-690236263902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.118.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685664cc-bc4c-4bc3-bd49-660e43c98736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.123.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f5809d-3c05-4e54-b9c7-1daf081af1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.124.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05aa03ab-bf98-402c-b6bb-ad8f10440161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.171.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4124983-2a66-4578-aee9-65589a9b82ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.214.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6591b765-eac2-4e96-8d95-63f6d0e26243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.221.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2216df1c-4b98-4af4-8b86-3fdab140fb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.222.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9696ad4-47ab-4ada-a709-e6c4889e4e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.223.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73d0be9-46cf-4424-a8e6-b07e789de03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.23.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce95e9ea-47d0-4cd4-904c-a73f3e0f41d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.254.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e77358-778f-4ecb-895f-27f7e0546a2b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.64.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0467e98-5b11-4dda-b44d-8a37c911242f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.65.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2c699f-6554-4f1d-acaa-41a5ea8423df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.68.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc0bf3b-2aad-4098-ae57-d272990a344c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.70.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5edac-70a3-433e-be51-bbd9458bbedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.82.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dd2558-fc19-4cc1-bff2-7c3208faab9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.9.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cf5df1-de99-4cf7-a756-0059aa8fa6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a23e95-f421-4910-8ef5-e938f773581f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a674036d-2a76-4b7d-973e-ffe1358ff738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce37e585-2699-4342-b299-489e59e36f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56417b2-060f-4a17-adb4-becaa2df8e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7202ea-3204-4214-8a3a-cdae97a6c7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.125.236.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3c5319-1f3a-45fb-ad70-2c72c3f8ec32", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.14.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160ef5e-bafa-4f89-8739-7cbd0460a99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.27.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4237cfca-06f8-42a7-b21f-a043fa3cd9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.109.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902c6a0b-6606-4315-bae6-d83c12c7a63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.160.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f20b2bd-6b88-4735-9bc9-ed2a7d730ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.67.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea47f74-0343-4b82-b762-2097d8eca96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2f89ea-c53f-429a-9d9e-ad97932a1a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874c9684-11fe-47cc-8c14-d91060cc2d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b1175d-22aa-424b-9a92-b45625a26ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07cc09f-9fe3-401f-b1bf-55d578875cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e54c35-3de8-4315-8221-4e59762966bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.120.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17b5516-7522-41d6-8c52-d1536287713c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cfde20-5e28-4ad0-984f-8da5bf32e21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c596df-b586-4c63-8c9c-5783fec4155f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac754bb-c374-4af3-8630-5c07ebbfde75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b86e8d-d924-4b15-a54d-a1e4a749c21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ef239f-5f08-41d2-8bb5-228958c0edda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb186790-0400-4aa5-a2a6-967827c46077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402e1105-c4b7-4682-bdb7-7ea4a7ad6be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7f1c05-0190-45a4-b6fe-ee060035e6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f8c581-cbf4-4974-bef0-5947265280da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab96f45-ae72-4f4c-ae0a-26507326d408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f055681-3267-4c95-9c4e-962e9b87e145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3cf54b-a6cc-487d-91d6-6ca9dabafc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefc14f3-2e33-4337-9f19-218265dd54d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb45c11-ba24-4850-bbf3-60f32b9e1ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393a8808-12bf-4690-8e8b-3e4057bf7a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be2a829-986b-4431-8c77-2aba2ee60c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a602ac-4152-4d06-adc5-d71545ad6b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0f2446-f435-4d19-9420-64bc5649f87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527edaa2-760e-43ec-bffb-2251fa8e19a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858965c8-8b14-49b3-8f1a-c93773cf86f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7774d90f-1440-404e-9b02-d3252bcfee51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecff1f38-5459-4c63-845b-2aea668729cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2d561e-b18f-4174-8a9e-0e2cd9289198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0434bf06-821a-49a7-bbb5-3313a9604462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60202981-f0ab-4d3f-87a7-077e121f6c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6bb20c-769b-4ea3-8659-e2000e09a006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0d0f57-119b-4886-b279-013221dcc9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffba58f6-d7b8-42a0-aaa3-d4db578dbf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff196f3b-42ef-4324-aac8-b40e135f27ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121f0c86-945a-4851-8d9f-e0d67fdd1b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b189092-fd92-4362-a966-aa8b185803c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa722275-41d3-4de9-ad9a-684dec401f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7d7cb1-28f6-4e76-af59-f66397645086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.0.9.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00857be-1710-4423-aa66-9bbd749062dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.178.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd77b274-f1ca-4056-a669-8c866d670e88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.24.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa62792b-df4b-457e-bbaa-c813b1ae0d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.73.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9d3c64-a285-414b-a0aa-6356b25214f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.133.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507b2881-a1c9-4fe4-88ab-c6c2bc17af68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.76.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d749740d-3d40-4388-8b9a-3257e600954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.126.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3812cde-8ef9-4b10-b707-63f48d326763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.138.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5bb261-133d-4d88-a0a3-16f118dc730c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.140.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc00615-11d8-4021-9b37-65f144b5cbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.145.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab998471-4859-40fe-bc02-e22d8b98a883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.16.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2160fd3d-e812-400e-92fe-c7c0cf12cf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.17.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f999c8-5445-41f8-bf28-aa384a70ddb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.202.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efffd01-f052-4c05-87eb-86eb473905a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.209.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe4359f-d1f0-4d8d-a75a-9c8723938cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.215.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50265173-6686-4b44-b724-52037bcf7bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.226.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f7eab4-f21e-4060-9a14-974b8c5b1b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.239.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00b5a63-4fe4-4cb0-ab6c-3ef5b1c6ae21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a676d587-3726-40fe-bd08-7e1256308b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.49.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f223f5d-a98c-4a64-a682-fd5867407802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.55.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f80e622-8da4-4984-8b1b-bafeb64a42f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.65.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d67cac-5509-4893-88f5-eb74f1cc7b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.72.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19765321-cfd1-48a7-8d1e-8c951bd40da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.77.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3fded1-cd9d-49f7-bd51-518b01e81501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.78.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d76c19-ef6e-41c2-96db-58d5d4aad941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b70605f-421a-4e91-a4e4-33676f69ea61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.92.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e652580-e0ad-46d3-9ff4-a820c64af3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.220.202.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07235ba5-24ae-4483-8c53-25605bcea959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03740b1b-7a68-4518-a71b-c30f19e7883b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.66.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42b5371-1f83-46a8-9331-a2b3e8d0723a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.16.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f113d38-8ed8-4c08-b219-945352bddc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.19.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b07c933-4b7b-4ce4-9061-6e9a72c451cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.116.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520fd358-2867-438d-8fee-6e23c021d187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.138.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0887f10-e702-4ceb-953a-79bc4a76217b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.148.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78230b2f-7d5a-4a80-a7bd-8570c29da27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d79261-4882-4da9-b124-0a853cc514bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.152.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff387a1-a0b0-49d1-810b-89fe0ebbc8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f075def0-c296-4e68-bc20-5717f2e264e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.163.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7170de3d-4c33-44aa-8b6e-47c58fd61f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.18.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc226375-cb87-42c2-9053-ebaffeb1e4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.79.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fcac7f-22ab-4731-867f-b6ed95cddd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.102.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14db64f-3c27-402b-ad85-189a5c045258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.220.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6982418b-3075-4673-9ad2-bacb3df58d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.255.103.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7187214-b927-479e-aba4-3cd834b029af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.255.103.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb8574e-aab3-4b71-9b34-50e51e2bc224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.137.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bd26c4-f3dd-4375-9c42-7e9cf415ec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.139.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a684b256-850a-47a9-9d02-284fabf98438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.14.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0314f02f-40d0-4561-8314-3abd27f710d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.151.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd2bfb9-d799-420d-8c1a-55ef72ec6940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.152.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03429c5b-5924-4f12-a0b7-bea2d0bb81c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.158.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3d7287-64d7-4f48-85ef-cb0b0722ae79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.170.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7909f65f-84cd-47d2-a713-1c2bda53738c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.177.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b295ae4c-501b-48ef-85ab-2c2b2758781a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.243.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dc0017-45e1-4f7f-9e2d-742b5639e1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.25.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e09d77a-2eda-418c-a762-a4950a93c7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27867645-7db5-462c-831e-d530e996a1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.52.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf46e0a-ac79-4fbc-a51e-a10e5998f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.67.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca5997b-8f05-44a7-94a1-8f7f5568ea00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.70.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e99e5-933c-4a3d-aba8-940f6576b1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.9.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879ab24e-a0de-478f-90e5-8d9bb9f40456", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.99.149.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34264dff-ae7b-44e4-acc1-4331eb22b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.135.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fed253-ad8a-43cf-90ad-f3534e9e8785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e35f6b-cb5f-4b63-a887-551c83f807bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d2434-f21b-4b27-9f3a-77d5eb0d1592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f7f27d-7ee0-48f9-a161-f9c2782c6947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa5d031-4b5d-40c6-9f31-95917b382044", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.155.134.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1baf10b2-aa3a-471a-8d4c-d4077a2c4c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf27b4d-c390-4376-bac4-beadaa6ea936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab9c7a3-c48c-4860-a377-0d20d0bef057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc08a8e-ce39-4f5e-8516-06a44d430150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.144.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85babcc-a5ed-4b7a-994a-4a4f3bb6c27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.154.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48feb1bc-282f-4b19-acb4-c5f1b11580ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.169.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b37f6e5-7a75-4bc7-8580-4238be09e023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.180.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32929a1f-6f3a-4d07-92b8-276eb79b05e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d334226-6fa4-45bf-8547-de15f981827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07b6c71-fa00-48f1-b6f8-cd95ed500d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b14dd44-45c0-439c-b944-2a29cd9bbe0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.206.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b45aa9b-7f09-4ff5-8752-d08e0f2a1f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.163.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb9507e-5e74-49e4-b4c1-aca3c7cc76b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fa6647-b0ca-46aa-b88c-1ebe857579c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7776ded6-ff48-4a74-80e1-8d5c01997585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d120bcc-0f57-481c-9087-e1dad928ceb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.5.240.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb8d8f6-3468-4c56-87da-9efa48bfc733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.139.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8803cc-5cd6-4871-8434-8970f4cbc5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.141.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691189d6-4430-4f5f-942d-2489b31f3a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.149.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2300cf13-3153-4d9a-a07a-dde4892b322c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e3a75a-82ed-4681-aa21-028eee31587d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.174.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edece51a-ab50-431c-a91b-2c4b4257f6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.180.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fe757c-6f09-40f7-bac9-f072203df957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.212.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47d818c-e45a-4ae3-be7c-abfe65d142ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.96.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c3f0f1-fb23-4ba6-89f8-e98bdf74327a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.104.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170c9928-8f41-40d5-9b1c-258f4ef3393d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.104.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f625f89f-84af-4357-af04-6137ccce59b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b537ce-e592-47ef-ac34-50fcb84d4e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e936ca7-1b22-47c5-8c74-7dabd28953a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759bca5a-3111-4eca-b4c7-dbea9cd5b73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96144982-302f-4003-a8f0-5001f9314d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3382fd4-59c9-4225-87dd-49e155d2b7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7983d7-b4ab-4ebf-b413-3a53bcf79d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2965ea15-2642-4e2a-8025-f296f96bb22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1014cc-eb55-4b34-9632-713c91ddb296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b372f8bd-bd7d-4b0d-9dc7-db638e3c1fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75888a7-5121-4b8d-a975-2d328569719b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b64ad15-6b3c-4145-bed3-8d6e335d6b50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.239.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ab6bc3-1d7a-402c-991e-4e726245a860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.139.237.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8879a2-855f-4899-856b-52a40b9f9217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.161.29.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1485fef4-7a36-45f5-b1ed-0c9d99ea0900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.234.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2559e586-159e-46ba-8ebe-ebf866bd3e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.194.125.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cef0f1-bc8f-444e-8d1c-70046f5650a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.213.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d9080a-d273-4e73-ace0-145a9554ec14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.167.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc51473-2e01-49d8-9377-bf4ecd75ff5e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.240.141.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823a88e5-cd6d-436f-8f89-0930c753060a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.64.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807e79a3-9205-4dff-b3f7-9e8dc192e035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.247.212.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af41f96f-d2aa-4931-909e-0d797d2b9018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.36.176.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ac3b1b-0979-418e-98b8-390617c63fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.63.196.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1f4eb6-3927-4544-b172-bea75656d895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9666a31-a149-43e2-bbac-afa8130f662e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.235.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622e1b60-56d3-4f19-baaa-1e3b1df171c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.21.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594cd1c9-bd17-4d58-94e9-16bda73f660d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.62.191.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7971b558-21e5-4620-81bb-36944d76b5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.218.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ec1772-431f-4af7-86d8-d32deab75830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dac6cb-171d-4a4c-8938-542f09fe0f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b4810b-06dd-42f1-ae01-bfed3f2766b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62acf8f2-1ea5-4205-a49b-967e0113bdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e792f35e-f435-4300-bf63-4c61418e03f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.144.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232225ac-6994-4344-86c7-0b9129e28f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.149.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d901ae-022e-4b04-baff-e45e04d3c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.240.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820666e8-97a4-4828-8788-88a48610412d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.12.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214f2e03-5930-4f65-a559-72794411fa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.134.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7e021a-7b32-49a0-9c58-bc9d2ccd0005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.219.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5012378c-31e0-4a50-85f4-2c9dcc3a2bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.50.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7a7d0f-02d4-4a2a-9a2c-faf7e80dc312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.62.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae26bf-c104-45aa-b144-5a9ce37a4389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.8.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5b6ea4-8090-49a2-9fb5-6c808c068ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.0.67.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe99435-6e5a-468f-aca9-5125380eaf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.219.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e7367a-5c63-44de-8fd4-f6153799518f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.228.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5133c38-7aaf-4c3c-904d-1ceb898576d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.250.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2208be-9243-45dc-9d4a-b27a4733b202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.124.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd2c166-541b-4af2-bdb0-59f2b46a2719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.123.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3655270c-38a5-4b9b-acda-f3051e1eb35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.163.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cefa05-9154-45e7-b6b9-d67991c036f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.182.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c966fd32-5768-4275-9b84-9a8b2f13c3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.197.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb6bec2-d482-4b5c-8448-c9bfa6e5759e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf0e241-09e3-4072-9d09-f67e5ee7cda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.98.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ed2fe1-5d98-49cc-b0bb-40c5506a94ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.136.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cbedfa-a669-452a-bea5-b50a52d65afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.144.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427da4ae-3dd2-45b3-8b60-7f48a3738bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.152.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a975881-b273-454d-b68c-e8f1e853fcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.162.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f86bf48-1e44-458e-8e00-6f9730c84ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.162.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd49fbb8-77b6-4aae-a53a-dd82a45a9c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.163.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e8a60d-a81f-4caa-aa52-8ec163054789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.163.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7373c5b1-0509-4c26-8691-6840368edf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.175.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b2ddcb-707e-49af-8bac-f30fbf114040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.186.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61214a0-e071-416a-a8d2-410687782730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.187.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2b269f-6f39-4198-b116-f9129b231f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df36e2b-1c1b-4a2d-b138-a2fbeb9c74b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9208b1c2-f6e0-45e7-8022-c607c62fa315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5511abe4-f957-49cd-90a0-67c799901f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd3fcf4-ff13-4223-ad05-92fa4bc09b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135db24b-ba5c-403d-92b4-ab519e3ba368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561070ae-f711-427a-b356-e9a84e600105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5584d1-85ee-4e05-898c-187d0cb02f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f25667-d7a7-4194-8a24-cfd78f12512a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06737225-72b7-470c-b4c8-8608c1d08eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b61646-7429-4b94-b002-9c106dc0bdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414c0ead-8391-4c72-a66a-741a9d0fc261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34ec801-c671-4e00-ae46-8c7fad4fe144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61e250b-eb52-4a48-b761-3714ce95f43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a32c9cc-4402-4059-a366-0acc56f59970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a186e9-dad7-4d80-87bd-e4da54179b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7163ed0c-6dd2-4ad7-bba5-963a1ab29f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c6399f-a9fd-4ff9-90ce-a7fadb92786e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7f9cb7-4b73-4b4d-8433-972c5adb7c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bf3ec4-4aba-4ff9-8058-c2e2d9f842d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae37d21-eac5-4fb3-aee3-bf790d34a34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66670aa7-0697-44e5-850a-95a826032841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300a50d5-916c-41e7-a5e4-cd95dd38a178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.65.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5eab67-5f29-4d1a-9559-4c0690a18c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.65.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1653bf45-005e-4924-bde8-3302e5d17545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43daf459-e8fc-44a6-997d-08f75f4ea4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8086c5c1-63db-4dc3-b3e3-64a7d8d7fd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4bed2e-c053-4ec6-8efe-cb2bf8d7242c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.74.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2315857-1466-4061-ba82-f5aabb861190", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.12.118.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053264e3-6ee4-44c3-88f3-4a7491029c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.126.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feebbfa1-d4e1-44ba-b87e-852e5539faac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.14.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973c5824-aaec-4c05-b9ee-2d7cf08d8034", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.215.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b37c704-2312-45b7-9f9f-8f252f8cabfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.167.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bbf9b8-9fe6-477c-bdce-3380919c2104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.172.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809833b4-4128-4e1c-9bfd-6957422ea7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.214.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdbd1f5-f955-4b24-898f-e06621f26a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.216.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b71c69-4751-4227-9948-38822a828c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.237.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d7d2ae-cfb1-4314-ac40-154f8cc1e976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.240.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83ccbb0-134a-486e-b1ad-8ed6069bd067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.250.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65e4293-fec6-47df-8a3a-388050bd847b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.255.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af92793-4445-4b74-996e-730f747c5755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3293e969-b91e-40cd-b738-37b24703a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.58.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818921b8-71bd-427d-acec-de3b4462e8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.74.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05a3e5f-65d1-4f2d-8c7d-00725072034d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.98.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeab1651-e561-4e9a-b788-b8f1d0cd0806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.59.229.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f528c53c-2431-40ef-9f0b-b72353faa6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4115ce00-65e7-463d-81fd-bb7d9f5e221d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42b4168-39fd-4c2a-a5ff-83ed7d522f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c840c45c-9979-4f2f-a929-ecb4da38c145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f07d4b5-85b1-42bb-806d-7ae3eff55725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24370ef-ebc4-406a-a86d-397434fe148a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88282adc-b21a-48be-9c08-6b20c4700d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730d49d1-44f6-4fd4-bbfc-ff942521ee82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411d6e4b-66c5-4c44-b8df-9e9eb19c0b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.45.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66f14b5-eb4e-426f-bf4c-4ee594011cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.97.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2287fb3f-4bfb-47bb-baae-cf51cfaee02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4f8f26-b8d2-4ca6-a678-c8e164f6d44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.134.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2f7f40-f478-4148-bb19-7b572d3ba5d3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.141.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f3f6f3-511b-4e32-90f9-4b77d3631e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.152.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad732311-beff-43a4-be70-a5afb10cf902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.194.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a82e8be-874e-49a2-982d-2a595722da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.209.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e814e3dd-99dc-46e9-9815-94ddd9627bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.209.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96b2924-7f8c-4d15-8966-153818990200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.220.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f0e72a-38da-4d96-b651-a4f9e479bfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda22222-59a9-4358-af84-cb9d74a16d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9873a29-8a3a-446d-bf7b-46142ee179d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fea315-fedf-4a9f-be86-fe11df4b728a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab299b3-7f72-464a-bfd8-faf1f31ea826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc415f4-a7aa-4a18-93f0-6cec49796039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc95c03-3b99-4fed-a022-30ec19ed70f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe4f806-9aa6-46a7-b2f6-221902d91cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83513b1-73e7-42c3-bf08-f4065424791c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef56824-6e55-46cc-9355-c88ca8c2634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57d3724-c058-4c3f-b22c-c181662a199a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c1fd57-1277-4082-b7c0-bd40a051d05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a701255-dec5-471e-b20c-215947f9b61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57668e8-3eb6-43dc-8c43-72025699cf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3d175b-2c17-45d9-938e-add52852ec97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83a6b3e-e567-4a0a-af84-ade78a646f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7760b62-9866-4d21-8dc1-91affc71052b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add6aa94-4d69-4945-9f54-2ac745bf1a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf656e05-d375-4e33-8d6c-775a3288df8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87da8445-fa19-4908-8fc3-930e1eeb041b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626e909f-958b-4735-9d5b-526623c98d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de63abb9-1135-4d2d-aba1-40c2048086ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eff5c01-a298-492e-a13a-6bd9e4db8543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d08fe0-536b-4063-b98c-0c47aae997a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2501e9a7-7409-46ab-b586-d385c02c856e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7983e8d3-7116-4271-8be4-724659e70e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad01679-851a-4328-99e6-eaa5eb999bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042f5e70-38bb-45a5-a911-5aed36e37701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed176f4-8730-42f1-965d-4f73fe363426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790a6c78-8063-4767-a99c-51e7ff019e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3c88f1-eb1b-47a3-b4f9-3139b1bbdba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda34f49-4f67-4a21-b109-4b70f26e719f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbd832c-bc9a-43d4-a522-a1129c48119c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedbea7d-0275-4597-a29d-4d84134c1ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f107f7bc-55ff-4376-8045-b81d7c7bf0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83a7d7d-fad4-4d28-ac3a-bf0753166d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946890de-b1c5-46f5-ba4b-00f68c6c6217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7304f6-82c1-4d35-aeed-4b59981bceef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea20525c-0b30-49a6-8e58-7dd90e449853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ee4b12-cfcd-4bee-b846-08f13df68fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b19a198-de2d-40bf-a41a-63f53f97608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e293d810-3586-40ca-8c8d-299b378a1057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b215196e-8efc-4328-a8a2-9f7c4929499d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c2523f-498b-4a0b-a012-b78ccd4226c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb45120-38ac-40c4-ad5a-d8a7ada92df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb7098d-8b69-439c-a14c-96d9dbe05857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c2b44a-11b0-457e-972e-71437e9c1cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af38341b-125d-4e7f-9015-72c623ebab8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff18bc09-82f1-45f9-95d9-ce4d9722d659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d6e82a-dfca-404a-8545-564f306d0241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543b6e7d-e716-474e-9bce-dc66d89e4fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9982d92e-2d84-493a-9ff4-4f252ae99837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccae1696-0073-4638-a32e-1eb1e1c93d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac9a595-c2a8-4449-a977-1d4fc66e4ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7110650-6978-4b8e-9881-47df2932deb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34f40ff-a0d6-4c3e-b1b0-d339dc6a70ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb76d31-da90-46e3-978f-5faf518985a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f8ee6e-c567-43ca-9a2f-2dd4b367083d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c87934-d6b7-4099-9e6a-5692dee9c12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6312d874-9a4d-4398-9e4a-fe8c09806e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7924685-bacf-4254-bbbe-4e23a971d593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c99051-f77a-4d5e-9ed0-ab702fecca97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d24561-5d29-4045-963b-c889c491481a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad8e451-64de-4bca-b5ad-b8571e0fbe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6854541f-c9c3-47d3-b69b-0bbdbacb5eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fac17f8-1cb5-45fa-9e22-472567f2f213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87282b97-a53b-41eb-8f3e-0d45c02e24a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e12e53-bc26-4216-9076-9fffd4531317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f57352-e838-4d2e-87f5-2d6f787bfc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df076e67-a5b3-41f8-8367-3d7cb800077e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fdc3e1-1472-46bd-8857-e46178d000c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f047a7d-fae3-418c-bd2a-67f6c3e5802f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51e54e5-f203-4f99-9c79-9da483ef1a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46339502-f9a8-4d4e-8648-0567798f538a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505ab9a7-134c-49aa-b7db-850a6c50f3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d7e7a5-b500-47a8-ba8c-2c1a24256e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df77a24-1d39-4e87-9d6b-1975b87ecdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b35cb4f-4081-4a4e-afe2-f832b9ec1cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac5d012-8d90-4c23-8115-a501a9497760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6312297-8693-4cd2-a4cd-b4009060d4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060f139a-eee8-4146-97a0-808efe815988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e30de16-6b3f-44d5-96d8-07e4995fecd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7047be92-b2be-4a2c-acde-a3dd6e974c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2752a2-830d-40ff-ad2e-2ffa012b571d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce71557-ff92-493c-bb6f-07f4e70c07aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9ab64d-61ab-4220-bfa5-8d751c5c5457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b57293d-1724-40fe-ad57-4f2e037bf1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ce14ad-6bbb-4104-b443-7e05e0e0b8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2d3493-9592-48bc-add6-db8c8f396201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c44dc7-eb16-43c9-87d4-d23ddb933b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045ec539-2dd9-4c92-bbfb-e3f32f153a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eda573d-928d-409f-8d69-d70014f956fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cd447a-2ff1-40f5-bdc1-eff565be80c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df1bf9e-78ea-42d0-aa20-70d7c2a811b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9a919d-1b76-475e-a3d3-ba003828e93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6508866-9424-4d27-a371-ed3671d3cb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ff3827-e936-4eaf-8412-7782b3dd4216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dda0af-c6c4-4dfa-9565-24444683daa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148cc1e0-a882-4073-867c-6f148c79cd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f863447-d5c6-4ac8-b496-d181b300e2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5688bc-a4ac-4260-a153-6c72b85396ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43c71ca-b5e4-430e-82b5-6c359c775798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d3b0db-39c0-44f4-82b2-39fb5a7f1b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a20e19f-b675-40f9-a0cf-a9f51eb54cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93a2742-ffe5-456e-8dc3-76d78105e114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79829927-f412-42b9-bc24-ee0fdcecdd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee25be7-a75f-47f5-a149-3bb7df5e7ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e738f82b-badd-404f-82b8-178bf5e9e1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781fd19c-d0c8-4fa2-86e2-4a6f438a773f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed45f47a-c6b9-408c-b039-ae9e9c561d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e827ad-26ed-4188-bb02-ed3927d10057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2c603d-0403-4173-903d-d6086de47a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63916472-3af2-4541-9941-233ac0488582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56182eb9-f182-4d05-a5bd-cbe3d695762a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5284970f-5b98-4c78-858d-90123519fb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d05e51-0171-4b95-9081-cbf051f15917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7768195f-1d5c-4df3-a05e-3c6fa6fb324b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d47a99a-163e-42da-b8be-7e8295429fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dba8814-15f9-48b3-8a50-d24f67262408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742cfe02-d8ea-415f-ac00-28f8a4eaf764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4666d3a5-fff6-4545-b4f1-91ef07fd4885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9d60d3-cf8b-45d0-8e26-ff0d63f23ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f550b4-5ece-4e7e-afa8-0a01a0ed7176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b029e52c-d86a-4f4c-92d7-788a742ebb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de811f1-2d55-490a-be83-d594b3cedbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d7ae5c-7533-4a7c-b88c-6a390466039e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9fbf0a-208e-4b09-b4af-0182a2a78437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da660b9f-6dfd-456d-a739-e117bf4d3fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54d8d21-9985-4579-a79f-0238a0a032d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f51a8-ede9-4551-83d7-1d0f1f81d322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5023e4-383d-457a-b320-8dbad95034a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a4b94-a210-45f3-ade1-df3f5441f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe7b1c6-8c2c-457e-8566-036ff7c82a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362e87a1-3797-4541-98a0-fa5ad1c16abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712a133f-0be9-47d1-a36a-64739ddde611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35f1f94-bc1c-4dfc-b174-2dc8bd04ad0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eea53fa-a244-4faa-a2d4-96f58815c11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6d91a7-6720-4b9c-a79f-4ad35bf97829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0b0e52-ea59-4a32-98f9-ba6360ba365f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e0f598-a04f-4fa9-988b-6a108479afa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb73fdc-9122-4f14-b5d9-46e5b3ccd326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaec2aa-039c-4c4d-9b6a-a64731a2ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e58122-f334-489b-b9fe-b332a4d79e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0470fd-c617-4e36-9dd3-45a1a782fdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdcf0e2-f271-421b-bb86-6853a97aae85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a522f69-112a-4a53-8704-e0a7ca466a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12f01f6-c5c9-4717-bcaf-4df2df67c0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b73ceec-18b8-43ff-beb7-3d9d8252c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bab65fc-53a1-4373-ac9d-bfc696e4f58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4175bfe-8a27-413c-b52b-1fbd1a87e977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74062507-c4a0-40a1-89a1-92215d3786e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3b9cd4-559f-4e92-ab96-635a1512c116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ea9d7-c9cf-40eb-982d-dc0d4e7c3f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58edc05-b30e-46f7-90dd-8d137c15a817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf46300-a18f-4e14-a104-bba1076fff88", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48072d2b-d3c6-439f-976d-c529b493dff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2c0022-4b4c-433d-b4fd-337c94692a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f842fca1-2603-4371-bbc3-56916ace890b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabfa553-50fc-45bc-9c95-8e05c5917c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36e30da-ef30-4627-a34d-4ff6254f7868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfc5b1b-97bd-4aa5-9df1-7e1f66cd23f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ef7759-5634-40c2-a2de-eb22542b105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0329c794-bbb1-47bc-bb7b-273a186e070d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12387f5-eb34-4290-b7d2-4b731d16e961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7260a52-0144-49a8-a04f-347593b32747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f78c5f-2d2e-4bbe-8d74-31975797a8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24862cde-dd87-4717-9bb4-eb109ae295bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed947ea-390d-4f78-a501-4a637cf429d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec117fb-92ba-47de-a7bd-f4e108887272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a610bdc-6866-4d8b-b48c-530ae8754fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3855ae9b-9e1c-4086-ab03-c35d9e036f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936c7bda-b7a4-4acc-8e93-d6f04377791c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843d1584-a196-486c-9d4f-287637b72c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954a29ac-5a5b-487f-8534-77236b2620f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa081613-2a8e-49c9-a180-db6bcb4e6aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac346872-f503-433e-8a48-180bf7cc7a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba3cc38-9b64-48c7-9343-e30ef3b66380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22881281-ffb5-4ef4-947d-8dc7e2e19da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330350ff-393d-43fa-834d-694065453059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc0b30c-073d-45fc-926b-9633dd307162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c5cf82-0cfa-4cf0-b0e3-494024d0f9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac8d626-15e6-407c-a2da-de1b34ed8748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04747ada-df8c-4c7c-8f9e-697343ca2b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b622377-6a40-42e9-acab-81fd3c16a18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dea9e3-8795-4b71-816b-45127f97bd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794202af-f8f9-444d-acea-798f1c1aded8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047e9fe7-7611-4f64-920c-926dec7be19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22de0aa-ce92-4c08-a0cc-67b4e0232377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf0ec84-346d-4622-adda-87c926980038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7a69b4-57ee-4284-bfc6-c86eacb6fc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9d4c2-f029-4141-9cac-3f87d8d19886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81948afc-232d-4ce5-ab63-bfe6517c2c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56882337-d2b4-49b8-a001-85ada36673e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67efe72-4afb-45ea-9214-b5213a7246a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86051834-41c5-41df-a442-cc79edfc1de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f6f7cb-93be-4ec8-8f51-b75128839f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ed8985-bfa6-496b-9bcc-8f5bcd989b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252055e1-0d0d-4e50-9385-9d3e8391d2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee36be3-7a3a-4c99-a555-b2c8a8ec30f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac4c2ca-93a1-45cb-8906-b17f5e6caf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04b86dd-e355-496f-be26-ce0901cadf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9228c74e-c4b8-41ba-8ad5-a89abc43fed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7119c089-9ad8-4374-b1bf-a07de6eb3bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f52b72-8a8d-4168-848a-547bfadc6544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7dc2e9-9774-460d-80b2-66eeda3640ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d49de95-7e61-4085-842d-c5d8d9589df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47938799-8460-471c-a8e3-5b5a3b60d82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd3e93-d071-4eb9-9d12-81455181f8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d607abff-c100-408f-9c27-e09113928d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a27fab3-939c-449c-8341-29f4d3528bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911c5047-c838-45e1-a690-35e185fe4e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86753c28-2307-4580-9d8b-6eeda01ae0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e41fa1a-7d75-4275-8f6f-db22071d5eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9fda68-036d-4d0f-a3ae-7c4e000e6385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c746d66-7cc5-415c-835e-86b8d0537378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4682235-067c-4ad1-bdc4-10f499a415dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2ef0a3-14bc-4489-9029-d435de7bf0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370b858e-24ff-4ae5-b2d8-0a20ac544635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd1e9b4-3c12-41ac-872c-44d0c1c77add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7d67ab-ed39-4b5f-921e-bcb9f00795c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe79f80-67a6-496d-a549-a4ea40b32ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1de1420-41ad-464a-b326-8b3af897a89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf5b6ea-eb22-4f51-805d-fda0082d737e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbd1f45-ef13-4748-b768-cd89b5656a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23dc936-bbf8-4793-a6df-8c9670ac66be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f62ffc2-c19c-4bd6-b4cf-c2cbf9ca0407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3063794-5ee7-42da-a49f-a13ff6639ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1046fe02-42f7-49b3-9f56-486e91e30ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb6542-c22b-474a-9758-e514ef361d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3919b25e-d96e-4e62-aafb-ec9dee4f0d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0096a2-f52f-474a-8bc3-5ad7016df319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6444fd-fc30-4440-94a9-7c9befb8f1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799070e-76b9-4370-97bf-99a7327348ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0e982c-b2d0-4e08-ac1f-0cfc797e9729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214415b5-8b53-4ec3-a597-ddd489e7092a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5782f3e5-e64e-4366-9072-91b1ac07fc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f4827a-5291-44c1-b1c4-7a18cd8b6324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c979b8f7-d245-4747-9440-3b0acfde2bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17dc58e-3039-4f4d-a862-81e340d220a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d840ef80-c561-4569-8343-0cfa1119a6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db119d24-2b48-4ca3-ad9a-3e182a5e735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80b8837-952b-4ea6-aa14-9791872b93fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b7d683-2993-4c66-9a95-e463de83ea08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7939ab-38a3-448e-82bf-bedb58385571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a2114d-661a-4be1-a2a0-e36130380fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b773366d-2fc8-4b9a-8073-d4b012279831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177eacac-338f-4262-b11a-342c89839c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b03f86-7567-4491-b155-ff4e928dc974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f385fbd4-d7ed-4b8c-b5b3-3ce4933b850f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad6ec7c-137c-4f0b-80e1-8db2ffc037d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b92879-7e59-46fa-a5c3-fb0b5b199ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d34deb-f689-4c91-8ade-a99c84c4d8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcc5c80-747e-4968-8e3e-92cf6c2b80f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c948716-0276-4fd2-a129-3f8c041cc91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51521862-88f8-4b62-9160-cec9d7a9ca21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c321930-d6a8-4956-ac99-b44cf2e11232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda32853-81cc-4403-b94c-e9af4a275d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822aba3b-e9d5-404e-90ee-121d5f43a543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c1982f-e929-44f1-8035-7dabbb027926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79ccde1-d326-4e00-ac35-69db0ae3d7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d58fee-7526-41f5-871f-2b31bdae7326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c2975-cedd-4977-9c5f-7020620f0d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd53fe1-a122-4752-a3dc-644fba1d8237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed6009e-f752-4acf-a481-9d0aaf1e4d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150d755f-146d-4563-889f-08be240ae54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becba0a1-03cb-4d7f-ae66-c9fb3f67f426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f5fa49-e86d-4127-ab18-d3af0e079d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811fa10e-9eac-48d3-9dc9-4de126591d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff0105a-7f75-462d-b4e2-bb7898e6b0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fbb2b6-f283-4c7a-9bbd-0d9e124b9d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c716627-0b69-4798-a40e-79215e8121ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd946c5-d617-4315-b815-c3890aeff23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc50ac89-2170-4e13-9a1b-376cd00559e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda38cb4-cd7d-4f0b-b02b-f5d4c2fa7859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dab467-e21b-433f-9bcd-429bc3152e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c94c186-1d98-4094-b359-bac7e57b8d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2686a9d-b2cf-4bc2-bb65-607e53c75569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e49e581-837d-4d69-b7da-1721cf7c6108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8ca14f-3b53-4327-8e8e-d9fe9849fd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141b7c69-b963-4401-b959-0c0a4df69b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392d2f9c-537c-4e41-a681-add01ab120bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb6639d-89ec-496e-b603-95e5b7712810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117512cc-0882-4604-9205-e86cde4e57f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f687025-8ea9-487f-92c1-b96a34461ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17769b61-0ede-49d5-82fb-c37adfac8f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2a1fe4-36ab-4d1e-8f3f-fd6bf2ccbdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2053733b-6d25-4981-af7c-be7a2c5388d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e2638-6c2d-46e9-968c-ac86f7dee917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a7b77f-587a-41dd-bd14-18d2f2c58553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d5d0bc-7ed3-4969-bca5-b4ff03863764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e501bdb8-4bfd-4b7f-a6cb-18056eca1245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a05f5c-4ecb-4832-b4a7-aee97d0e3c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d70217a-0218-4237-97c8-b062e6461a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a846711-ecb1-4511-ac3c-6177df381f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2517fe8c-ddbc-4618-86bc-1d0073a9281a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b57a27e-3aad-45b8-bf1b-378837780326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7af83ff-95ed-4f65-ac13-e8b4ad6d20ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b4883d-de20-4d72-bddc-19d7e664a162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a432b6a-7344-4e03-813e-739458e2027d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c751be-6d38-4b4f-bd1c-cd10012f21d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fd7118-8fe1-4875-8f95-21f8bd04cbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bb6327-bce0-4c55-9705-d46c852a6f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3ffed0-f372-46f7-988b-44f57d4839db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b732d2d6-13eb-4526-8828-52e2505356a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba67c026-b8db-460f-bb4f-4770e7c579bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fddebfe-61cf-4604-94f9-16b91506a827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb7a87a-5b66-4c9c-81eb-b8b1357eda1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eec58d9-53c0-4e1a-bae6-b18cde8e5127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fed5cb8-fa74-4dd8-9292-c17acdbb0425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b0e5c6-0bbf-4887-b196-675aeb64f466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f019d3-74f5-4e97-90ff-242f2a406116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a01afb9-189d-425d-b144-ecab9785c587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2520bf6c-fa13-4714-b42c-1a565ec14ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8331e2bc-ad53-46c4-8634-c08734ad92ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8498bfa9-0cc7-4789-868b-dfb74ba02c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8594ad7e-161d-4c14-b6d1-53f8a999b285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ec9f23-8131-4e23-8045-99c1f26af661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6683b5-2ae6-4e15-b22f-9e0037e89b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e05870-62a4-41db-9879-e1255d88e131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74470a26-593f-44fd-87e1-3635ae115a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4701b11-9aa4-43a8-b986-ad1d9067e54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2467e2b0-a1b9-447e-abd6-14c0f38bada4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85c1e12-646a-46bd-bed4-bb1ce3f5adff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9610dd7d-f40d-4179-ad71-72cf86b3be82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b80afa6-96f0-4100-85c9-9e14e23a92de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad0e165-b6f0-4115-89c0-dc7caa399ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d288fb11-7a28-4bf5-be89-6171a7ffbbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d6e4c5-cc93-4768-85c5-9c2ab600a7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb402d7d-7406-478d-bb76-2482fd475840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd2806f-2591-4d14-9db7-a61df061d9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1dd1a6-53fd-4845-8860-9259983d5284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9855efe-4086-4fa7-ba02-800207002f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f4f872-dba8-4583-96b4-305ea45d60ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2d6907-7efb-49d8-8b7e-dca22f4f5690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a6285a-68e9-48dd-99df-6f8d293ea35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2e5272-ce17-449e-80bb-dc8785dd55a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e6ecf8-6b42-4539-b90c-4cbc4b64816b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d06a13-785d-43a7-980a-29893cd74c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c07c0a-3204-48aa-8d02-09cc5d7e01f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8434b8f3-67b8-4de0-bb52-96d36df90cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e4d04e-9f2f-4716-8011-90e9a65487a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afad117b-a4e1-4ece-82fa-86a5b56a8c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2397d1be-3335-412f-b45d-70b2ebb2bf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f88d6c-1d04-461b-8f55-99aaa120110e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75730e69-eeb7-4f20-838f-26ccdf986d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aead2a3-c01b-451d-b603-7a7a671a3307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4112936d-f534-4310-ae1c-43a0915f6135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c251ef2d-a55b-4a08-949a-87ea55f5bdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7ed63d-ba6a-4d09-ae85-808458b7cae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.49.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124253d1-8fb6-47fe-a5fc-bedccd5bedd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.50.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1825caa4-a23b-4cf2-8d70-adeaedec2a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.74.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3a0162-7f86-4374-b3b5-c340bd8b7a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee36978-7fe5-4f0f-ba60-f34f5351690a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f2d9dc-25aa-4693-b2d0-8e3877d3a2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df76111b-e349-492c-a788-0410e790e18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf1da36-2c31-4da9-b426-d5850680cba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c4dc4d-27f4-45a9-810b-2edbf2f98b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36365bbc-d0f4-4902-b422-771d290162f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd284be9-d013-48ba-8dbf-94e9963eb03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.11.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1c3c29-d37b-40b6-8e17-df2f11c19b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.227.86.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5b83fc-0ed8-4951-a1dc-9ddfa8c44493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.28.232.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cebf8c-094f-4b50-9615-ae174cef4c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.5.1.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f76c69f-ca22-4584-b309-ebff14c854ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.241.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1033566-d70e-4f8a-afea-270ff5e2d873", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.74.87.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd5a161-4e84-4fdd-a75b-f5b6de69af94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe3a4d5-42a6-4ec2-b515-7cc6100e49dc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.150.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84064005-8530-4365-81ca-bae8d88189fa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.157.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3953e50e-74a7-4674-b970-abea1de4a694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.226.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7eff92-78b9-45b5-b196-59c1c5cd9df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cccd82-2d03-4710-bfd1-294e0db94485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18090a0-5662-47a8-b559-3cb575c10b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d848028-c120-4394-bdea-55c0984aa1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc1fb3c-1850-4f50-b647-49484b566874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bab83d-50fc-4135-bf76-49f465010a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f39dfb2-68ea-4386-94b8-9050b68f8222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6284c410-a901-4a95-bf1a-eda8bc2cf1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4af8a79-4c15-4936-b5d8-3bfe5b1986de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eff33fb-4fbf-44bc-8d10-8c0799f0805c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c2e66d-1981-48fc-ae9e-fe2dd23d0fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf42386-8992-42c1-955d-f9345904a433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312aa03d-8edc-4dc8-aa51-454fd1ca26bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d72044-758a-40b7-85d1-13d6e9cfb20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375872be-511a-4a3d-884e-5437014e7261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aefd0f6-8188-4339-aa9b-8f5735e86557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb70309-e1ba-45f7-b5e1-454f9e32c8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5fcc9a-b87c-4eb8-8e3e-67ed717a0d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4635dbf2-c774-4180-81c9-3c0418246130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6e3e2c-45ba-4dcc-9dd0-c3d2f32c5d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a57af1-9f6e-4d95-b838-8d7c7f74b11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a65baf0-5d86-4841-b5db-103b4552c7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6adb63-99cb-40fa-9516-c83434ef833a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5ba9fa-ecb3-4036-b084-60837c2ed4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1f68e0-6cf4-4d9c-bea7-ca38805dcb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8c3d4e-f414-469e-8e84-e1308b889c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6303d9-1d71-448a-9cea-b5cfb0b205af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113a6363-e7d7-4dd3-b94f-ab5cbbffbb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e190371f-1ae9-4b76-a983-7d6cb89ae62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828664f5-f2bc-41e6-80d4-e40573878950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eea0e4-7e56-4eb6-8271-9e7d8c46043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24660d87-6d79-4c21-9ecf-a7814bfdabb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117ab55b-d939-4681-8052-02ea6f3bab22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bcd94e-7c1d-4b8d-9e0a-ec9ca72c7eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f21e21-a5e9-42a1-ace9-64469b4e5a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2f014f-9890-4a6b-8951-1bfa84149b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f9fba6-4d2a-4f88-ac85-703688ab1049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528d6458-1ce8-46a3-aa5d-e2a9b07b41c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a699731-af0c-420d-bc72-6d47c4f3ccc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca784953-5112-4440-bdd7-e52f97465a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32574d7-69ed-48ec-a259-6a9acf46ebb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2e38c6-1bac-417a-95a0-908ed27cb77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc167463-b8b4-4bee-9b9c-21d84e94fc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a02bd93-0e27-4fb3-b3d1-024762a08392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f6fa33-9439-42f4-b91f-2c6875daf967", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.20.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf48dac-99fd-43f5-911a-7d5dbafddb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.16.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40d05ff-40e0-4520-97d8-751bb49eec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.216.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a6ce9f-a09a-48bf-ba4d-dd9bf130e62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.29.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f702833-56c7-4188-a689-5f97d78e17e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.242.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f385e77-b1e5-4c41-b83b-5f91f9813088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.0.149.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d9ebfd-e9d5-4eb7-9fe6-c2e7b9d73146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.172.75.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd894c2d-ccdb-4c3e-b269-a47c1e296636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adc0118-f0ad-4f67-aed9-65cad9cac213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8926ee6a-65e1-4b99-be22-4757fb4314c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d37fea-1dc7-448c-8db6-329ee714af60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91ea928-8c37-4d57-bfbf-c70d62d4c840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de73919-12c9-48e5-95e4-c3fdbf524d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fdf6c5-9e9a-4520-af8c-c10c3d5e4fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa90d0e6-cd26-44bc-bac4-5de2f348569c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482375b5-3a1a-4abf-8ce4-15c158fbc829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedac2c3-c9cc-4732-a75e-43a093a6d826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7241a11c-ee06-44c4-9a04-50aefc0438be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065039e8-fe12-48cd-b035-2f33bd16f982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6a8301-26fa-42f4-982f-00776e734086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8d9843-5fc0-4990-a5ce-7517c6bd3ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccf8356-93f3-49e4-a1d1-8b7045c24f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5771c47f-0edb-41e2-ab55-258ce5c68e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33427c60-2946-4b16-a1ed-3b1317838e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0605af0-cd79-4a86-be7a-ac9f372fcfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73953642-5b28-4c9a-a3d7-6319a612fe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054f1d61-34be-48d3-906d-ec9daabb46e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06422dc6-1d6a-46fc-aecb-49c76111e1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f96da1-2033-400e-80dc-5fcbf0755989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2b3e27-38a7-4552-a457-4cf6289c25ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc1ad91-11dc-4802-97b3-055ee2011f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846bf7ba-17b8-4986-bf59-c3d8d2e24f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72db7a-7b25-454c-b593-b25781f8c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd2b256-f945-4693-88c4-3f801efbfba4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868dd07b-005d-46d4-832a-e961acf2323e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a069a5-56a0-4974-8917-353fe3079026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc863dd-035c-429c-a747-33fb7c9169a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b851eb-5ffb-42bf-9b05-83f6d636b55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0fdb2e-cfda-4ba0-b593-e8cf58083168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a262e6d9-507d-486f-a6ab-f545b7727791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be855ff-4c9a-4f05-9848-7b50368a02f9", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496a7f7b-cc90-4064-a4e8-c8f39d66fee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3f36f4-c73a-47a0-8a2a-93394b3acdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e1dac2-f0bd-4a39-a1e3-623f5b29ef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203032ea-73e8-4590-8666-e628fd241e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20055651-a3b5-4325-b2e2-cdb47d6a7e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdd6171-130e-40a4-9946-e7e99f67b9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4fcf78-e95f-4e1e-875b-200b90ea5787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e2d8f4-f587-4575-80e8-874966b34b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf9cb7-cbfd-4e9f-aaa6-0dc23ea825c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08215dc3-1758-46a2-bd9c-f8399530a9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd930de7-ea16-4514-bda4-7b992085d715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b3d5f5-2dbb-46f6-a350-ca3cf0b60185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d2a9ca-9b60-499f-a335-4ae534c2c5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a88218-796c-4764-b17d-5d9b1c33b655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75181f9f-8325-4fc6-ae45-46f9e518cb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ba82d9-084c-446a-ac2f-89eb39c7f4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a86fe70-e457-4731-89c5-e7c3ea47864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559686c-baca-44cb-bf64-8b0e6987b4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17bec84-3f60-4d18-bb10-5716143cc561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a475592f-7bfd-4aee-a061-7a48206b9660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1965a4-9d2f-43f9-b43f-67d74ecc288e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.192.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b535f7a3-9285-481a-8f44-ed011d1f4649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3740765-9e4a-44d4-a148-093c581eb401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5505ed0-72b7-4b1f-b2ce-af19d9e89270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca63c0c1-cf5e-4a40-9298-05bed5da56cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ddb19f-f693-4551-a8ac-90f08f91b7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc7268-4da9-4309-9408-aecd98f42641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3a9a43-1f71-4d1c-a38f-b79324a9c9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d96259-f124-4fab-a4ac-f5eff10613ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bb270d-c249-4522-806b-74ffa42a0995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2d1246-177d-4cff-94fb-773fd1ed9919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47b23a8-2903-4169-bda8-00132afc672a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc117ff-0190-4975-be00-a18c2c780b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bd9b17-c938-4197-a6a8-380470d309b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d205cf-fb9c-4358-acea-11049fa3e08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5f1051-c2a1-4bdc-84f6-f8127d8fcb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5034c74c-05c7-41a0-8a82-c0a206532c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a983579-c96e-4d38-98ad-d33e9175122e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fe1513-d869-4f91-b487-dfe687805535", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbab25f-383a-4ab8-988f-f8e0f0a3a488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d79e1b-eef1-41ac-b524-141a6c330370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d6046b-739d-4c34-91c1-94e757df9062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875a4de6-931a-4c42-9e59-df2f51053385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173550c2-6d89-414f-b538-99b2de767c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46132441-9e37-42fe-a777-5e8f367a2056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c997827-e8d1-44f8-be52-6d9015c5a44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb8ba42-8bf3-40a5-a4c3-ac09670d8150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3534cc-bbe7-4adc-ac19-da5bd49cc76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd25e47-83ab-4523-b5bf-cd9dfd329c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e62989f-eaf3-4593-adf5-dd11f669f30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac53f52-6e8f-4ed4-a550-efb889db265b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43936c53-7c2f-433b-a59c-75f42b5ebea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757a2f7e-ffec-4550-8cf5-4455cb78b10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ef02fd-5aaf-4136-b657-6c937d93d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e2232f-929c-4d7b-8edc-d9ab65014fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4103e542-e6cb-4fd8-8479-f143ca9f1d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4312eb3d-58a2-4d2d-98a7-118382bf7c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e56805-e0f9-47c8-aca6-0b5ad9c36137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb2a635-3602-48ca-9c06-395db3872049", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8248bf0e-49ef-4126-9647-cdfc17251ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6efc75-3272-4db0-9982-14033ef3cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e912584f-15e0-4d7b-9c45-535a25030d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e172d1-a215-4ef7-b5a8-d132a559434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eda2ad1-8f15-4c9d-b0cb-4d9b725f0128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533c2626-0c42-4afe-8d2e-c52136d1282f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dd1762-b7a2-4273-90c6-f1b5bb382916", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.238.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b95e20-8d66-4087-877e-27f8d899ea7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393fb3fc-da4b-4343-8de3-721915e57289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bccc3c-3df8-48e1-a495-9427512c20d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7424bdb9-1c21-4889-b807-5426b1cde74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d6d9ee-0116-4960-bf3b-3c782130b93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e27ee82-6af4-4e22-a96b-87dc9c1a0586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663ce563-6e2b-4bde-95b1-d05001821456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f2681b-4a23-4f69-8e73-b571b10eaced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4178e45b-7ad7-4333-8f03-66fcd3f81dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a26142c-98db-4f75-9060-77ffa2d4cb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.172.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ba7289-c84f-490a-a411-3bf59d43421e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444a2078-6571-45b0-9716-91af2a62ad9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677569a5-6dab-4a6b-b387-e9fd153c2979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2b3747-add3-41e9-999a-bcb73d49cac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.56.3.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc53bc7-98f8-47e7-bde7-1e98727ac88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.56.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c29c55e-4ca8-42bf-9a10-ec6b876ff124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.78.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4114dfcf-f052-4461-94eb-552e929371c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.79.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9b2f41-cb54-4d04-a081-53631ee319ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.89.218.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d493b8-f6d0-4d9f-93e0-830a6589c391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.119.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fb41ca-8a13-4bfd-b74c-fff5a0dabfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.117.199.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adb4c9e-2da9-4656-b49e-c68c0322233a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.124.192.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90ee846-86e7-4eb1-a21a-45c6014b7e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.144.245.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cea3fc3-c7ff-4076-8c77-5584a8080e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0a8dd1-b125-47c6-8d8a-9bfca06044cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca31834-e8ab-496a-931f-aff57953f1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba325f-f120-45c0-b8ca-7eb38504ee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7b4748-7996-452c-b327-3c703dfec505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a69817-f9a5-44b6-bd9d-ceefb83dfa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8276d5a-8345-4d4c-8cb8-9092a3cf515c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d1aef5-50f2-49a2-8a32-62b7d9c40267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f921a9f3-728b-41f2-931d-93029368a5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fe002f-dbc9-4fe3-8b5e-55e6edf0a5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0619634f-dd93-480a-950e-00e84f42d4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc9d34b-aa82-4082-a696-281452d85178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b63afe-c489-4b2b-82cf-3a2fc25b515e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da768de1-1ee6-46c1-b28a-0dc31ef61827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76520c37-533e-49c7-835c-6e47fc4f3ab4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.244.68.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631e7d2e-c284-4c21-ada7-fe68bab02cea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.54.100.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea86441-12ea-4dc7-994c-ad131aab29a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.60.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0356036d-5848-4d34-9561-e9e30dc26164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc18a2a4-20b6-40ff-aa3d-f47429bd0225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab9fea4-bd7f-444f-923b-deac6e15fae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003f809a-2134-4c51-adb8-8e930e998327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8aa4b5-b0a8-41ae-8695-b94b04ff7a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee8864-7482-4aef-a9f1-a4ea6eeabe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97f5b36-089c-4230-afe2-50b3eee0abb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f90289c-db18-4e4f-9be1-325aba9e5eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bf9266-3359-45b2-b3cc-7724f5be45ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58927a3c-0909-4249-befd-12cec7f878d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c54f33-6767-44a2-a369-0ca1a9f283a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e391207-1a98-4c8f-bbfe-644b76fb536e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6d998-eec1-419f-929c-ae927c7dba01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adc513a-d78d-4b00-8319-3ad2053f8303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb9b3b7-6cee-40ec-b939-6eed51449656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3c075c-7c7a-4cb3-85b7-3e968303c66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dea17f8-cb7e-4604-980d-8f42183f7a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312ad6b2-ec66-41fd-af13-077fdc179639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06519d50-670c-47a8-91a0-89a699bc2036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a210ba-7d41-4b36-9774-5c35a668f056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d421f644-e3d8-4111-b855-2b33ea75645f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d907fd-b7ff-45b3-a75a-bf03f9b8c794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9b6f82-f698-4909-8847-192ccc5be867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ef3f8-26b0-4336-b6ee-d471319bd62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774cab7b-dfce-4424-b83f-3daae3e5d092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685236c2-210d-4ef6-bb29-ffe4289b3d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f91fb7-12a5-4a8d-bad0-b57a358f1dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042a1e5e-4d9b-45e5-9190-87f89ffca454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccf1a88-c894-4498-a90a-3cc6291ef3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6ba86a-d370-43dd-846f-236dcde4fa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.254.25.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f2cc46-da0a-4191-a998-df018f153a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9e5abb-158b-4e1f-b311-6bce138deab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.197.232.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeb36de-f1c2-4dd7-9073-98dd1c34986c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.226.177.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10555d94-0003-4ece-83dd-9374cdb44233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.233.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dc2a68-cfdf-4d21-b63c-2bbe086e1dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.50.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab58963-a125-4466-8b9c-8b3493529602", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a198e0-6395-48d3-abc6-51f0af83ff63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.56.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d2dc4-b5b9-4164-9acc-27a9dc6f4833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.0.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f293ff69-69ad-4bd9-9bbf-910cee4b62c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.102.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c63a07-f6af-412b-85bd-70e2a9b62ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.12.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c5aa97-f664-4c56-aa3e-dae2120a52c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.156.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27edacc-0101-413c-ac6e-a1371537cd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f17df55-87e0-478f-8eda-2637fbd01beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.179.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f272d4-09cc-4655-a9fc-b9a08cdc8aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.211.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ed97b6-57dc-4eb9-a0b3-915d8633eb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.217.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c92e756-0e75-4f3a-91df-533a42e7d8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.218.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b5511c-dd0a-4379-a389-d6614ed5125e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.221.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc083a1-2d0d-4223-b186-1adcc486c07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.234.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c64b3b1-1a0c-472d-8db9-8e250fb2a96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.239.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e24c449-c3c7-4e0a-b463-93ebdbc485ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.56.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4aebe3-e9d6-42fb-82b0-2e79d3dcdf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a7b7b1-d121-481c-b121-487c238c4b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.58.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d791ebd-95e5-407e-9b35-0b38d40cb7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.58.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e92c32-e6a6-40f9-a8b5-12aaca72b1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.60.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cfdeaf-1980-4235-8af2-4e932052fd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.84.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638c6d62-4532-4437-9f12-efb7efc12426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.85.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8d44d1-277c-4340-9ac2-087e3c0656d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.109.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b586eeb-55f5-4db4-b553-e9d4f217ecfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.111.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f65da0a-963d-4832-bd29-c38eeb9e6a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.128.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f40d639-f84e-41b3-b375-043126b6fa94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.132.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0384209-9479-46de-987d-0629cb5c1b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.219.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b337a2a0-9cf9-47f0-94db-cf283344a853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.4.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04adc24-a367-4bbc-9b24-8af76ae56b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb02628-fdce-4904-b7eb-a730a226fb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.87.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4b432c-b040-4ff8-b947-26b37bf0ad97", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.49.105.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f32b8d-9faf-4008-859d-f3a196f01407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.50.103.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c986338c-f5dd-4864-a930-6608aa6459e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.90.131.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfacadc1-05fc-4b27-9cf8-39fdf8d09b01", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.101.198.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c586b6-04c1-49cd-bb4e-a6f62ed8da76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.156.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648658e4-8602-4918-8e3f-65d54a837e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.21.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cd82e7-c955-418a-81d5-3c6fdb687915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8fd627-77cf-43db-b145-5cf5811f2676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be65112-786b-405f-b1fb-8c3d48918d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.87.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004cd640-1c94-4a8f-bc84-2297fb91cdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.226.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baff430d-8439-45ab-8456-9509721f5d67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.0.37.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d90a6b-2fdf-4acf-a094-5854762e24f5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.138.153.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da186b5f-1969-4549-99ef-b20338327d34", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.192.37.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e64428-973b-48c5-896c-98891626df25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.13.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b75a524-ed6f-4809-983e-4cbef79e95cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.176.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d8811-7357-4986-b717-57798863917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.188.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5414c6-8a99-44a9-8158-82ce48c1f476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.190.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e26e6a-5710-4864-8369-bbabd8b51611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.104.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d651b688-dac2-4496-8a9a-ecd6f14a635b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.111.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90e6f4d-cd62-40ca-90e8-aae536c1e21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.114.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7814d3-0906-4805-afab-2a22b97b62bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.115.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed31042-81be-46b1-9f6f-613aeec94e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.120.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b879326c-0974-4153-bf69-1f1c6ecffee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.122.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c573ee16-ee8f-4c0a-b9c0-a05c0c33e9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.138.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de36277-4492-4074-ba23-d73c9994486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.142.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780f6ab8-1603-466f-8a9c-69e62cc31eac", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.154.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e626fb4-cf90-4486-86c1-aee837c02ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ac9d4d-42ed-47c3-9cfe-6e385df00bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.160.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb584787-adf2-4b55-80ae-cbe9b607ee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.164.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dbddf6-84ea-4ad4-939e-e904e243096d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.169.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a37a03e-996b-4057-ac3a-398ad9a56f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.175.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70085545-64c0-4c10-925f-a7a762cb90bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.180.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83e27f2-bebd-43f9-a5b3-15b30a377dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.185.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b950127d-7b1d-439f-bddc-a971b8f6ec0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.201.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe7740c-f8ae-4188-a6e7-6b7f81f09f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.207.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e99187e-4fb2-4cc3-b6fd-b2c59ad1f1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.225.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327437f6-1664-4299-a10d-f4d9d80d86ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.232.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dd4741-d9c2-4c52-a4b7-bc027ff87d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.236.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47c97de-2b03-4cb3-b192-69335a9f4510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.96.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644bf7f6-a2d7-4bef-a768-cdcc2393e266", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.144.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b092212-7bb3-4fbc-b55b-2e19d2392d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.154.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec277d5-dea4-4962-8936-d79cf72f69dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be2af5c-b9f2-4651-a3ef-3027649de0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.194.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b239a9f-0240-43ff-acd5-5ad82573f040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.203.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f9034d-2ae4-4dc1-b0db-50ac0b8d2e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.219.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7b647d-e5a1-4c0b-84e8-632ef242fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.228.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3ebb1c-1940-4e51-bcce-ed9a5a98da56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b535c1-7687-481c-b772-63ff3f4bdcfa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.47.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce2f9e7-7c46-4eee-83f0-c757d4db7939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.70.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39143f21-765d-46bc-b5f5-af32c2a50848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.81.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0893784f-5a21-48a0-b96a-2588daa29b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.82.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04dbe48-b651-4bce-92c6-1e46b08adf98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.69.61.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82e952c-9e80-4a3a-9bc4-d168bd1eec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.123.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7df77bc-ce0c-451d-ab30-fabecab145e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.15.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36495068-3a88-4082-9b48-e007d6fa7d47", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.20.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5453b13-bc53-4f51-bd5b-7f07b3b5e3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.225.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4960b77c-0e21-4244-8c90-3f9426b927f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04de12ac-7925-4d95-a3a3-d986765c4814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.230.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8265938b-25d1-4841-b5a0-2d13dbc16f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.239.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2fe960-f9a3-4768-a2ba-cbf650ff9604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.82.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe96e4cd-868a-4115-a94f-54a482e64330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.90.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10298e23-bfd4-44c9-9803-7edf315cee30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.93.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3630b15e-8fd9-449d-84b2-6d9dea94f81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52febfeb-914a-404e-acd6-98b80f339826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f842a34-b093-4af9-81ca-dc01e7201257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add4075f-4573-40a3-afbe-ecebb055bf6d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70629f38-12e2-433f-b22f-58406c5d3c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2d4077-1bd3-418a-af8c-2b5c5489909e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1e71bd-2532-4de6-9bc1-06d24e47a96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d72890-643a-4b90-837f-1185a1fa4304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.17.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afe529a-c085-405c-aeb9-4d61ef0a1ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.170.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ae217c-f9c2-4993-af80-aab38a9e98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.48.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4385fbbf-0ccd-4d14-80b1-27dbb56ddf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.177.132.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba7a6da-ea5d-4b0f-ad37-d33817440c35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.41.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75f1fb8-c56c-4dfd-b716-c2d65bc4998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.38.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaefa6f-4535-4dba-9546-7d27ba4c250f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.254.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3d31ff-dbf1-485b-9c15-7c425c464ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.0.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1887a698-67c3-4630-8d3b-6d4c8549d3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.103.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e70dbf-6d96-4a89-b000-1f145836ce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.110.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3e92e8-d61b-4a9e-b1e0-39904b68fea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.120.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6cdca8-e5e8-4e7f-8502-4c446cd86d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.123.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c798de12-35dd-4c63-88b4-1567bc573501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.155.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80fe810-36e1-43cd-a4c2-95bd0dfb3c8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.172.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4beffd-d0e3-42bd-af09-eef0239c82d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.182.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877e0787-c45e-414a-a5ab-897d80983999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972413a4-6f9c-4092-9594-aa594e1b0996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.58.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4a4495-5a06-4aee-b025-17ae1efe11a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.62.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abbc764-a4d0-4424-80a6-021da7b17e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.88.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca62907e-d1ee-4cf3-bcda-df8eab23329e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.89.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ddd291-3b18-4db7-ada0-f1c34ce14f02", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.0.220.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80ecb31-3bf5-4ba9-b7f7-0764fb31adfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccc27e1-6372-47f9-ba6d-cf172c603160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3eff6d-0afe-4880-a88d-3ff00da62e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afae8a99-d8c4-4134-8d35-ac0859d920a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9e33f9-b9d3-4fe2-b8b0-578d478faf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d262db82-e1ae-4f99-9bdc-08bd130ade00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f06d6ba-34a4-4362-85db-7eef66e208b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db77be2-0ec3-408a-ba68-1faa634db722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6a1590-8506-4aa8-b45b-2ae34f7611f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608b2799-3fdb-4351-8e87-f646eb208e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b393c6-f552-41fa-8d9b-c700448aa2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de06358-7f38-4d4d-a4f2-153627b207c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47d2ddd-c599-457e-9c90-1780c3dd127b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431e69ea-7759-41e9-a24c-415a357fccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1befb43-75ea-44db-830e-df56ba2831a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db941cb9-bada-4b9f-85ff-c2c4bb02cee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184e69f0-b655-4821-9e2e-68c871888542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ef1bd-4132-457d-9e42-6157284aa577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109d5f23-4abb-446c-81d7-cfaa2439871c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597f5a27-5a45-43c3-aef3-14368c1cf7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d212e9-b066-4045-8349-07d60e5c2475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb13ba5-0d87-4ca1-9bd7-6cfcbe6fcef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1487bdce-c8bb-4da9-8999-f20591301ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ce1d8d-2e14-48c7-b2ee-7628a7e6f131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ddf337-e5a0-46df-b0d1-d738e246cfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24760be9-7254-4e05-9017-c398460dd15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8df67de-0af4-4ac4-9b6a-fd0887d94e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d593111-a96f-4c24-b355-b8aa7d7f77ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1761270d-28c3-46b1-bb07-3c1d54fd4ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3187d9-9f11-4f5e-a815-a3b50f08fd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b755f-8531-40c9-91b4-e35af1854641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66932742-2be8-4153-aae9-876fd5fd33dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62808018-9a2e-4f96-8fb0-6da85509e281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c45af4-942b-46e0-ba44-9e85c3cd1da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f991b5f8-9337-468b-b33c-80ad5498e4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3034755d-6122-44aa-8324-f1e002e0018e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907019f7-3375-4186-b25a-4fe2b5a72617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03252e8-9a37-4055-932f-aae1fc1311b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47db8da-bf29-48ab-adb6-b044991f106a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feee39e1-29f4-4e82-9580-aac81e5eef06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383e9365-aa49-4cc4-a1d2-1de497cb807b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83afdb72-c2f7-4f40-ab1e-9de9ba47f848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfadd44-2c8e-4666-bf65-3ec41f81cb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0ec1d1-fc94-4e5e-ad90-0d6b5ab3da79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ced9d7b-ca38-4db1-a083-8b0735328680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3a7c35-ca9a-4c33-9d8c-5e14a8aca8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364be398-fbe8-4a69-bfc5-5e83f14c5ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8deb937-3ccc-4ace-8076-5c48c33b6629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2abd1a6-e5c7-4655-a02e-5de6a3067f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0059ba-04bd-4f17-b797-b923f6d92c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b586314c-599a-4f45-914a-6a72a416bef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0721f0d2-a164-4dc8-8da5-461693d515ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb45e5c-754f-4973-ac2e-3a4b78546464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b454d9-e85e-4b8a-aee6-2284803009af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470324a9-8baa-46ef-95a0-c3e5e97ae9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03551009-2e74-4008-9251-cb4e0f85f21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5971f27d-7f23-43ae-b9e9-10e20fc06a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19441351-e464-4133-952f-2186db6e7d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9343eedb-59e1-46b2-8034-d419235e3103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9922d46-5ac6-4474-9825-a7f73fe45c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d946ee7-638e-422c-8ecc-c768916326ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d8d00c-05e2-4040-b3fe-08c1a20fa750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4747ed0-e2a5-4701-b093-d262cd9dec77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2566379f-d59c-489d-bb89-83f94ed043fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c007a06b-a66c-4d0c-a913-1e78ff536cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49337ab5-412a-4634-a68f-adf446e6dc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b10f69-2474-4637-ab25-c6ec3eac272d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbbfb99-f4f7-4a7e-80f7-bddd2ea0fe37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bccf0a-9201-44a3-b5b4-f3551d4e02eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054680b4-ce79-40b2-b8b6-afcbef202aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545ed0c0-d67b-4b79-ad4a-92fb12a8f495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17108653-6b60-4934-b8ea-38f45d7190d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c23bebe-ae00-4528-b6ab-6a00bfc2436e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019c6de7-b979-428f-bcb7-9e7ca47c3aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdaaec9-a85a-4b8d-ba87-2b3b4a4c3b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cce5d31-1b71-4145-912e-17d746a25e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7180cec-324c-4d49-b7ac-3669e7d1cc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627f47f4-23af-45ee-bf99-6ebca3176553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f62aed-42b5-4d02-98b4-64c1019df220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e999fe-e199-4f50-9772-2227b9b4f064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752efc50-22f3-4b71-8305-4bbe9103feed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef0df4f-784a-403b-aca9-27324afb4fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e60f76-1bf9-4c19-b689-f7bac7bd6d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9d449c-60d9-4fd1-a75a-ebfdf832eb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d9543b-7f90-4757-b8a6-06e18ceb9b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00bf86f-31e0-4653-a502-a70240b2ce07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8469f94f-1261-4f60-8380-50b93dd50545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e36db5c-2190-43b7-9334-6d7db377810b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfdc6cc-24ea-4dd0-a802-a506539426d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b72827-3a60-4e37-8434-a9e77b4b3ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd6b1d9-8242-45ca-8c7f-4a45ce2858e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5116f6-10ca-4a2c-b5ef-9d9ea06da5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c3b4f9-64e6-485f-9732-468a35079b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7227c827-f497-4c45-93ec-8186c7e8ae81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2b5527-d61e-44f2-8cf4-499a9dc4c342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c86ee9b-eee2-4861-9cba-f2cc8d17d314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721df4d5-b123-4435-9e6c-aacc051e8157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64be73d-b5c7-40f2-8ea4-14dd729463fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884c934e-a8e7-447d-8919-69fccf9077eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a16d338-1224-4c2f-afec-3c15210bc558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abe3956-a371-47c8-83ef-16b20f53751b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd74596b-a2d6-4712-99a9-57254ee80e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2940e566-4db7-4c16-b928-04fa2c6984c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c1cc31-221e-43b2-ae6e-83fecb00567a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e28643-99cd-4ac9-9f7d-3dfdb95c718a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91090490-c808-4b06-9f6c-1b8fc4a2615c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24547361-ec18-4b49-afd1-0db7ffe656ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59870e32-a5ae-4aa3-86c9-72a7ce7412f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1bebfa-3d6d-40ea-8579-e071ff31fbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bcd548-f569-4186-8226-3f27252a5012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c374d3-1aa8-4a2d-bc13-98566a006544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69423ae7-8db7-4141-a07e-8b8fa66a3957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833ceb92-294a-4b96-b4a1-382e15d85100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32a8256-1a1c-4254-a6e4-b25e9a05b40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164e719e-2e4f-4719-a02d-0db201ccd120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d592b125-314a-49b1-ad1a-c4eeeb4f2ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc6639c-949b-40c5-8874-3d5b2fa42737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df62433-51b4-44fc-8edb-3c5f394f6fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3383c230-3715-40ba-a266-ba2aed088463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cc7b37-ac37-4316-9574-7ed01c3ec9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5de7856-cbcc-486c-9540-0cd45a71b192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a70aecb-9c78-4722-a058-c58baed8a309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2c8d28-f8c4-4b2d-ae3c-ce0432031711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38397a92-e20a-443b-9f06-9f36828976ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ba7ab5-32b9-4026-bb10-d2aca1b80496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d22a0b9-9c0b-4986-94a3-c6f5a655efb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc6ef0a-9195-4566-b5ae-a17d583d4da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b758661-1167-4a70-ada5-efa41569346d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73569ba-9841-45ab-b249-f4a0ac156be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273411b8-3fd0-426f-8d27-1ca8a3c26d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09ceb71-0b0a-4223-935a-cd012df6dde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b21a4a-b4a6-4d11-88a9-86b66af12382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fe1c24-be65-43c3-a1c7-e3c2bb301f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221e2614-4c45-40f2-ba59-a711267c7687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5a5efd-8e3e-4f42-968c-a7ee6207f4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8896ab1-aba8-4a77-b46c-cf5130a66742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb7bbf-3d63-4f49-a62a-b78c71880cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0727ff-6033-40a2-ac54-d1983837392f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ceb2ce-37f6-467f-bcb8-ec5c9e627290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608b73f5-201d-4ccf-8e38-d0ec87cba1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c17edff-92b9-426d-b280-52da56a194c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ace6113-9a70-43bf-b3a2-652a606f48e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd2fdb4-2925-4955-bcc5-5711f4b90fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45cbe62-0824-48ac-b624-7de8c2356600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3dba9a-8ce5-465c-9bed-6dbb7bed0857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dbe76b-43fd-4b75-a732-7150c4f18939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd3c9d-3d08-407e-bf92-a3cba818f372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f78de5-a3c2-47d2-9cb8-e2fe7f43bf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29fda79-5502-42b8-9f77-2f7129a030b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a80d231-701f-4a98-9a5d-6dbddb7aeb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c86519f-001d-4cd4-90ba-f727dc9b1478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6140680-2029-4f97-9f44-bd2c1716cb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616ad43a-5e6e-4d16-bfd3-5fbaa4022af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0149ea50-549f-4288-a9a1-322e569ed4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd91d882-e7b7-4cec-a1fb-f7f935bb1463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc516c-f663-4fd0-ade2-d44954f7f30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8968ec-5ed6-455d-a5c5-27207b9d76b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dfea67-d392-43c7-9dd1-d7d42e3a28f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eb5e7d-ab67-4be9-a282-1b848f2ad67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328a6571-c4dd-424a-ad11-5a73f1c93647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b13eba-d168-4b4b-9045-d76c987d0886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690e54fc-9fb3-4076-b6f4-d55813465eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac246db-e75c-4167-839e-cf1a663d2495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e20eeaa-44f5-4d6e-beac-f6536147131d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ee16f5-f272-422b-bb4e-592121c2415b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80dc0d8-4d41-4a2f-9d93-538dbffadccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6255ff-a640-473a-a519-ea6310509948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd94f58-ae3b-4b10-9ac9-56400b71ef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d7fb64-c77e-4c5d-ab25-14064066c2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a97a57-1c58-43ad-b774-44e8ef76c07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ea164c-8adc-4d64-a5ae-74f9e0606a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a8602-7b3d-4b86-874b-1b82d4f7270e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e03c5ec-37b7-494b-a968-0f7643193ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb9e4d-d604-48e0-be15-07e51dc745e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cf6d26-8e84-4778-b45c-f9c9cec5e5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49e005c-c3f7-4c86-8e69-21e470449223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5bce94-c8e0-4886-ac4e-89a273da1897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47414440-3c49-4f36-a4ed-027acc0c0b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37efee37-7153-4c2c-b886-fc3a65d7c227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db17b0-c5ad-4912-b3c7-61d0a5e44c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46432d0e-c138-49cc-9d5d-66153a5f9539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4bf084-0aad-4a01-bf05-c00b27e429a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3d52e5-cf39-4d5a-901f-49c437eeece4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af98bbf-45a4-4f9f-802a-a0a33ccdda48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64032cde-f852-4bb4-8191-549e3f6be428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec57a1fe-2737-4d67-ac82-7bf04bca774b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec9904b-1b2c-49e5-a19f-3219a08a8551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133f77f6-ec0f-496e-9e2e-a92c0fdb0487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab77dfb4-bb37-4a9b-95d8-93eb7d7d11cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c77969-3484-49bc-975b-0fa27d8ae0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e6360a-977f-4f8d-a365-38f60e09c647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c30e90-fed8-423f-ad41-ec6e681cd6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073abfb4-1a54-4fd9-bb17-076dde9a9e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3e9d45-691f-4093-a0d3-8227838a93de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a4b464-9ea2-4511-b799-3bc82c88c71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c675d5a1-eafc-4e1b-89b4-8668d2d7f505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91890fd4-f211-4456-8c32-7fc05a035287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70baf771-5868-4ec2-b366-990b61c135af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4b578f-ce16-48cd-96d4-82655f335b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f378a6-aa14-409c-90e2-2421a5cfbe5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc70e10-f7ab-4591-b77d-d7f4295e5e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8099abb4-bb53-4867-bcd4-69c804837c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb782bc3-0000-47ee-a883-b4268a928cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047729f8-c2af-4b2f-95cb-162f4303ecdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6c0190-055e-4ebb-91c6-f6bb01080073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ba43a3-4c68-405a-98a4-2ccec6f865c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed0d7ae-3e21-4c4a-902e-fab74dac65dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2e4f12-fcd7-4702-a0ba-8b277dd4cca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5929cc4-7e83-40da-bf55-a9eed3bc8667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56ac5ae-1345-41d9-9dca-8083177529cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea4aefe-72a9-4114-9e8e-cda84a55fc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e536fe02-8eb3-444c-9107-4adbefaeac1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcd2015-aee9-4d8d-9b95-951c09b858cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9bd408-3c7d-4d5e-8681-d34e6b0e00d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf23fe7b-50f4-4fd4-9146-506fcc71372a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ece650f-5e3a-4f3a-bb49-89963fbe9025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce62f9fa-8fb3-44e5-936d-9ba097386099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8dd0ec-0a08-49f3-bcdd-ac3e630b2109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6280b61e-bf91-4199-b649-9e91322f96ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03821ef-7397-4b8b-89a0-b356da4d083e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371d69d2-ed5b-4240-94a0-653950693222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f76dcd-9354-423a-a035-135ec1e5491c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b65e90-a6ee-4ac3-a085-0477aef4c75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0bcfec-c026-4efb-945c-5f837af08743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810a3b90-acb5-45eb-b638-648f60504912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6abe3b-1c99-458b-9a25-ff5e7710b5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27eb8e82-9989-49d9-b876-548a77667b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491f4c67-21aa-4959-810f-150a78cda789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e276d42d-e4cd-434b-b2e8-3b1050bc8646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ccc500-524a-4139-8714-fe156152048a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec94786c-008c-4a24-948f-719924662e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea90295-bf12-496d-aedc-69640b17c391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37924ed8-4cf9-43a1-b247-034bc47fe8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf64bb4f-6676-4fea-a8e7-bdb37406882b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3232fbcc-565b-4c6e-a517-ee78418f41c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae454e12-54b9-4dfa-bc60-40c07a0c6382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a893d6-9e41-4ff7-b061-8b05be85c57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1dadc8-26ba-4a94-b6ae-a16400653431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2fb8de-2eef-454e-bdd7-53576069b8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c455e05-ed24-456d-9b01-b52bd236efe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d46c95-cf2b-44ae-ac38-d072f4cc70bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a0934b-e7e5-4f93-a3e4-3e77f9844480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaa8f38-1f30-4bb2-a74f-f341565a6dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda6f19-47e7-4c37-bd3e-67f7ad69c9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875c3a61-c823-434c-87a9-775ce9f9ab01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7285dfc-8966-4129-a005-49be3d865911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7084d20-131f-422f-9f2d-f85421e8e46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0a43e9-c2b5-4588-972c-102dd2239328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0fd272-7cf0-48df-bf2b-36d7cff46ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c6c21-9bec-4115-b537-928d6b424b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea507cc4-9725-47c7-8738-9bc48727c49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e6e3ef-b8d7-41bb-9c74-d26ff905de3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b5fd82-6fd4-456d-8959-81878eb3f9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fdc286-cde9-41c9-bec7-8bb6a1628277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0f0a1a-d353-415a-a90b-4efc84a4e534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd60701f-2873-446a-9e3a-0bc0d8b9f91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca88c18-5012-4a2b-b711-fddecbedcb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d90265-b43f-4d85-9e06-e6b0d898292b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615bebda-1cb0-4b0c-96a8-181425e869ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12cf6e2-b6a7-40f0-a454-8be1ff612ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d2a447-08a4-48bd-b738-311dd20780d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98690ebf-ca15-460e-b7d8-cc6d0b43bb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1bc21e-493c-482b-87e8-b306ccee7fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360767d3-1617-4f11-8cbd-3ea643552803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f65ab35-5588-4eca-a63e-c6d1c7ef9e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d920efb7-cdfa-45a4-99cc-5f90947183f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b43a386-5a49-4348-9b00-fd63851b653e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb2d93e-2f1f-437a-954d-ebffd2f93aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39757b3-cb27-412e-ae14-cded96796d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3749208-a533-45be-b812-6185165acd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdb4823-c367-48d3-a944-728c1867b38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aede7982-877d-4617-a221-d3b74ebedbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ab8833-9471-47be-a21d-02296e4dba5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3951d180-fc75-460e-80eb-7dcd9a672f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14ca2fe-546a-46f6-a0d1-578bb81a649e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02eb56ce-f9e2-4fc4-a428-83c6aa241ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526dca26-c645-4809-990d-8995a810d176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b76bd4d-3ce0-4217-a794-3a8b6e22dbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f208b50-51bb-4c61-becb-ca1d9854dc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dc6be8-aae3-4c94-a764-223118d39b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167f7829-4569-4813-8a8d-5a70a2b93913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e751dd-8f20-4c8d-a3ad-b821beb1f4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae95a721-537c-4803-86e8-4757c73cc4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cb3808-ca11-4da1-affc-7666a03a7655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcf8d76-1eda-471d-aa6e-c12edfd499a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd42b210-588e-4647-91e3-368c09a73a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025b3954-982a-4a07-b6a7-48fd1ac57833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29194895-75ab-4f20-885e-8874fbe45d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e182a465-d452-4353-a73c-15fc84547265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c9fd95-be58-4c0a-8205-8efe9759922d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e571041a-c2c0-42a0-81c9-97d5f163f642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82bc0a7-470b-44d1-875a-7041e3cc75e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7a7f1b-1057-4ddd-a71a-e0982cdd752c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b25d760-17ea-4f04-b1e4-ba92a17d99b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef122ee1-9606-42a7-8564-b29b96e1c282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4654a76-46ae-491b-a915-99fc1be694c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbb5017-fee8-4100-845a-728585029dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08925654-bad2-4869-8485-5f5c4b90f007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4eb196-8c03-47fb-a759-33cec5c5cf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8f89ca-2c2e-46cc-a48d-2119a33c829b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8de45e8-5bb1-4446-a4d9-4fd0af1e71b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50e9ca4-6900-4d9a-8e0b-8c65b4c808f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be66dc24-9db1-4927-a6d8-5c01f84fd9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc0d93a-0942-4f06-bf6a-bcb21947c4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67380697-721e-4f14-abea-c268225068a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a34d1f7-625c-4cc9-aea4-8ec6e2f9f523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d872780-3812-46c9-a6a9-57f5f75f8aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5906c1a-a458-45ba-a3a9-ff34296cdac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959f9d06-dc13-41ab-8fb6-9014e28e3745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb8ac02-32ec-438a-9fdd-6d432062362b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372fad6e-c7cf-4356-aa74-fbbf57228c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbbc502-63f0-4b3a-9f44-aeaefcb09132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723eddc2-1142-4bbe-9f0c-23c2f021a8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fc4b7c-b73e-483b-8c06-20db83106966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b684efd8-3b5f-4a5e-8668-555a174ddbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0411bc-e329-408b-92cc-f98a87d36aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f9fc88-2c46-4ada-83f1-42070dcdfb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c0d04f-7e6e-4185-8956-2720b267e73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bad482-5098-4620-9a7b-50b8b583997d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384daa77-d6a7-43a8-b1f3-f80ec1d81373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf17fde2-8d4a-464d-8222-6a8314d00013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d315cc0-2857-42f8-a45a-3850e79ac83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd536b5-a31d-4c9e-a471-69cb4a82ca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6742674-35f3-4b47-afa0-444c2ebe9b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94070b4b-56be-4979-8fb2-48ae1defe1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63850021-2517-4ce6-b8a2-481889f1f459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae588bb1-b000-4e21-9583-b62095f72323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11498807-3cdf-4670-b4d5-a34a46052bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f639890d-99d0-43f6-8191-0c5d23a0ac96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a189611-d3f4-4828-9e22-7a1c31efdbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6bd050-76ee-417f-bb76-828784edaf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b65de9f-5ff3-401c-825a-5057e1bbfd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81334031-dc03-46f2-8efe-3814e6c6f332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4561fac1-743a-4e1a-be90-8b7f58d5689a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36225a07-744b-4443-a9d3-d4b11e5337e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a783ad3-1684-4013-b474-c9f2d8a15e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21001ef-535d-46cc-be3c-007fdd8ca8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.174.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bc8461-3263-4060-8457-8cad7f7d714d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.244.81.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94df3ab-dae3-4ce5-9587-02be650ad445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.120.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e3ad09-8b1a-4fe7-b144-150bb76d9078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb17a5bd-652f-4bd9-8222-669373790233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.39.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42c4efe-13ff-47e8-a3cc-dc38c55b5a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c594a188-f87e-4b94-912d-583887ffdc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1777e4-28b2-44ed-bc7a-1ce2a1bb7767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff1dec3-d9db-4d8a-aa43-9daedd05186f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.125.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632acbed-0ebe-43a3-9361-2836b33710d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.128.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f57997-b681-4453-91cc-6369b6773aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.194.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a64ebb-1722-4a91-a8f2-6c9950f6f438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.209.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b1f153-e3b8-482b-bc16-d1d102ea235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.103.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b1c8f9-ac6d-4871-9003-8177c4d7ae25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de53554-0b0a-4003-a46d-9f152881cd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.125.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360ff417-44ab-439b-b3ee-eb0abc6cc7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52649f20-a82a-4036-8426-6fa0d9c3b3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.225.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba4b78d-ee0a-4f03-875c-31b55bcc7eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cb9a04-7c1f-49f2-8f5b-6e6634f66cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.86.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0c31e8-f174-44cf-94d2-26b9268e2bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d32770-1e29-4cea-b4ba-8bfd2d1461b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebef4d46-4341-4eb3-8cdf-981f8bd326b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525cbfb1-1307-4cf2-b931-886ac0e98b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d151989-7d62-4bf9-918b-2735aca92ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd5e23f-4166-4a2a-9506-25941764b2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6791e8-f84c-4cff-9fcc-7463652ed8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051eaab3-0100-484a-b194-b70d9a328d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b485d902-3ebb-477f-b74d-c54aa8fff3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0ba3f5-51bc-43ee-92c9-4dcbf83d061d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee22574f-4497-4ac0-a4a3-5ffd1f5fad27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf66543-76c2-4b61-bc17-b53ce7a6abad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ebd815-4b33-4f5f-82a4-ed578b1cabfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce59b631-7d8d-41b9-9670-49f01ac7b307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e7c645-4b36-48b2-828a-761ef0cc98ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a096f1d8-6790-4a2c-a8a2-9922ca946b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7385475c-0a6f-4514-846e-51c1a5df2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9182230d-9f95-496d-832e-4cfd8637f583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8234bd-aa91-44fa-81c4-2c6baebfd787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcbbd32-740f-49b2-ac62-a89257b75338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b14c1c-1ee2-408a-8ab5-1074818d11a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4910d295-7481-4a38-93d2-384514177c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694c2858-3ef9-4ae8-9ceb-5f251439aa16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0353977b-36ff-41d1-911b-eeb1b6cb9cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ab9c2a-aea2-4ce5-8055-127475fd4693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0c0c29-d50f-48b6-a273-3650b4ed2f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e197532c-62de-4c14-91fe-46581a86355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e218ee33-d9ae-4744-a3a1-704e42fbaedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f8a388-7939-4577-939a-0c8f65f33285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b8a56c-a30b-40fd-83ba-d9e21bb64b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c776b1-8dbb-4b58-888f-381b27e3daac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a861f72-fc27-4d13-b915-4b0c2c74fdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc21dfc0-e8a1-494e-8cee-41b912166a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20098ae-e352-4434-845e-ffd7e93cb923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f1186-4692-4f8b-b658-13d78cf49d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f6e1f7-8a3f-4fce-810e-2fa2150886ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0e229f-569d-4a62-a456-5fcf60519c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485f083d-491a-4289-b723-73beb37dcd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddcf60a-2b91-43c3-bf82-bebd31c7c33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2580a02-2871-434f-a5f7-327706bec881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598a4100-6df5-42b9-880f-3f4961b1796d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb66e1a-ba8a-4fad-9a0b-a15dd5366afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5dfc87-2428-4453-8f36-416edc3b4d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dd8ad8-ee79-46b2-8c98-ecd2eb932262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c10c40-e323-4986-aee0-774173bef040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd628ef5-411c-4878-9f8a-dc16ff12d9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7db655c-ec8e-414d-a2ed-51ca85680434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99957a1-2689-42b6-ab25-781669c20abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e354a3c-5fa1-4d69-916d-033c0f00772b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7351de90-bf4a-4e08-b72d-2926915385b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06050a3b-f645-4aa1-98e3-dfb096458789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b165b8-6dad-404c-93be-dea2d3e6bd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae8bcc9-760d-44bf-8367-97c20fbfc8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1a5254-3878-48ca-8591-6db7b69e5e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f330d8-d5b1-406d-bdc8-c36faf5b8ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bca58a4-44ef-4c7e-81da-fa2bb7617ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddd8851-018d-4b35-b835-a96f0352c2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4aabd1-8c4a-4589-843d-9ac172fb4ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34441052-a27a-4d97-a1b6-1d63fac1c357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837f69a4-b1d8-4478-93a6-9cd53fc1312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607df633-e0ad-4644-a468-ac35692cb8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049df1d-a3ae-4593-af91-dc97770b3328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f447eb51-04a8-4ed3-b3f4-cf6417d58821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62326cfc-366b-47d8-acd8-b3311c0f31f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b85cae1-1784-4e4a-a234-846e3d468001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c237149b-dd91-4046-b07f-dcc55b36f9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e527db9-4f56-4ec8-b965-a1c91bafd5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1bf7d-a4af-4f80-8fdf-4891915435d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae321c2-4f69-4d45-a11e-90fb5ca19434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784ee24e-d6b1-486e-b535-f8ec8c5a5cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a0360a-7df9-496f-9c55-0f57b3d9fada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a94d4dc-5097-4395-8140-c3c745428f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2824569a-c287-4745-9f8b-e48d7e2ede88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49892ce6-ef36-42e4-bd96-e5fafaaec4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361b9ce6-1765-4e41-b5f8-3e603df3d287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bc4db6-c845-4938-b687-ee37fad4da0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a97133-b1c5-42c0-9aa5-cb7309a30c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2713a0fc-6fb8-4295-8e6b-6fb658785ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416717b9-e160-4eab-9846-9697badaf0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2121d9c-c413-469f-87ff-a4a8007f052a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7bcd61-f311-487e-902d-e8829cedd7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee3c114-59e5-43a5-a014-f158c17c5f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6028024-d7d1-4714-b072-ae13b6d3877e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f13f8f-c804-4d77-b109-0683a837d914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d187cf50-fec3-4cf7-9bd7-51252564acd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfe7a5a-4494-41ad-a1f2-2f613931d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c457c1a-644f-4cb1-86e8-c73d8d09d6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4c1371-406d-43d5-a60f-b1afc81fb3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9d67f1-cd4e-42b5-a0e8-0efc7e080caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cc23a2-ae49-404d-91fc-197ac5f4476a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f3dab8-41a3-4d43-a6fe-c841241a7aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4803df-08fe-4489-9e84-3f248eda47a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b24c9d-ef11-4670-a6a4-dc84c11ebf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad910da2-77cd-40ee-b9df-8e0c91444841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d956b585-4dbd-47a9-a050-b9f54004e16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6a65c3-fec3-47cc-a902-cf01de32e4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3114b17f-81b1-478d-a76f-89dd7defcf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbbf562-d02b-4c39-86eb-711536003c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efe07c6-1899-445f-8dd5-9de3dd7addb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f536a277-030d-479c-9d1b-802af153c81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e659a70f-c0b5-4459-806b-d6c7e1f3d052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657ecdb4-7b62-4724-8f0b-981cc50f054f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75ad42-6596-433e-a16f-266e37d7ccf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a7d65a-2828-4f27-b945-49223587ce61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ad7d61-b048-4eb5-8eeb-d9482750716a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2766faa-7c06-41a6-ab08-ef0ffaeea759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830c4276-d7ab-4cd2-82dc-09a0ccbb0d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706da73d-a460-47b8-88d4-e7b9b1b48e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bcda50-8272-4d37-9e7f-a362d3173751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88712e94-fc45-4703-b0c0-0afea006a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489205ba-10e5-4743-a6cc-803485560c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ff58ab-7ab8-49fc-aad0-db72a49d6a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f16b5e6-67e6-452e-9274-55c9a04af8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e649dcca-400d-457c-8767-615dadf926cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358a4dc7-42df-4d5d-ba64-e14ddbebad36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b234a17e-5b86-4858-b36f-44b44be11dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d68228-32e2-44a6-80c7-f0edb80477de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9895d891-f3db-4e6a-8dd7-1b263329d7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7174cd1-a010-41ac-902e-41bc743da17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bacfb99-691e-4295-9bd8-b46ef23beb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d41fe0-eb5d-4878-8ee5-3edb6c769bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc59bca9-516a-401e-a81e-1f9e60933c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f2ddc8-9c6a-4dc2-b298-0a0be7ac53f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699a1c55-2afc-4daf-b32e-e68a5673fef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16ed248-8615-4c95-b9e5-5cfa40c3275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f53f5-8f10-484b-aef2-8d6ff401a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9304e9-176d-4c3c-8d20-f9cb6e9e3947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094b4020-d3ef-4678-8df4-986d510286f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ecb1ac-ccf5-428e-8a86-2ba80b3a44cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d0f9ef-1013-4b88-ab7b-d47a22958785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7685d9-de03-491f-85a9-ea4d428837df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f170c79-fbbd-485f-9810-9af55e87b457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffb7dfc-da4b-4ca3-82cf-d49f3a0fc56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bef5f6-5aa2-49e0-90bd-fde2ceb05484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d636f40b-d06d-4a8d-ae81-38f2db534e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143d6f67-f2c6-4095-b676-9b90081006c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76be17ad-046c-47cf-b8d5-5a787285da80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3f647e-c4fb-4f97-81ea-0b5e9b8b140a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16615d74-5fc6-4fb5-80bb-510c0f1380fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358c2691-8d85-49b5-9626-ee7a3a7c1ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78017ce6-0b55-4e35-9d3d-0034a2b0b61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f36a9cb-f1c0-47f8-b5e9-cfe499dd45f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1872ff78-4d7f-4d30-94bc-a87759e5cb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a30ac0-3dcf-4394-a2ec-3c2943a7de01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22753480-8e2d-4a40-910b-06ec9bed8591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f369b9f0-98f7-4ae9-81c2-e29779d4addb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e47e271-7e5c-44d8-b295-8cb307446198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1de3649-0e4b-462d-86ae-0c771e893a89", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.245.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b074cd0a-3cab-456a-a818-429366efb882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f781b739-b95a-4ce7-838d-7d7271c4c2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7be95e3-4d03-46c5-9d81-f1c748cba8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb9b712-9086-40a8-83d8-1f69977f3fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf71d94-3ea1-4f71-b840-6a6f2fef31a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c998b35-3ff0-4fa5-a98b-dec5b7b012a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a9b0b9-c4e8-4574-84af-d301b41a2fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5b6dae-2337-4ea2-89c4-e00e8ef9c852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d54fc32-449b-4edf-a441-3a21fb9c5c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5087c810-739d-4feb-a081-d5fa5e965ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da2d680-fc6d-4a3a-933f-a25be7487fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60bd39d-9a00-43cd-9204-b262f86fa3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6965e2c7-5f67-455f-91e9-b36e739fe498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e25a60-dd8e-401c-b313-5b44e1297962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0277cb4-b2d5-4ca9-8287-e1577fdad327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb1caa9-702a-49b6-854a-ef18f5418aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108ab4f3-fc77-4103-8496-c7a05d83feb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f6f638-08e5-4e5c-a6d1-d49104d81ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6653e10-5693-4b19-94c6-2dd59b2158b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547eddae-d24a-444e-b900-868288b3b4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3e52ab-95e9-4182-9da6-1c17eacaad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7d3a6d-880d-466d-9c2e-45166a0c0965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7f7f5b-ac69-4efb-8895-5ee79478c32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393cb938-f487-48ca-9b7d-4b962ef033a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ebc67e-3a77-4887-a647-b032cc33fa48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92cab8b-098e-4dcd-ad19-0272c2a18cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b2b103-f024-4f07-a339-752aa787b67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0339959f-7e52-4dc4-8911-6b02ab1762f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee03d35-2483-40c3-a20a-b4aa45e35395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54359b1e-b412-4eb2-8c83-f5cf595c57ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b63bdaf-ffe0-4deb-bd7d-dd770fb1b40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dada946-c941-461e-89c4-4187e4cec0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140f5e42-7a4b-4b23-95a8-e32375763601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.15.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830114f6-ca78-4808-97ba-f16324a620ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.213.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905e9295-9091-49d6-9ab7-90b2a4a95eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.216.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32543b0e-39c4-422d-bbec-bc1440b1139a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.25.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3c17e5-7f59-43d7-a928-e98239083c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.34.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bd447f-f4d9-4907-8ae2-451c8c606c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.4.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e015750e-7973-4dee-aa03-59184e0aef86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc924124-933f-40b1-8203-78781f7f260d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eebd179-afc0-4992-9f68-09c3bc036c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.66.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608eb221-b220-408c-b3a4-f091a7084572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.67.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8834b479-506f-42f7-864b-8d6b8a2c2b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.70.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f7cb90-7e79-474e-a6f4-f82fecbe4b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.8.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ae7313-2195-4198-87e9-7e40f0bde945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.163.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c802bfd7-de26-4a9c-9709-ded17f4502c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.164.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a47277-d130-4718-bb5a-d3a98713967d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.44.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128ed9c9-c872-40a1-a173-58d555e2aa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1db3c1-904c-4a6a-a1fa-3552ea2a6e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.81.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f5d2db-f6b3-4c6c-ab88-41f5df4fa271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.81.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd08701b-4d17-4c20-b5bd-a9737d6dda5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.95.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0eee635-6b82-431a-9024-9bb3b0780344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.106.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea4ee6e-297d-4d2c-9e90-71a725b40cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.106.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8378499-f3f0-41ee-9e32-659ffde4b867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.144.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86811e0-f823-4711-a2c0-41362857ea5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.144.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574e57c7-6ce9-4767-a205-c9d338ee76d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.151.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06590976-43bf-4c54-a601-8a9ca9d36399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.167.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69b81f1-80c5-4302-80d4-1c61d7b669c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.175.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bafb87a-e35e-43bc-a8e4-75c3c4e24796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.91.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c2bc55-7906-4533-95d1-36ed1a12cc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.160.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690c620d-c65b-4aa5-9437-20774007daf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542e3e13-99d2-4b40-bcbb-c6487e2b5297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9ba781-3a81-4ed5-9229-cec09c11fb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ad7ba1-a733-476c-90eb-a6f8886c3c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02be0544-3f85-40d1-974b-313d0408c6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5029b7-2395-48d5-ad3e-3cad2459f8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44e5783-d7ca-4c4e-9f5a-c18167d8b198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10acca4-75bf-4206-acf9-455c7a6c8170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0f55b0-8b61-49dd-8c49-42fd004ac89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9ceee9-3660-47aa-9352-de3197e601fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296c49be-ba35-4c1c-82a1-44a0a0644502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.161.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ecaff1-db5c-4040-ab0d-18b4b4a1f8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2b921d-4c03-42be-bc93-b40c732eb190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6313ec-3949-45e7-9fdf-6f24ce4c8d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7328c5e9-a13b-4f63-a4f2-2030e44c6911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4753f9-9984-45bf-8f9c-7cc3903a7786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0a7db2-e188-4412-9290-3b55b54cb02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.162.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b179d63-f2ae-4e31-a9de-969756bef0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8ce888-9972-46ff-baaa-5f70c54646ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b51ddd-d44f-418e-ac80-5e3fb50d0af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932e0ac2-2309-4b28-8d7b-ab83e63922cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2b03c4-edf8-4d2c-b551-6fcbb84f6b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26347d07-c7d7-4672-9941-37dc8d7dbf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd71e0a-8e1a-4c6d-b036-515fa77c4fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4717f12a-377d-4cf6-a490-912489171949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce8cc37-e15e-4145-8ab2-a071cb41b706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ddaf37-7414-4904-8565-25df5de010f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.163.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f55c00-83d1-43b3-8ab6-380acde42862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.164.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7260e0f8-0d16-4f4b-8613-ff00c5b5753a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.164.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ec7bb1-a333-4016-b3ed-acb77b7d55c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dd9108-d454-4b33-a7a4-95bc06b60c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e39e19d-6e44-4876-9ec5-9ec64710af41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb4bcb3-08b8-4266-a5c0-cba48f95c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01634b08-2501-4edc-86ac-666a6dc43ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb50c7a8-aaa8-4326-9a39-0051df1c9911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ae735d-9748-402e-9d86-d86df36e5922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.165.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d60674-b394-48d1-b589-156669d816c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.166.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db5955d-93fc-4bca-aa41-407fa58b9be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.166.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3302452-6152-439d-9722-87e505f23e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.167.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5139e88f-2fdf-46a5-a703-064024e630c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.167.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bed321-72b7-47bf-af1d-875ace4c4a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.167.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dc088e-956b-40e2-bad2-3a472962e1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.169.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23170c73-114f-4f26-a45b-aa933ff54bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.170.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca19deaa-7f14-431f-aa68-780ebeda9cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.171.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3590eb8-161a-4be7-9373-85a6eb2bda5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.171.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da8c378-a3de-446a-9f79-f8d15cbfadc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.172.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d690c328-7b60-46c1-9d0a-630c3c674838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.172.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4e0732-7002-4e70-8857-a07949f4e000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.172.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6477e2fc-f3a2-4af1-b8a8-027bc8324d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.172.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde29085-263a-45e1-9acf-fc298198cae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.232.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50046738-19f8-4c65-abaa-f98323a3f345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.240.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b41fcd-2c32-4627-a73f-17f2f65e9ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.50.70.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e104df73-35ba-40bd-b830-787a654e6217", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.88.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b77b6f8-b9e7-46c9-9c8d-af653b34c181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.156.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4b93d7-4708-4b55-ad16-0211dab58629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.109.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f4f202-3019-4395-9666-b7c6fb0c9965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.131.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70e0361-a87f-4115-8d84-8b5e92707666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.138.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf403e13-ad04-46f0-9ba3-cfbc2af12487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.141.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf56179-9223-42be-9a46-ad9c4b591246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.145.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4426f0-aaef-4467-8a50-37552d002be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.148.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec227b-f3a9-43ae-b02e-8fddfaae4aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.157.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ef439-7bfe-4883-a18c-94a48e2a1d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.160.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e9aff5-00cd-4258-96ae-c63938c51fde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.170.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8255294-82e8-4426-80e7-6467599cdc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.175.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498a195b-1d7a-4c47-94e3-93188c284632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.188.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6a95ca-ab8a-4cc5-9eee-65fddd44236a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.198.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df08c792-5e39-4fa3-a342-57395375c009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.201.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ee5e4a-aec9-4fd5-bd74-69c00be87c05", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ed7087-e666-4d17-a7d4-93a1da3eb010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.26.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ade0d7-53c6-47bc-93ec-a382a44bd242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.32.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd605e4a-2327-4850-be9d-1ad92f2ec78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.224.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a40db25-0cce-47cd-9bcc-b56ca3dfdb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.110.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76eee37-57e8-4a33-a110-dc79645ef886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.124.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9180d16-4278-45cc-a4b0-5283ca5d3b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.150.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5708fbbd-d8cc-4225-92aa-3e9fe4f9887d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.19.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2123b2-01ae-4cf8-868f-17e437078d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.25.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800024d7-13e5-423c-8019-237d28db4cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.26.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a7f000-f57a-4b0b-af33-112cf44305e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.30.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953b9db7-455c-43dd-8d00-2d469e6c67a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.33.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a112fb9-b301-4958-b78d-58bb0b8ad4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.73.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee58a6c-912a-4ea9-9fb4-344b3b3cb3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.89.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70323fcc-86f0-45c2-8a9f-3b169076a48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff852b3a-a9aa-49a6-a049-a2793e6b3462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a6700f-625f-44c1-b9cb-ad55473c9fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7647a1-e4b1-41ec-b7af-a7a50ed28f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4449a8e-fc8a-4b1a-843a-9e66ba6d996d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576df5cd-1c8a-4ef4-904e-bd5e3ca216a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aae2278-0a0a-4d19-94d5-8307fd909224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959eda30-72a3-46c2-b7ce-5bc8b29517de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedbbc72-2ba2-47da-b5ff-8cc3ec6d9103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ea3838-5d24-4c34-9394-d7b2059d6c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb966b24-9d9a-457c-ac5b-808a5ce1fac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f064df-dc35-48b4-96b3-c0367bd5246b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147550a4-571f-48b3-8507-db9b5545faa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0164734-cebb-40c4-8190-af499bbbb3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a3462-9dbf-4182-9c68-2041b516d553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad6e53f-1f91-473e-9dc7-c157f9beba51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92524d37-0c8a-4c6d-b4e8-8972fb667a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2801a2d5-b63c-4b6d-af6e-b08bde11888f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadad69c-3943-4fb1-ae45-0c419725a36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc79f9e-0177-4430-8aa9-9c7953f150ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652c03d1-684f-48ad-8a3c-de5bc299fac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50826b41-8ccd-40e8-80c1-b7f64784078d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52e2b6c-ad58-4dfb-bbae-bacf83908e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a22b1-c478-499d-a237-888a21ca7497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f1596b-0709-44bd-a1fe-f7f766708744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd0c540-5153-4611-b442-8de9e78a9fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cc488c-4649-46a7-9976-d6f5d1deb543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd5a59-1c4d-42fd-bf93-608854470647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51260030-986c-429c-b579-b975964b37cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067878f0-c248-46ad-804a-792d001d9271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4dd5ef-953f-442a-9823-e62de6bf6dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c56bc0-0f95-413f-b8f0-c78833a164d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16535860-c865-4c92-b2d2-1b37073bb14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b425e26d-330e-4705-9a7e-9daaff22ffa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff00631-90bc-4e8c-a183-3cde7b8aa642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b60b32-69bf-4392-8416-34ac8f926f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439b9d6e-63a0-499d-9fdd-14076a137ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d6b4d0-628c-47d8-9372-67cc763f0e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87660f38-1e98-449d-b59d-de27f1561a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc0d229-56f5-415d-b0c3-3154d4294470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90400e87-3a19-45bb-835f-ae7ec3e625a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23826ba-03b3-46b2-bbd8-e8aedc21cb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5a4131-08f6-4c1a-b8d5-80a55cc11e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444943c7-2483-4a1f-9792-baabc8068ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf47774-710b-40b9-9376-1e6d12579107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67256214-4c63-4eab-b02b-40954f41cc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf1f3c3-6dee-4a54-86b5-55ce2d756dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d5fdd1-5b3b-46b8-a6e0-683711484d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658c86de-5ea3-42e3-98ff-0595f5a2a7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fc8a3d-f34d-4cbb-91c6-3df4c2389268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885fe0ed-23cc-40ee-a4ca-06f8695d7205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38699668-2f1b-45d5-9621-19093056bd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52f8d05-c22d-4b29-8052-a0bc079666f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1a3261-5340-4d4d-936b-41767a80be2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31356b7f-4e45-4935-a1a6-802d8831d6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf1335-e49f-4540-81ee-a9569e19b570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5647c6da-d7ce-47f9-9a18-8d111630ab93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07cd490-1de4-45d9-8943-e03e88f26c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.14.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb75e31-c86b-4ab5-a7c2-49e45e6c463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.209.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a673fa2-48eb-43fd-a6a0-c9cdd4d2f2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.212.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b110f75d-23a4-4950-be81-aa9126c1ea87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7063bf-6b26-429c-b84a-00a8a57abeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.235.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d410aeae-5deb-444f-970f-8eb9c323fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.251.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c464a3-8b27-4d0f-8500-bc63ce6c068a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.3.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0b995a-a5fb-4936-b98c-369a22563a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.72.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85368dbc-47ab-4e08-8e29-7ad62e6421cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.87.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d0bae0-04cb-421f-9a74-58d7cd0a98fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.95.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86276966-f352-405e-a86a-79899aee805e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.213.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11598f82-9d28-4b2d-97cc-34d511cc3b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.109.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b49dbc-05d9-4e0e-81a5-28e09602ab13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.122.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfc567c-6433-4a56-962a-3d17a1c34b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.27.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a738fbc-dc96-4d1a-b5ae-18b44ea16b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.70.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81719833-8aea-4638-9a43-300c1b6b530c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.78.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9085d533-e386-4912-8f58-e5f0941f10e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.79.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4e2b6d-3383-4cc8-8829-5b3c8d25102d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.90.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503aec9e-6744-4ae9-848d-6c3c5b0dfb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.195.25.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91fe686-a1c8-4540-8d3f-bf3d904e80a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635d28b5-9b8a-47ee-8f28-a6f67be4be56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1face0fb-8c41-4530-85c7-ed45eb5b67f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.222.97.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0300f9-950c-4810-840a-8a3e996fcab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.148.89.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc594983-8a71-43e7-92cf-5976f0b7ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.161.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4f9444-5580-4c8a-8544-c7d86c899f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.189.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d0b341-66e3-479f-88f5-0fcce45e3194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.0.134.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a200a9-fef3-4b95-a080-dcc6cec22b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.11.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99577ca-4a45-4145-b688-f60ebb3afcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.110.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec52310-72d3-4125-96ed-b3e383f7bc75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.15.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df95aec0-5259-4441-8c30-6c0117f77074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.160.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53ee0d2-9421-4f29-b2df-d5f1deb0d7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.201.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea870fd6-df6a-4eaf-ba45-5cac6c4f2c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.158.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b12525d-afe4-49da-9a7d-f285372ea622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dc8b44-d51d-4b64-9bc7-b4ba823b88b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679c4424-a92d-4a7e-8f60-68c85501f9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76f387a-c5a2-4a97-85c9-475cf6d2cfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f64dd5-fa87-4a67-8805-21017a70c0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34d26e9-5b1f-4269-91de-9e23eb872512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75bde81-762f-41b1-a897-a65c604165ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c0faa7-4e61-4277-a15a-eb1f92a52f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb41e11f-7db3-4eaa-a479-1ec63b14d9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.136.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35864592-f1b2-40dc-8081-a86cc5a94aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.51.26.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c0c2a8-5440-4162-b60d-4a83f01bf936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fd0479-625f-4593-b8d7-a2779c6e020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.137.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af8f0e5-0639-4466-8965-8a43e8542e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.138.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50c4edb-6651-45f2-8480-73e19ea6f16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.144.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28948115-b912-497b-baab-cd07e22ac784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.220.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a096081-ca55-41df-9ef6-71cdc79f8a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.223.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec14b083-fe57-4168-8f76-bbb31059c595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.127.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba80306b-d997-473c-8c67-ac6769a56f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.64.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0204778a-de6f-4a50-881b-a30cbfbd3da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.109.88.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e6370c-ef25-41f8-b9e6-d880cdbc7b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.15.131.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85633ceb-afe8-4e08-8d8b-91c3427a5759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.213.141.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fd9b21-f55d-40c1-abe6-558149b472ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.222.247.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c2a3e6-7401-4a95-b54c-8127872ee5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.176.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ff1f88-b1e1-4fb0-9293-ab3fcd5f8055", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.193.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5238939d-afaa-4f4d-9476-daf48d51f730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3aef3e-8af4-4e07-b6a3-772d8ceebfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f4b1d7-b840-4770-8169-88e9ba50df6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3583abfe-4b0e-47e6-a2a2-ba1e8d52e41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab457f9-c65a-4ee3-9ca4-50253423c3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.242.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3a9fa6-e950-4a6c-a324-2d5b9bb3903b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abe5e71-3425-45fd-8a8c-7c91a7eb37b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.123.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444abb9c-22bd-4a87-81d7-540cc219f1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b5d16f-3d92-4f94-a9b8-7834bbf9096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.158.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92910b3-0067-439d-be09-ea0f10745a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.16.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c220b470-f571-4c31-9a7f-a4856760108d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.163.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dab1331-133b-430c-8551-aeb4c5051232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbb0fc0-992f-458b-81d2-a6bcc372d4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.57.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a922bae7-57bb-4bad-b2ff-c704c1a53ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.73.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f293816c-9092-4a04-9dec-7de13b4f3479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.99.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba91610-25a6-49a5-b916-122986560968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906b6510-83d3-4e10-944a-5210ed9f3e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ea204-20eb-4582-9fda-1d28a0e3c245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae611d1-06ab-4034-9f28-6cb557cdaa57", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b51540-896e-4726-bf90-7c4843173a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcb65d9-4bcb-4254-9fe3-58b670a0847f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.170.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4ff0ab-31e6-4978-a293-1a938cb67da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.26.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1e5435-b864-48ef-ba99-0166358a8a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b591bec3-e203-4005-b674-a581c4cafbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.200.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329b5134-a6ca-4634-b787-52c895c46870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bac802-99c7-4a51-877f-24052dc134bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24045fc9-59f4-4f57-ba9f-f908c11d57c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6ad027-8a0d-4ed3-9f8e-59cd645e482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.190.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dba07de-c15d-4ac6-8d5b-6450497226d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80937630-f019-45e7-8c45-339b63e71e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5c1b86-e557-482d-b159-4a2eed223e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728e63bd-5579-490f-bbc0-336e91dee216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80759a08-4377-4485-b718-df846317175d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa9e687-7e2e-4863-ac69-c0346e28cc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51886332-39f7-4e0b-9158-f66dcac49b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed02adb-3e58-4b55-ac94-99d6c15b35ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69130fde-5ff7-4bfe-8068-02357f673f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c68bab-57ea-44a1-a640-75553014193f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebef97c-354d-444f-94f6-41b30d8561e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a007aaa8-fc8b-4c96-b582-0e205ec98da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7233611-f94e-4b0d-a399-e4e7183e6817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7831c8be-c3b4-4a66-8cc8-98e7a2541bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.227.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e40aa2e-3067-40d7-a4fa-f151b993a5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874d2c4-6837-4cd0-8aa5-9d6386b634b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea9a882-de75-441e-b710-3819d8c283b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.188.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01e5a17-b8b7-48f1-b852-d980a34338e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15eed88-0707-4739-8e8c-a572b256ec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc9d3b4-5ea1-44a4-8419-bd6b08f7c25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1715fd0-6ccf-4944-bdbf-9df03a0a343b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.143.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996ed699-27a2-499b-a04d-1216d0439fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17db7911-e5d6-444e-8ace-4685cbd653ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.232.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91db482-b7ab-4003-a73b-7ff8a5e75b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.246.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf20d319-6b66-47bd-9641-6d692383c29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17685372-00e8-432e-881f-0be5839a8f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296fc12f-1f6b-4e0a-bb38-f19c69620a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.50.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbe785e-507f-441e-8c03-6eb7f72b8dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89023ca-570b-466a-940b-e8d7f8fd5086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68cb201-be90-4a16-a493-d3d2381c9483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1ced2d-2763-4078-b342-f2a9f44b696f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5890c7db-7068-4be8-a8ae-7aafd13746db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a323340-a120-426c-a474-aeaafc81eb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c6390a-5d72-437a-a727-4e5c876c54d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ee650d-3c66-4146-a458-df405cfe9a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95c43a8-46bb-4c52-9bfc-cc5ca350da27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36efc60f-86c3-4b59-b019-0390ef590074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8080ec-cedb-42e9-9703-b45827b04229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810b8168-a723-48a2-bace-6c0887e99fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4df4952-f3a8-470c-9f45-de5d77b8b6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265e8908-aa17-43c4-b8f1-e6630a1a9566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62182130-6656-43c9-acbd-fa3c3eea65c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6001fc8-7546-4f75-a7ed-1ac089648466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa84429-7fb6-48fc-b1f8-817a3823462e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213d9e3a-83f1-4771-9ab4-18c912dbd716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d479fd2c-c06d-4a5e-8264-82539ce2dacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5629c7a0-4771-4f0d-87c7-aa7ff6901c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a16f19-c691-45fd-bcee-5f4f37f16fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.190.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288029e6-5ccb-4e64-99a6-ac9193aeaa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857ffee5-a28b-4335-bf90-5ec37e7cb0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c83c6-c19e-49bf-a265-149449bd3bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ccf4b1-e3a0-4331-bbfb-bf2461e6608d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdfbad9-a845-4d73-a90d-461a7405f23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4355d9b-bd5b-4d3a-9ee2-afaec207bf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca20cf10-721d-4fdb-b80f-b1404c2b7d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65cc3b1-38e5-4cf2-8b4d-4bc5754a5d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6748fd-2b5d-48d5-a914-3439404eae6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d6b11-a3b1-4674-90f4-cd7b15edc0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c93b64-9c6a-4d65-a4ed-4132336bda5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc765d2-c75e-4314-b2f1-18636b5ba3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f23634-14c8-4ce0-9b67-4f5932843ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269af36f-7a35-40ee-86f7-e130387acbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f4fcd9-ef9f-4f95-b56f-a5ad115d1640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a1ea00-10af-4bb3-8127-01ba42522193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3306426e-fdc3-43ae-9278-a6f7f2d6ed4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ce0275-4af6-4528-9264-95d18339890f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d5c4f3-cc2e-4176-af56-24738a887807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475c8df8-0d34-4079-8a04-3a4be4005282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c24cfa-9677-4e7d-9907-9c6a985b2bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd98ac2-b72d-4f53-b89f-62e4656b5367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ab703-e12c-438c-8cfc-5bc3845d3670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652fdb16-ecbe-4be5-94a9-79f9d980e603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812d4772-e6e6-43f9-a87e-da5008cafb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed85914e-0476-499b-8bd7-b44749885fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c026dda-98fd-498e-8da4-216ed626cdc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8ba0eb-5fde-4d14-8fe7-b6ff4eebdfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac0bcc9-3223-4c72-83de-e01fdf882839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8feb2b-d702-4df2-a8ff-b043e846c267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca75d799-64a0-4f7b-9507-df8634a86c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cad71d5-ad6e-48e5-827f-4bbc88717bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09691ba-1a3e-4964-9922-54aafe37832c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd671aa-50e9-46af-9698-87f77a0e05ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a07298-d5b0-4443-935c-1b44ba666dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e254dd1f-e9db-43f7-a133-95db14fa2050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.59.186.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a9071b-e3d5-49ac-8d97-218627e0cd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6021c8f3-adfd-41a4-954b-866f45365c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4299ebc-8d36-408f-a6aa-d65bb162d66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c83236d-6e6d-47a1-9326-b0b78d18aa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3604ac8f-bd77-48d9-aa50-93bdbf423085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfdec48-bbe4-4977-b802-db144c7eede0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.16.62.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e201cbad-2547-4526-a450-6fc7db0a6c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f82cd7-be4a-4cda-a10d-37b7a548e5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72449e2b-d11e-413a-aaf5-b71ffaf1d34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.101.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086464d5-b9d8-42b3-aa7e-79edce2422b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.82.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b5b6ef-e2c0-4f13-a6a6-9bc91b5e4776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1c5cce-3e2b-4591-be1a-647af245dd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df48464a-1ca1-4c66-b77e-50b64fe5e2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a368b444-5bb3-4435-8057-fe52fdc475aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce1bb28-e0a3-4997-a95b-7f278880c2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cca049-5618-4712-9b48-8ebfa7fdf35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11090a95-938b-4577-b635-9f5fa48b767e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e24793d-afe2-412e-973f-0000404549db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1964071-5e2e-4e98-9a05-b4fb8124dca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ff7e58-2a32-47b7-811c-df31d0566fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2291784-814c-40f0-a2f3-92e3bfa9c145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21fcf04-e3f1-4af6-9792-15bd83d256dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386b2264-0f76-4161-8eda-4b9579fbe8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bad2553-5b89-4f39-a92c-7a03f68b8386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8554c53f-bf3a-49bf-bee0-cb44479f447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8323fe64-d941-4cf8-9537-da3be6eaba46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739bc08c-97ba-4ebb-b6b0-44c1bfcbb11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a42d3e4-c62c-43ed-8693-0ad8688c7668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.32.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156b8689-376a-42ff-839a-8a0d2f1c93a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.49.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a9e170-64b6-4f40-82cb-2ed9fed37967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d463ffd1-709d-4258-87b9-4a708887e271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.67.236.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a0da1a-bffa-4cb2-ba7b-e6f38c2181b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.75.118.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5a1fe0-69d6-4262-836c-e0724e0da5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.1.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedbe34f-b7e8-452d-9f9a-80995eb10f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.31.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bf9295-fb62-4c4d-927b-4061dfb74fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.170.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acee896-3163-4d71-8b5d-190c7eb7102d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.15.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22d659e-8dbb-48a8-9ae8-d7d84ebf5146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.223.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46c5a6d-bae0-48ca-acba-39db3f216559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fa2377-ae80-47b9-9865-7a41b7c3f8c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.206.113.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89bf43a-60f0-4a39-a38b-ebe92bd58f51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08c15d4-b95c-4237-826a-fecfb5b079ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.43.93.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0614a9ca-39bc-4dba-8e7a-b9b7e57a8836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.117.72.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41937c29-ee01-4b31-bcdd-c346cff89e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.25.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7e6270-a209-4aee-9a0c-4fefd4dd2397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d550e22-ca8a-4b6d-a587-f1cd3c618b78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.243.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988b49c8-9ac2-45a6-8a27-3fea85093a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83370771-83ec-4adb-9626-4d3b36519bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6933c60c-6dc3-49fd-920a-9b880aafc9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6f8688-4cf8-4eff-bc03-bd690d137923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5829a80c-ed18-461e-b0ed-4b3a306556e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8040ab-c470-4f85-9d3c-04a8c5c58f13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d687a2-5626-4e10-8171-33ec0bf6f3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa32242a-9d59-4e2b-b593-191357f760f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1aa8b43-1a7f-4d64-90f2-3efa5277bdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf08a399-829b-4a1d-ada4-e7670add98e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f2adca-b799-4af4-a0cd-47e9ad5d0750", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593a634e-7887-4df9-a91b-979d24eb94bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4da497f-b975-4e4d-8fb3-5970292a8d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb40d76-7d67-47f4-8800-55ffb3052673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3612b91c-b9f2-4a6e-a10a-a7717afd8a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f99fbf-1d88-4e55-a57a-2407bf1c29a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b7129d-68bb-4a74-982f-16f7a4f928ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9328824c-6ac3-47b5-94d6-4e56aee08e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c2a216-dff8-47c5-b9bd-e7e6ca12e950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbe6ff2-f89b-40d5-8a90-0eaeb2d0f86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f214e47-fc82-4cb5-a866-fdaaa7d21556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddc6754-4020-4cdc-b101-5829c86cba87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405ce208-c4b6-4bd5-a2d9-e3c46b23820b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4df15-ca50-4e98-81b9-d9950dc3a38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd73bd20-2571-49b0-a9f1-94164b5501c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126cc348-e101-4e47-a4ce-ba60e2c5f23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca277c5-1aa7-47a2-b13b-7f2791f6e7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d872ab-c1da-4cbd-b73f-a35cbe5817c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b6e6cd-9d74-4164-b7b6-f651afb6ce22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac165248-2f4c-46c1-9396-dd0d0b35c09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90800925-591c-4c41-af8b-09d333473f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b4cfe6-6e90-4a46-a62a-eff1cbcaa014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128344fc-d576-4e36-9d96-598c7138948d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ededf464-3115-4ea7-9067-bae2a889d53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ad16e2-266d-40e3-8da7-3f406adcb99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3717468-3a62-4118-81a3-831fb3a59d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc9885-7714-458e-afcd-b78c7afd069e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1737c8ba-3b47-4381-9852-34ef47395644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9765b61-f269-4777-9145-cb28853a3242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863fbe7a-a8a7-4953-85e2-4b2b26eb806c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e8ef06-f643-47e5-9778-23b39694982e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbe42cc-1fba-4eca-ba06-6ac9321c1e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8630b5-790f-45d0-a011-7fb1c2049b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f367695-bdec-4347-af52-c78a385a42b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579363e0-f196-48ab-8b92-579798288f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa6c693-8f6b-45e0-a8f2-b8b6eecdbd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c00963-c1f8-48fd-b704-62732b33471b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad55bbd9-eaf8-480b-b43f-81fa2e5ed11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8f9b38-4e5d-41e9-b54f-4f61a320bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbeec845-cb1a-48f0-9e74-451b747bc897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99474648-eeaf-46a6-bbe4-a83b7f13ce78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da484eb3-f821-4ba9-9602-c3207b0ac5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b525bc95-642d-4dbe-88eb-a2b52b0432a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1205c614-bd79-4e5c-bbef-8eba9795504f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4be27dd-a18a-45fd-8589-317319460e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da0b3c8-5ddc-44e0-974f-2cd3dac74674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f39531-86cc-4599-9690-de6df6d90b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.9.35.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce909d9-dae7-4eb6-abc5-87e6648bec7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.107.70.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf38955-cc46-4cf0-b9dc-e5ed9eeb3e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.131.183.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9773fdef-c90d-4ab1-b867-520efa3038df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.254.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7338563-b887-4341-bd32-d7e1be8d3c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.156.136.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f6386b-81c9-4955-a21b-2329417ff2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.78.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4e9171-26fa-4b0f-959e-e508c4674f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.75.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69997b3-3669-4af1-bd80-696035d3e69b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.86.215.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1f7501-aa87-4c3b-b9ba-52971f363c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.183.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c53f16-d619-498b-a1ba-174dd552a7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.156.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e75770-3157-4c2d-aaa5-4b2f862057d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.212.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddd2f9e-83e0-4343-9171-5e052c3178cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.255.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1478a222-1e73-4786-b038-70d5e044973a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.62.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437a3f62-e2d7-4b86-aa75-732e4ec1b7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.123.126.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed2b33d-eeed-49e7-9483-141377fd3cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.125.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf68114a-0aa9-4a1b-aaee-837fdf1356ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.155.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ec24b7-bdd0-471f-a745-9b49c124efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.156.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b24c40a-7c4b-446a-ba21-36bd57d66381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.204.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c698a2f8-49ab-4f13-9106-127b81b9e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.248.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28163b54-5580-4b2c-9edc-9d846b14d87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.37.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9339e06c-6f66-4721-91ac-54d82f61e5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.46.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8854d4b6-db94-49ba-9dd8-60c2f1c585c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.58.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b682b4-81aa-45e0-a5f2-89b819fd8b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.66.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ece4f67-6669-4d7e-b682-e973ca0ed999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724d84ee-667d-481e-ba0a-e5a5cddd0d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7878a232-503e-4aa2-9a02-24841369c816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.156.145.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4317afa9-d43d-4334-b342-086260e71a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.156.220.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9856a18-72eb-4249-9c02-71ff1919400b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4942853-af97-4be0-b8ca-88da684750af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469f8945-f57d-468d-9310-c742a6f282c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3369a4f7-3b65-4e72-9ffd-bcc539ff1efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.168.69.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb0e6e9-28fe-4de2-ad25-e617e26efa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.175.132.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba245368-0497-4bdc-9652-936b0c7370ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9ca40d-b4e3-4dd0-be2f-a4fcc4788f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b397073c-eea0-46ec-b907-143c83e84619", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496441b6-68ab-4ccd-ae59-91bee4d4fba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325d5926-e343-4332-ba83-6f1d11e74fda", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760827bf-0712-4ac2-9c07-be1ceeb34b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.48.187.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1450bc8-ecf7-4547-8ecd-9b77a63a5abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.205.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6b0968-3288-4248-89df-fb3a8d3af3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.255.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5621cd3-faaa-4143-80aa-1e337b1cc8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd26ba0c-2b56-46bb-aab6-bf04afcb7de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.65.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827a4680-f21d-41d1-a079-c3d8b2fcf1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.200.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f13fd-b605-4930-a8a0-7b1085e8d7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.200.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c10d2d-1b7e-42ad-9e27-e7b3ac7479eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.110.97.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c59a4f-6e39-4ed6-9b2e-e32d38fb1afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.124.26.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90760102-4bf0-414a-9c5c-992bd3e28520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.219.7.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1234cdeb-d11b-4295-922d-a2e2f086b22e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.42.7.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3ca351-6477-4263-b118-c02fd8c2dfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25a2525-e50c-46c3-954b-d5fe2e739b07", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.103.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d1337e-153e-4b40-b594-671c82fb4702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.192.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a60ed5-8d19-4594-ad96-6d64235f1162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.192.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf7455a-36b1-48a0-8451-9837fa69db17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.192.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109888e4-af79-4ba4-8478-8e5284d82413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.192.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65852682-7ca7-41c3-9f5b-834fb94c6e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.223.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26808f25-ea38-4b3e-9ec4-0c7c4b4467dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81913e15-2c23-4956-a98a-75e6a2b45aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7498a86d-c043-40a8-8229-69dda0892630", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.63.50.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e248c8-16db-40aa-ae58-c14a1447b895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf78ac-a8c6-440a-bb83-b8b84cf03bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8e6735-4650-43a5-adfc-cb13285e4294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9bd695-8440-4f9c-8cfe-b1a3b87ef4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda17f88-012a-484f-8a2d-9837b7c525ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d0847e-6486-471e-b3f8-423e89facc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518ec0ec-a3a1-4309-a99b-3c434a4a27d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.231.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b919d9a1-d696-40b3-995c-d3f22bdba1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.228.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa95fa4f-6b91-449c-8bae-9b5fc87ae7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.252.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c793bb3f-69d4-4739-8aa6-28b9b44e2de9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.114.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4adac0a-be59-4193-b431-831f63ce2719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc61c30-dfe4-45cc-a30d-d84ad287260b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cb3596-7736-4762-8aa0-7a50e8429a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc48d76-e708-4e71-81ec-aa0e5a393900", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.7.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85549e26-7315-4251-94a4-9a2ab912f88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.100.217.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38840d48-dbe8-47e1-a29a-e1e2ac7cc9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.101.183.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441fdb8b-2e65-42d8-8920-08356419dc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.103.241.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d494a754-1659-4e01-a63f-8ca635425c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.110.149.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d37cc4-e454-4395-9927-584c7e4b91d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.165.30.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0435ed-6d28-43fd-9624-37fbba2fd5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a7bc27-1453-460a-92a8-688d022eb381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d4689d-4820-493f-9342-e248a046502d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.177.66.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d97373a-9f26-4532-aa29-322a5ff14d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.245.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06cbdf5-4e9b-446b-ba26-7aaebc092116", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.38.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c28bab-f378-4b48-a3ed-7df104846460", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.67.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e9ea2f-47a5-4a28-a617-e8dc2b4c7908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.90.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0557529c-5f78-40f1-b045-5f1694f1b009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.191.16.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7705f8ff-83a2-43f9-9315-b7bed708ab48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.250.196.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b1b406-5508-438e-8426-304a53c40d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.105.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a507bc-4f4a-42c2-b675-a805e8937f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.143.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a631f00-a40f-4305-a5c7-4ca822a4fd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.168.18.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36886616-7b27-4149-ab04-08293bf6db0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.20.0.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8aad911-563c-4d61-b455-6fe2b0341b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.40.51.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8fa6bb-330d-4207-851c-330ffdd71c07", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.137.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89405c7c-850d-43c8-86e4-e075cd699bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.66.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90f0b51-a6d4-408a-b07c-31a2c0f8c1ae", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.66.193.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371fa943-d897-46fb-b8a8-00884ceef3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.93.160.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9b078d-65e1-4564-a9d6-2fd2d6db785c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.94.229.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183a4156-8f82-491a-b37a-9a3a1e070134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.217.16.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe8bb89-3470-442c-b885-db38108633d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.231.86.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcc3c02-bb21-4fff-bde8-25d9eeddc67d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.234.59.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6fb8d6-61de-4c76-8859-786f451707f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.57.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb2c939-18e4-4388-b02b-173d5af3c39d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.79.87.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d890ee-c684-4395-8aa1-fd238d98b528", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.94.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c14e42e-fb16-44f2-8deb-a9633b795de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.147.63.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfd19db-19ac-44c5-9830-40df258d4797", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.155.62.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a01640-b1dc-4b0f-8ed6-75c823317af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.162.123.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27020bd2-389b-4a95-b7d9-d909688f8c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.182.125.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2441df-7aeb-4a64-b85a-53aebb00ff52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.185.109.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb211ba6-cf4c-450f-b1d5-3fae624b639a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.201.208.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a834767d-fd6e-4c5f-af4f-4d2246025ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62583e6-15df-40a3-94ea-2ab2a719614d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.126.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75af7b9-0e7a-497c-8350-21fa4b6c4e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cce53f-a151-4b17-80d4-6a53e66fd2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c3ad3e-fd76-4875-8d03-9c429c269366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22659c12-43b0-4ee8-9f23-87061a23070a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8da13d5-24a4-463b-ac4b-6047c03a46fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e449b613-43d5-45cd-94a7-e4a382f2d1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb3331e-943b-4860-8a99-a5295b55d523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27106a6d-e1f8-4de7-b1c8-83ccd77cece2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ca5683-f3f5-4f2d-aafd-3289cdd30e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cfa4dd-a3e4-40b8-aaf1-e68db407b832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6a9a9a-2ed1-42b2-8fbb-48555403df6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e0445d-ebba-44ec-9255-56049fa71997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2126da1-268b-4d37-8ccc-54f145992d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5988d0-c81f-48de-b4e2-8d497c708a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7a368d-577a-44cd-8f0e-0063f7bbb79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f75f735-1275-4bd6-bbd2-4fbadd6b22f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b50d1-69da-4ae9-bc24-bfc43569ff2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759587c0-e8cf-4567-9bf3-33cce34a9ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0763b67e-387e-49e0-a993-9ed40161aed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f28da86-c3bb-4f1a-befb-18c001097acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37868a9-79c9-4398-826b-5d9651cdc7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80c8e15-093e-4549-ae73-642752b3922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5f67df-c357-46eb-806f-2cc549112993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57600f9d-edcf-463a-925e-be4de6b0bf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76ce0f4-5432-4395-a816-ef4facdd7923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1111f3a-5285-4f79-ac43-d4dc25ae6906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c9a7ef-8ec6-429b-9188-a759fd101b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b562a2ce-daee-49a0-8fc8-fef02583c875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c84b256-3133-40dc-8bc2-cbd053e24a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f3eb02-bfd3-470e-8184-e7c494e95d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c6b14d-e423-4652-98cb-507db03277ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd50043-93dc-408d-b29e-4ee3de627983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eb3e72-82f8-4dcc-a293-28e8271ffc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98d3280-706d-46b5-8da8-521ddaf218e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30eb634-244d-4ddb-8720-44e19847c94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89af8440-2d90-4499-ac64-b1e836f7ed9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c60891-e7a9-4ef6-ae1a-f8e5d788dc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da31cc2f-aef6-4639-b9eb-116b542886f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82f43d3-25d6-407b-8a71-bd2b7d0543ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d653e0c-84a6-475a-b65e-eee2bd837644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da879ef4-0d5f-46ee-8363-aac6ae77af46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92311d45-e7e6-4e6c-9420-61b88781c26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01e2035-c99d-40b3-8ede-18b63b4fa16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fe8a8b-2ac1-45fd-945d-de5f1c2326d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3192c4a9-036a-4e49-a62d-60b4877aa9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bf62de-844e-4dc4-8688-bf934ec51d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d873c8f-c080-4aef-ab58-a61c99b2b0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2dfee6-ff77-4c41-a9f4-a0d132a81abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00a4bc4-7200-44e1-81e9-de8bfccc6747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba82449c-a054-4b37-ad52-23d9ecdc9236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.107.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb5830d-7817-4093-a765-b0215b563382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc78fa82-8139-42d6-88d9-defd87ac769a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1976047-6424-4e45-b3e0-0b2b2a2d33fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad54a0f0-2961-4e55-915c-20cd8836e556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1cf7b9-3b43-49e1-bf33-2e0d0138f6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d234d629-7c31-4748-be68-2641594bd5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f58ed9-d9d7-47c1-95f2-cc21d61c0047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11523f0f-9c59-4160-97c2-2f1429c3bff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.102.171.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c503f978-622c-4cd9-9cc0-e14cb2d2b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.103.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40f9d5f-39fa-4898-a03a-47330f569682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea82ee-884c-46d9-b126-3121773c420b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965c19be-9bfd-4575-842b-6dcb42f9206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0531b7-c3e7-4acb-aeb6-bbfb4c25d558", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.124.179.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d95243-40d7-4552-a544-153335e1172a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec76aac-3efb-45a2-b685-846e9dacda2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3acf246-6298-4dd7-b8a9-e12fa830ed57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaa4345-5a46-4cc3-81f1-b94561f6a393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7125580-77ac-4c29-bf1f-c2cd01e2b2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bf7c9c-26af-48e8-bf1a-b6ac187dc50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fa380e-71c7-45e5-a594-105696764a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10d4b46-671e-4d74-886a-b75f4d946d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d3ba47-84c2-409b-a2c9-88b667e337ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a70bca-dd74-47d2-b35b-df442c441428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.162.9.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940650c7-a458-4c07-a2ed-e0593e94f5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711dc64c-d011-4574-ae95-78b184b674d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.17.135.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952baf1b-4475-4f3b-a748-d8a6d478a514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.116.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d739d0-0e91-4731-a0c8-a46e059fbb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c21b7eb-78ea-4f05-bc2e-68fbb02baa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcb985e-ed3f-4223-9e57-e24398b0af3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93353c5-f816-429b-940f-56564153cfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c4aa47-a526-4402-8206-7c5e47443cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68ad3b9-d187-49d7-98e2-e22e0524c3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6a301a-bf7b-41cf-98c2-a587d0f7d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce4d121-b19c-49a9-af1c-0070644d5e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8214d8-0617-4dca-9e5f-815285061220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22383e20-89b2-4108-9a88-15b9099b2424", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eaea05-16a8-422a-91a3-2d80bafd372e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d2cdbd-4035-4b5e-a6d0-f27caa49fcc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9ed0aa-847a-4ae8-b9b8-63af498c24a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f886eb76-429d-4631-923a-a3971e9bc3ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99e4a02-2bef-4024-a9fa-d08c86dab93c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5317fce-66fe-4a96-80a3-7921ed68d6b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc34c3f-449f-41f5-8236-a39e73601658", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e981f61-a660-4551-8258-bc26ecbba525", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95287373-bd0e-4e7e-94eb-0914601c3840", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb32c16-6e58-40fd-9bf2-d2ce97a504a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bcbbcf-07ad-405d-9d1d-039d09e3e21c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f10cd9-b86a-4b9b-b494-5c802daa8a99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9b76ff-207e-4c7c-b88c-eb16a3e76f91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba7b8a7-f172-4432-bed3-9b10a29e5ea1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d444a1-7212-4379-9edd-022b940e3242", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910e0697-556b-4af8-b457-7c072a0d305e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc5e998-580f-4358-8e10-6c6e28425e1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6ae028-2460-4474-93dd-424053f0d251", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e373d57a-e6e9-42b7-9bff-f82d7a67112b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.103.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38856b9a-6492-4edb-8f98-bc4c21d24e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95739494-2a55-47c5-b85f-8db89af7f6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87d36fe-dc17-40ec-afe8-fa270e86dd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5435ae58-ec5f-4853-ab96-6acd35a1c2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2d5043-b01f-4049-b5ff-93e6756ce1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82c2a39-8f66-4329-9789-dd91347c27b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b87b2b9-85c7-4566-a582-c6e2c454bd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4565b8d-c9a6-45b6-b025-5575b9dd8827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.223.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee29fd4-83b2-4f96-8fee-41d8cba1ce7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.205.246.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd049756-76fc-4f22-ab8a-f60bf3b60690", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.207.133.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a16f645-2a68-4900-891b-630f422383f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.175.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d252843-5a0f-47bd-8436-b41203f776c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.230.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81156ca-d315-4f54-b332-d26842e70578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49310dc-3ba9-4a84-a034-44d1648f5e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d70474b-b3bd-4388-986c-6a3f520fd17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6afeaba-c00e-45ba-b73d-814790f87556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307cc91-26e9-4b48-a9f7-30a6259e571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ce6a21-2dba-4f58-88de-710cb433c04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2399c378-c211-4d79-8743-f40ef618930a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.233.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e0c731-a627-4adb-b50b-221cc4282859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.40.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98a1d91-c12b-4b84-995c-22ce862ed593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095df8d5-1265-49b7-873a-ccd6cb3be8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b39c00-9e10-4857-bee9-83696a8c4d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bb72fc-c976-44dd-8d84-1837534bb0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca4de6c-7fe1-4840-98fa-592d5a4c057e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb5942-9d2d-4b25-9635-a6a3f9e15258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f88806d-1d89-46b1-b8a0-4730cc9ffa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de48db25-5c97-411c-b8ea-7ac079bbd48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b96e354-fe26-43a9-94fd-e3f242e60efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990a837d-ec80-4a5e-8393-4bee6f0e15b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe309f8d-8b1c-4d79-9fd0-6780668247d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c28324-bd9f-4f73-b0ad-007d9dcc6a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.198.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe28ced2-8566-452e-8e5f-af94aa1e3d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.149.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c816418d-23d9-4f43-bfa7-eff57c416d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc043de-6ca4-4aed-9a4d-1e2aebca0c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da15412-092f-4ad3-b446-8de03e699c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80e0218-b515-4346-94dd-1d2c3c699af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0240ede6-e414-4207-a676-78217975d3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f83f943-52af-4943-b976-7f03c7e0a9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec674788-a01c-437c-ae6c-ab846577a280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c389223d-fed6-468c-9274-a41b77bd6ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d43684-7c0e-4aca-8207-5a8de695fea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f8d060-edd7-4082-9b6d-e6aef455126f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af796ca-ac5f-4869-87bb-a04973e92c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e58e52-5707-46d9-9e35-afa5385e763b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a378dfa6-6997-47c6-ba4c-6d4fe39b1705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb59d3a5-eec7-4838-8e70-ff04ce5be9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cd4069-0e73-4e16-aa77-5a824e6a0bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f3a884-1296-44ff-9d83-d2e496f3d537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d3b075-570a-45ef-b87c-36c397b63ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be7fcfe-a9c1-4af6-842b-54c5a136366d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc12df7-a320-480b-9f63-6a98d318a2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbcb7f1-e77e-497f-af61-e29c0c06bae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fadd34-8815-4edb-9e0d-36fa315917ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2568cdc0-4ed7-48db-b67e-ff2a68b8f58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c58bbd-d631-4cce-a95e-20cd7a70ed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.130.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c08a8f-2c0d-4500-8bb3-a6fa901e64f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.253.160.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e4dc7b-e0b6-4b39-8a0f-913b554c6945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2267ed8-05e8-4f3c-8a09-d578365c14a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe0cfe9-d33c-44ea-a3c9-49f5a5aafd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7560578d-91d0-42f2-9a51-404963bbc86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f19415-3c11-44f1-94bb-6cb5f7426ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a8b373-c9f4-4aa6-bc72-d058e4945e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae53751-48c9-4192-b218-037482ccc037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22b5686-6542-41e9-95f2-ee69ece49fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b87758-79a9-4ffc-a5e1-5821731fbda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a797f4-ecfd-4cdd-9425-a8433e62f118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c69029c-f644-4f79-a2cf-8294b431c46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.37.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683369ee-1b2c-4bf4-ac5c-8b7085e88cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d956bfb-ea0c-435d-8bdb-d3ca73d90256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1733c0b2-d7a0-48c6-899a-a2d0d8a8f3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.43.231.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3189390-2910-4a3d-9f30-4a460b094d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.45.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ae7d2e-fa19-4974-834b-561d0115896f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89688ed-6091-4d5d-bad7-1c77e384a7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.79.153.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc29c9f5-ed08-447a-85df-517d2197c624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d66372-c845-4c1a-a68b-b09b402d6687", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.92.138.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cb4cbc-2617-4d20-ba5c-0a8b93ca2005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b29409-06c5-47fd-b2b4-531d9a7d35b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8732f6-dcc7-4e98-ac8f-fe6413bfb14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb577c8-20e2-4a48-bacc-d7d92b966eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda819e0-c1fd-463b-b9d5-3acbc43efa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4b439e-775c-4bdd-b462-d16d4eb9da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa6427e-f91c-4ad1-a33e-9fb97b318798", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.138.51.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3716c61d-37b7-466d-9024-4671614c28c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.151.100.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf52283f-1136-473d-a535-38798f180e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.156.43.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abde7198-b8da-4213-999d-670acead9a22", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.188.153.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abe2df9-2a9b-4eab-b962-d26da9f78ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.215.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01906a2a-7cd2-433d-b47c-2b7a8dfc5f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.194.100.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b50d060-8091-4354-ac0f-34d64cbbf551", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.205.22.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fe81c3-a746-4473-9e8a-7e6dd75056c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.23.28.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ca48f3-73ee-4b26-ab8a-b0b2554ebb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd161303-d942-4989-8d81-0dfefc859bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.47.137.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aae7bbb-b915-4292-be66-c7992323f62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.17.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c291b15e-3895-457a-a650-da0a37509906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.212.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec32c4-788c-4fe5-af0c-b20385149c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.52.64.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67109a83-cd08-44b5-b821-babc07528973", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.89.27.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40cf53f-e620-4f25-9a08-d1e952d1f447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.116.77.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ee2a3b-d5ed-4abd-b7a7-0e09317d72ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c26b0d-44b0-4701-afbf-028c9f455936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.154.100.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77939daa-20fa-4be0-838c-95d881357123", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.171.58.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd575da0-4f5d-4b36-9c5d-2f648470c666", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.90.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a156359-0950-4c48-a2a4-d203bbb608cf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.11.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1d3897-c830-4297-8240-cd90d8dd7cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefeda3c-24ce-43f3-b936-5326ab5a7e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c16e67-f108-4066-a91c-36aa5e321aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.199.44.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79711323-24de-4dc0-9262-e9f0f9bf3f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.20.74.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b0d85f-50c2-402b-8228-b773ff6e57fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.209.28.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a29aa0-3d39-4841-8a52-8bd967d3263f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.212.47.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03ffc3a-ec66-4778-a425-8bfa5b92bbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.223.14.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e42b54b-9830-4627-a215-a54296e6be6f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.224.144.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6011e13-a925-4b8f-a2ce-45fd8f8e26a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.228.171.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3ebaeb-fc78-40b8-a42d-cf442b576fee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.232.187.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4368bab0-5ae4-4cee-97a4-d56abdbd36df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.249.110.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d165faad-f3b5-49a3-8722-1d5c5df56bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0a0d0-79fa-43e6-9302-9c5bf1e01fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.45.95.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afea662d-bfe2-4a89-8714-b93ac442f79d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.157.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf6301-e3fc-435b-ac92-b753385a8a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.67.136.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19482c4f-158c-4902-8d41-767d5a1355dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.73.177.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6350baf9-d322-4294-8f1d-3ce7361a4899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.119.38.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9382198-3282-4ffa-b41a-5931154fbf33", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.128.73.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4223a8-688a-4803-b348-bd1b9378165e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.162.145.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bf21d2-def2-48a3-af67-db078be35e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.11.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec411a3-7c01-4ebe-aefd-2d3cbdd94c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.110.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b652e3e5-84ba-414c-8959-0c002bdc782f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.122.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c4ea40-810b-4a8c-9173-7a8e3f56437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.171.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb413902-7e9f-41b7-a304-d77bd3efc53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.209.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a621c799-d146-4fab-9564-ce4cf5ec7473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.212.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966a461c-7863-4fe8-a39e-1d9eb86a2e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.41.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d20456a-6d55-4e2d-ac28-1e47e7e2f96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.55.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5946a09c-f8be-49f6-965e-6e98cb06e9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.57.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad18f59-d01d-4a83-8bd3-befd810653a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58634b2b-e997-4c1b-9bc4-01084caca25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b06a00-fd79-4359-9146-3aa7cd162022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8652dc97-6890-40fb-b342-a650a607eca7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef88c4b-503e-4b58-afbe-0a4172f4f27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4acaf3-9107-4cf5-882b-541df0d04228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a816fb-caa7-41c7-b619-d9a8c352bde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb8f345-f7df-4a46-a4e4-d3c4afce214c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.72.41.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f9b8a7-8456-4516-8ab3-d723078143d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.92.241.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6d3a6b-cb54-4765-86c2-daec976d4739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.131.228.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca309817-7eba-4b4c-b0a2-8cee5e39a7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.142.23.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31186dc-3e78-4226-8fe9-2013b144ac57", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.55.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47fe3bc-e877-4644-9737-073bffe6b37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.163.51.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2e7655-f438-4bf1-a6c1-f5b3158301cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.165.70.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f224f9a9-1332-4e3d-90a1-facff4364cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.177.48.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce9daea-55e4-4238-adec-9166cadce96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.181.24.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecdb91f-9d73-4cf4-ac4b-27ac760f09c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.192.90.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebabb7ef-2cca-48a7-8541-73507da7a917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.248.137.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d93b47-071f-437b-bb8f-3c15d187a55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.103.180.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bd4c10-bc02-419d-bf1e-ee538e1e0340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.106.57.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6018ade-2bdb-4d57-baa3-c8c457872321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.113.115.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de42f272-9523-41f9-99c7-3f4c68aeaac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.117.78.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136b1138-e0c0-4d37-91c9-9bacba63f374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.134.134.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef62454-8a2e-4fff-b6a3-096d7ed5d71f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.140.82.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aa2115-7b8f-4fde-b98d-7794db31376f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.171.112.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761f460-8044-4d35-b81b-62adc055b7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.135.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aabcea1-cf9f-4507-86fd-a8df617ad228", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.223.60.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752d8c58-ae42-4e98-be03-ab4d24b1fc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.239.208.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328830d-0bed-4688-8247-841b1cca151a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.39.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8139b093-6c20-4706-8723-4535953d73d9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.128.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db852c09-336b-49d5-a6f6-ece4b2fb8697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.216.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f484bf8-af94-40a3-bcb6-7a7affd80d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.61.100.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebb070c-72f4-4de8-92e1-be30fb37f3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.75.238.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b6b6fc-0d47-4aff-9370-2b01b3453a1c", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.30.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c1347f-3777-4709-8c58-2f371a96c37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.44.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f384c0e-e5bb-4389-a547-1b8e202fe942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.249.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257f979a-6dea-47ff-ad58-7855bccb2358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1a23f3-98ec-42ec-ab4b-e977d81d65a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.11.29.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8568eb05-7b8b-4229-a312-3797829df7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.188.205.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620f95c2-acc0-4449-94c4-3b5749eb9fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49af8957-758c-40bc-b5ab-df61ceceb0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.6.133.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e3fe8a-d905-45e3-a522-d5e218045bef", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.7.107.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144e3684-c769-4440-b67a-85f9862f722b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2324244d-b6f8-454f-b4bb-84ccdf0a228e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b074fe8-bdab-4f35-8279-6d2cf6472712", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e105c175-b789-4a8c-8d73-6b083a2249f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.156.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4530f5-8861-4f00-bcba-84c73926c4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeb93b8-037e-4b73-b9b4-7ce1dcf011ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5879a0bd-06a4-4b47-b314-1c2a8f9191c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3f711-7a29-4294-998b-164a3225ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addf5026-f538-4849-b46f-cb28653c509e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5d8ef0-3aa3-4f9d-9292-7c4bae31ebf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.139.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc76e00-2ec0-4337-8598-8ae8af83822d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.148.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7d2148-cac6-4862-8b9f-d72e10c44e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4b56fa-02b7-4990-b21e-0c21c82e7e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eb0ea2-125a-4de7-a1c1-a4ddf656fabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a858c254-8915-464f-ba32-48bae1e7159e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.27.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac043cf-9b9d-4c16-b050-fb1cb6f125b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.90.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b64c8c8-52f9-42ff-9eab-fa48517af55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.96.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574a8ed5-6ad1-4238-8078-322015f42628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.62.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad69141b-666f-4d44-abaf-5a7298555dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.62.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d23115b-71c2-4c35-b250-2887b30e5bcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c1428d-ddae-4774-962b-0689e1dd1e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.64.86.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d041e535-f0d8-4b6c-b11f-e305f855df62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.249.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695fbb01-d244-48c6-b185-f39a577dcc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.129.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81f3c11-aee3-4572-9b33-71ce69a44a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.129.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4164da-692e-4f30-8ef0-edbb6ddef15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c54414d-9a23-49d4-ba74-8e1f5b299040", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.146.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7605d07e-f290-487a-accc-15b112d6f3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f4f4a9-da7f-40be-bc34-a6465d2ccd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23144da2-bd69-4b09-9530-dd47edacafac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76c408d-825a-4fe4-ac74-3ee484201266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796dceb9-0e6c-4c78-8e8e-3b21a9919754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78ee52f-4f2e-4c65-8f70-c6dc5826475f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7baca35-869a-4d20-b721-8f9061bda811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fbe313-8e24-415b-bddb-9af166a2a8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e50343d-224c-4206-8edb-97933a7cd2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4209625f-0bcc-486d-b1dc-83e212dac94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6c0970-a353-42eb-9989-08d2f3edab06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86ed30a-ea99-4346-9926-f29f027db211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f171d68-0563-491f-926f-8fda9327f3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e7ebd6-68df-4888-8f61-cd8954855d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87cb250-fbf5-48d9-afad-dea0324b5a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85c3e0e-32c4-4ae9-9403-45453a736408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7484fbf-26d6-49c8-8de9-63cdcf4ad056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7b67cb-2f72-497e-856e-64a839d571af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1315d984-1467-4047-aa7c-c3fe9b157fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3470314-2c6e-4868-9c09-a65201f446a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fa9b67-f799-470a-bfc0-d6994a0a085e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eabe21a-8666-42a4-b0a6-d09ba3d95018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c1cd9e-b2f7-404d-a4fe-2dd893931dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e813f8-f3c1-42a2-a459-774924c4ae31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925c5b5c-c0ad-4c1b-aa34-1be48ef0c873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7e966d-7393-404a-a9e1-b0869e228a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d271dd-2b00-4842-9ab5-27c39412cd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6f0d4d-07d5-4882-8484-6c5d233e9562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6d2f11-af12-46ed-9994-c0dcaddcde19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d1492d-66a4-4403-a319-4e70297a8cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d04591-32d7-423d-b312-167c08ff12ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdc6133-c557-440e-ab21-5edbc98bef4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd06820-df51-44ec-a46c-ce816c666934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6591b14-88de-4c87-93ab-044cd1ffc891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa133c39-e083-4b28-b403-e9d9f50030c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e257b1b3-1f87-45c4-b4a4-85463f34f351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afd57c9-b343-4d99-b131-11388de751aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42013a94-cb36-44f4-a7f6-40a099ea6dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cacf16d-479b-494c-944e-df66ec6d27cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.189.100.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3517db19-ae56-4ccf-abd4-6c3b40277a0d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.203.105.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c668f689-e6ba-4341-9fd9-e49a6c1fdfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.23.58.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea9582e-45dd-48cd-8dc2-afb751db4960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.201.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84135e4-754a-4b3e-8ec1-02fcd0eb99c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4dc1fa-7b77-4c4e-b8af-2cd3cfd1c601", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90b86d6-61a7-4716-9cec-41a5182fda40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28415fd-3bb9-4098-9348-bfafb9b834e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e405490-68fb-4d5b-a321-0e0e96814e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773af2fb-c036-49ef-8624-f83bd1608220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d1c49f-4b07-4ba3-abcb-2c0fc5401239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913aeda-36ce-45ff-95dc-d0cc09354df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd167eed-2704-41e1-ba41-197083681e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25045bb-5780-4dca-9f75-b5c30326298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f66a832-1264-4b10-b79a-9f0bc9c51dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e091a5-6dd7-4c52-86d7-9cb869f27cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1e9ca8-d668-4d26-b1f4-288f940da1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a435473a-0bd8-49ca-b9cf-bc8f4b742d8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.32.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0196444a-5720-452d-99f5-aed1c941c565", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.32.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b4ad88-ebea-4681-8b25-530f5c7ae3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.41.131.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68814786-ebf9-4914-aca5-b5ff3bcfcae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.104.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b39d5c-7f16-413f-8a22-cfbf6155ec74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.122.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbddce9-edbe-4b99-8110-9fd27a1e3f71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.34.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304d442d-be8e-43a0-890f-2bf3cf6f8cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a40284-10d2-4545-a79e-4a048a4a34f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c05948-ef0b-45bf-827f-9c9a02b5ffe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636a25bb-e4a3-4abe-973b-a2a3bf9bdd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d3cc01-8681-4c90-8638-af78adfda8db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1438a33-bc31-4c75-9c28-c0fda6dbf07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd12d5be-b23d-4408-9bf1-d7cb91cb1c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0ef7f1-cad5-4c33-8bfa-718fb5aaab5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b6fca9-9dd8-463a-a9d1-0bf14e929f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1800fbad-a056-4bde-83b2-03adc81f4649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5b2c5f-83e9-4fec-b587-156f56683214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d182452-8a39-434b-a3d5-cab14ecb3bbe", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.213.3.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433292ef-a43d-4a87-b80b-b30582559f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.226.121.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be436f9d-5aa1-44ee-8940-15e267fe58b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.35.227.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae456d7a-73d8-49cb-a4bc-ccd2a05e682a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e087bb8-11af-429d-9575-964fd204316b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e26788-ada3-4f31-8b59-8515e8c23e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6989fb2-b1e1-48e5-b2d3-d045a613aaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d82810-3c4c-42cc-a1ee-0540f0cadd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a262caf0-c9c9-458e-9908-caca10f08147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a835178-8b79-4b44-82ff-97a1268b88a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dba048-ddf3-4f63-aea9-863da2ed8199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.52.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19d5134-cae8-40e1-8728-954e7ca849b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.53.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4dd865-4f9a-4477-af82-462dbbcb3fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.163.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd0e16d-c56a-4766-a993-84159a1e09df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.210.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c77d93-4ebe-46bc-81e0-380630c53bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.37.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b2860e-9829-4fb3-8ee9-382163c3bb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.41.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25fb370-d954-40f8-9dfa-19e999f3c4cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4094a4-b544-4d2b-a0b9-f0d2fc549043", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12983746-b9db-4410-81a0-0c64f028903e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183b3dbb-5c2a-4d95-9874-9bcaa2945651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba593f-3e78-421d-8623-aeeebf858c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de63ea6-61c7-4ba7-a710-6cebb652449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234b5fe4-c519-4439-9013-439b15538d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3561f0e7-2bf1-4409-924e-676c7b95cec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0438de32-1e0e-4e6f-97ed-e9aa86d2f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd871f4f-eacf-4749-9a98-273bec57a63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f51c052-1ac8-445f-b794-227f9670af83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a525f61-1097-4c3e-826f-abc04a3e89a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40482b9e-908e-43c9-9dff-8e1901ab6dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.113.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1d512b-d034-430f-a227-d5ce051ed788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.195.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b9d996-e0ac-471c-845b-99994c1c1771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a107e724-77b0-45a9-8a56-87d08e2146c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2cba86-acca-4daa-a97f-006816d6cc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424bfd15-9d9e-4d25-9448-3261c763e1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b370bf-dd6c-4ec5-84db-ddbd9b10eb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5c302f-38c7-40ff-b16d-735a943e604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc3067a-793c-4b4f-afe8-35bd1882d0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24743c7-ea56-4f4d-87f1-1071749d73d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590a5ea7-f7ed-48e7-b74b-1d300111ccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6bda81-b2d0-4a50-9591-38db75e2d8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.18.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d713242-87c8-4e1a-b2b2-43f64746aba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8f60cd-c082-4b99-9c8f-8cff9ceeb398", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c428a54-95a7-4e0b-a157-cf2cd30387fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.88.211.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b93e10b-0823-4aa6-8a7f-2f308e181393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.121.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39aedb5a-5794-4f1d-917e-d0ad5052d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.17.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b053115f-5562-4d98-9050-019398714756", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.224.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f969277-0907-42e2-841a-df23a379b9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.191.223.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00006083-8f6b-4596-ae03-101b65819e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.53.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697eaa8b-7af9-4a5b-ad10-93dd2940c254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.203.13.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1813e18f-c596-4ea2-bdbd-85a7913f1876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.60.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfd6ea0-2179-461e-b822-c402b7839c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.242.141.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174ea55e-1c85-47b7-91c5-ee0fdf712703", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.249.113.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8054887c-fec7-4128-9f09-52d0834761fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.29.239.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03404655-cec3-4ec8-a1d4-a51af8c12d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.41.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d27a82-fabe-4ad1-a291-1356fc5be26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.77.107.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66aaa07-f6a9-432f-91df-59ff6ace956d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.145.240.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050dcc2b-2be8-4fb5-86b0-2d14d8a94948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.5.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa9060f-01df-436a-b764-81b1c59b08de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.232.42.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641d6699-9224-448d-bdca-0c43eb9f145f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.251.249.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c690ccb-96b6-4a5a-9e5a-1c847e54d6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.38.104.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e240bc9c-6c45-4508-8688-5acec414f503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.44.15.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825bd62a-f46c-49b5-a015-82c0b125710b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc08193b-3c24-4298-ac75-10f178ca6672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.143.151.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e97828e-e46a-4b33-a5e0-eb4383833ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ead99f7-55ba-407d-8185-39430654e799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.122.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367e7ff7-927b-49b5-a53c-d4ec7a242333", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.69.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36b485a-b922-41c7-9188-453402791dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e582aa2c-27e0-45a7-a235-9599fe84cddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938028bb-5041-44fe-a99e-111dd7eba0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212fd524-11c7-4ba8-b147-2f03c60a96eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391ef7d8-df44-4495-814e-b0372a091d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.204.244.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68124629-3997-4f8c-8055-f0863aeffc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.204.253.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309deeea-56e4-4260-aaad-efc2d2c23166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.105.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c681d385-ed2c-4138-9618-248ec009332f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.114.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e298e1f2-8e1a-4f80-84c4-d54ee51ded7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.177.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c0979d-b441-405f-84f6-5e904fe14530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682f6657-8ed1-4e14-8296-134ccbf22156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2d7964-4231-4c90-97d9-2856bd3c751a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96983d1a-8695-45b2-9b12-942406124179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ad4a02-1684-467b-9bdb-06ec66dd66c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debc095d-a805-4a6c-a090-6a47e443eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc92e065-f127-453d-a69a-12e2655902cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83c19b1-84df-469e-bc98-304f9d998261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a02089-b1f7-4075-bb86-8c2446731287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388ec069-10d0-481a-82b6-2d97b17e05c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bc57b9-26f3-43ab-9ec6-a6b018157018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c07ac4d-c91e-4442-80e1-de9076e47424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3979af4-2104-4a43-b2d1-4d207bf00291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b33a15d-1f99-4d4d-afad-bd73a85461bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45971ca-e3b4-4888-9c31-34cbd2599e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5079ff4a-f28b-4e60-b7eb-23850f62daca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccfd8f3-9771-440b-9acc-403cce955107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d36407-0c4c-40ca-8119-ce75aeacb1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2a1466-8771-4c2b-80e4-c670daea01cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b6ae6a-b135-4eb3-a35c-068f02d72e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99da58c9-f41a-4414-850d-84005972dcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7b4d77-3eea-43fc-860d-0e224204ec71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb77310-1f94-4409-b56e-dd2dea8193bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b839063-667b-4a15-a386-5615410c9d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bcee61-f088-4f49-9cfe-d7ca8838c9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f53aed3-6b6d-468d-879e-63c43154d515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020b67e3-83ec-4554-a1de-20a50de7dc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f534077-5f26-4252-b32b-c14f4895f246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d52465-43d1-4c66-9bf4-281f032d1a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac7bcfc-2f5d-4f54-bb78-5f5f125f7f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e406be5f-6025-4647-859a-3c624688deea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f93c716-6ebd-40cc-9050-779534f55dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d2b4f-2e27-498a-952d-a821bdd02f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3289f41-3a07-464b-9b28-22e52e19de87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bb8fff-6b04-45a7-be2f-8b3f1211affc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf243d0-5982-49fc-ba31-129352fcd14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35659fb7-4612-46e9-a333-e1bcfed88493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae75569-d0ee-4e6e-a61c-1c6913c8edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f0b98e-0ae4-4cac-ade6-2f6f43631320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb695d0-d0e2-468e-8003-fb5a3a71704e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6a56f7-61fe-4ef2-b726-19a623fa33ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55995a46-892f-488f-89e8-cf0a4c7e92ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9fb0ba-aac4-4570-b169-17802e487d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de1a3a2-9abc-4f76-a257-7dd1c444f9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9520745e-1f4f-4454-b112-76d360d512ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6e32d4-6891-41f0-8651-6fad7b7fb550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a57e54-7d29-44b9-9e63-b2c4bcc69f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36303dbe-0f84-4b63-9e97-6ca729d07bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8957a0f2-5595-4627-9db3-2304cdfb9020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d9fc2-b5e1-4b75-88f5-f173844aeaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50702275-d94f-4a5a-8887-0ea02331720e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc21753-ad04-45b8-b456-f75ac8f442c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564360b7-e3ef-448a-8b46-b1fa3f13598a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a641a5-c6d4-420c-9316-2c0096032047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a12af1e-30b2-4031-8531-70b4b885bc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811303ac-a8ff-48d7-a353-aa56c8d638f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bab1b30-be12-447f-a111-028fcd85c6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b02efd-ee5a-4051-bd71-275e4c722ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fc0704-4780-4aa8-8fd8-22632b5b6e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9819c6-0f56-4e01-ba68-1f3c1ea81cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92752db3-0102-48c8-b969-247293ece22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66450d83-bc40-44ab-af1b-bae937c11157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--face6aa3-3857-4612-96e9-2f0e7cbb513e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a31879-f1d2-4126-8a8c-e4f67f5ad174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ff6a57-dae0-418b-84f1-d20ff38a3919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03115b5-ed09-4f4a-84fc-8436c9f5a388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d95ce0b-d716-4814-8808-892f674940fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a57033d-45b8-4925-90d2-f972b8b91dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa24c83d-29bb-43c8-b9eb-2981f0549995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc7cd3b-14fe-4bea-ab4f-83da386515f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f893b5-95bc-4187-93ae-dde1700243aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b65ee7-bc7c-4b75-8a18-87fbdcf44a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d29679-7dd6-4785-9524-ddbe6f6cd264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49bfb56-041e-4e7a-80b1-28bf2436d421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5acbda4-4142-49fa-add6-79633e962886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a79185c-1af6-4c72-a58e-1cc5e949318c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b76ad0-c8da-4b3d-9286-e21deb7f2034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2346d-d400-4659-b634-5e1430b42601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4e8191-65ca-45f7-a8de-11c8048aec73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e693305d-a9bf-4855-a291-156cd68ce1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275ac058-e856-4fb4-839f-c18a8733e186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96641512-130c-4059-8755-3b9efa49611a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3cf66c-009b-4b8d-86ab-9930e0b1d8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0f66fd-bf80-4804-acb4-c3975dc55caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403dc233-73fe-4771-9c45-9c3c2a80666a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa408e4-c246-4df9-97a9-d1fca2642f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311f9916-3b0a-4512-b221-ee0a1522d1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f2d2ec-744e-418e-8f95-c841df0cfaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de299aa9-a4e5-416f-a4aa-b578f479b619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11451073-0f0c-4ef6-b2bc-c4d458aeaa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56b695b-95d1-42b6-a82f-7abb04f32d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0641d67-3218-4556-958f-a3f2d86fdd24", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1ca0ca-6812-4789-8030-93faa7df8b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f10954-b39b-4388-8cd9-6afe23a17353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a0c3e6-0d56-4360-b91f-7ae53e8828de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9407d4e-0370-40c5-a057-7e75a99d2026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5604ec8-6fda-46ff-8147-b7bb52b4d059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d408cdf-ecdf-48c4-ac71-93593f46e27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec98c15-5317-417b-8152-6089d510235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a02f1b-784b-473d-bec8-5d56610bf6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5ef16d-a15d-4e31-bd91-25b6c1a76426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dedf17-04bc-4f13-adec-69ae1a09e779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc805a60-6e4c-42c6-b3e1-b7fd04bec7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6d0074-0049-4af1-9518-3983e92a0f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a30ed96-cf5f-451b-ab81-7ee6c77131f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0def108-8d7b-49ec-9579-7388a542758f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5760df65-2faa-46d6-ad20-aa7c53133e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6efc7f-08f9-4467-a962-0206e6f6596a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4bec68-6996-40d5-8ba0-72bc9dafca25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebb6f93-baf9-43f1-b864-155a8b25b89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368e044c-04b0-4535-908c-881a2f94d64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a0fc65-6720-4e93-bfd3-46472e614a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6cccf0-f1e6-456b-8547-97a35a6f3c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68af63f2-db4a-4944-8b4d-6b3a4b9c104c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df804330-3276-4ef9-b8e0-f718f749ba3c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276487fe-5e2e-4233-ada7-2bf90da97e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfee76f-faa3-48af-a8c6-da8070085002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3affbebb-2e81-41ee-891a-b7717242fbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fbf512-541d-46a0-9dc5-4ad1d98811f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bcba4e-ec70-4e31-8dd3-94220767977c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1caf21-2645-4e93-94d5-4b0a583921a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f686c8bb-bd70-4b33-b57c-150c5acbe0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6cca31-ef74-4e2b-8ef0-f09c04ef4bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46156a34-bae9-406b-89b2-c26c1cc79815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b11c86-d884-4db4-a48b-92215ccf85e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53478974-7cd1-4c2c-ad5e-0a14b82dfa0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcea5d8a-a24f-4b30-bac8-5cc01178fc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41879306-6cc5-4777-a32c-13f67e88793a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6273836f-2516-4f49-a28e-13369ff4a8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea9627e-e797-4e8d-8b7c-fdba3bf81183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4f47de-5c1b-4ba7-a4a7-3adcedb22ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c54a0ed-b709-41d4-9545-62421bf5f93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3bc07f-9d23-4fe5-810e-56f7bcdf05da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c26bba-2271-4abd-9bae-fc281858db77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f069a2b-f834-4505-8311-a69037483952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f7374-6519-4c4f-9a7e-76f221950f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7287f07-a098-4d54-8984-ed5ed0a21c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd003a6-e3e2-4d04-bbf8-678f18e8017b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4ed55b-24bc-41c0-a492-1733362032b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce12465-9744-4ff5-a7a6-aa90ac3e5899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce7f5cf-fe7b-4185-a4a0-a0c6100a5929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37493a3b-67ce-4e0c-9d27-7828c827f1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b211c87-f4d5-4fe4-a4c7-b6a4c2cf5a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.89.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f865d82-befb-470b-b03b-2663e8a3081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffabd1ae-2647-4b2e-b792-acfc59803dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0fdfc4-4e0f-437f-8f84-f59f1c8bfc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e690d2e-61e8-4d27-8aff-7168912ac6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0448c-dff2-4c3b-9de0-95229c3d935f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5f584-a516-4607-864d-36ae15f194c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7d7270-3178-4c38-a707-46895547bdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5733b2b-c8b0-479e-9511-1b0b0d9e898a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1965eb2-aa8b-4356-b8ee-043b691d6f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.50.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb34ca5-71e7-4780-bdf2-63cd4244caf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.52.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a8765e-51ee-4ce1-90be-8e8c1a5dc584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.55.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d70aa4-8c7b-49c1-b9bf-07cb431c710d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.56.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e878fc-369d-41bf-948e-55b5679de512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.60.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef92651-9e4f-45ed-9915-3a988e43509b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb00c35f-ed3d-4d89-ac6c-579533423a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494021e3-ca54-4772-a29f-ca45f640090b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.248.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb716ac1-7f74-4e8a-bb94-9e1c09e27897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.21.150.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25121b5-26ab-4cd9-a749-df81eb1bc66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd2faf1-9e72-4f02-a27b-d4f7447db7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.66.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939a035e-960f-4886-a1c0-bce1b463ffcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b650db5-71ee-409f-9edf-84908abd55be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083231fc-f099-43f9-a621-22021495b71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6fca6a-b590-4ecf-94ae-a69994b65350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e94989d-9b7a-4d87-8ba7-d1ede1f02d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e5e04d-aefd-4d2d-abd1-9fb711276946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11836d1-2227-4576-982c-45ea56a64e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a7a3fa-b95f-4dad-aef3-1714e4712f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225ac2cf-beff-40fb-9ee4-2d6915a696e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb992eed-db81-4c36-a7c7-d0db51ec0c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f181d5af-f9af-488b-aec1-cf9cee8d2233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16600831-9310-4a79-922e-c58eb4a1e25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731f9978-55c1-4222-be8c-98e1a475beef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d822cb-b38e-4b83-bcaa-5ab9401102c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97da379f-30a1-4538-8b96-1a266afb8f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5f8f14-2de7-4392-8f67-d8fe5f6c2702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aea8875-0455-479e-b2fa-9cf2e5bc9793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d23b3c-3ca2-4edd-ae39-fce269d76d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36e6f9a-6ff1-4de4-832a-cd03f0ba026c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b2bfec-84e8-470e-ae49-eab60a3f5666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b42de7-c1ba-4fdc-b133-235bf5eb5a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce647f2-39b1-4abd-b03d-9440de3135de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7ef022-ea3f-48df-bc24-b26626128c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b21130c-3d24-4ec3-aca5-5557156e3e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b3971c-5011-40c8-8ca7-8c4672655380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a7347-ceb2-4bf3-a038-deb773c5e6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bb3538-a7ec-48a6-8683-bf4ea1006575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f074a6-5b42-416e-8fae-20da4de4a51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6bfa7d-c2fe-4d06-9053-243817311ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073535b2-2f13-4748-9ac0-d78c5983f04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee9e4d7-5371-4b51-9713-1458a0a61bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32866c4d-462f-4275-90b6-acb7eaeeb0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92f6378-e562-4bcc-b427-f31a00ef3b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d839ed32-5594-44e3-a8ef-d80b24fcce72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538647f-177d-462a-b012-559e7f87325c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fcdaf0-1ca8-4cf5-9a27-dbe3be555050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f2f465-fc11-41fb-a666-54c8d66c9864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76075010-a6fd-42fe-b9ea-a4591e325130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c091e3-c0ff-4b10-98f9-194b359d16cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d112491-ad97-4298-9f05-0976ccad93ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856ec0c3-f67f-4703-a9b0-efab56306685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cc4e98-4003-41af-aa11-13425cd1f638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d6f8e3-c9f2-4d80-a613-9f8f1d00ab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b4f8b2-3b46-4858-a433-72d601327cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.71.214.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b78812-1a85-4f4a-bedb-9c601c7100ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.71.214.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ddc87d-d07d-487f-8f0b-28b8eabc8e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.91.221.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a604bc6-c847-49ae-8ceb-828e542b8616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.252.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddf2814-bab4-4da9-8d06-adc078f0806c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.252.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b26b3f-593c-46b7-ac67-54824f8b80c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eef81c-9eca-46b5-846b-68134ab0914e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1b502a-d85b-4163-95b7-b149400014fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e16624-e950-4e94-88f2-f80965d798fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25230a4e-a24b-4584-af37-fd31cfe0b28c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e114e4b-f0a6-4c3d-8b81-4bf200a4879c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29a1947-18ce-4f00-ac0a-fdde9a59f477", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d06d3b-3683-4d67-96d8-ff838684fbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ddc675-9afd-468d-815e-5ade53e7c69e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e211a-9385-4946-ad10-03b46e2e1230", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afebb3c-7cb3-4bc1-ba1d-26d5380c94c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c519a297-da26-4f67-a05e-38b34f5c277e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.218.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c5a463-cf96-4672-ab6c-4eb6af576942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.22.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ebf76b-ed3d-4371-b4c9-9288e43409d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb52a046-31d0-444e-b0b9-556511232c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c9e786-72a2-48e3-bfbc-d8008c49c330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187ff2ad-9cc3-4e7c-8b6e-0b8c23b31c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075be62f-1cad-40a9-be53-cf34ecc12962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b2833e-1c14-4ac5-8ee7-a236cebcecc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290ab102-bd79-4158-a7a2-d9f00fb49f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09d37b6-3f25-4039-b2aa-50bec1b06bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0d636f-e571-4ebe-b027-8ef80ab3928f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e875590b-b6fa-4dc6-a4af-4f3e9454697e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4edde83-b3de-4262-938e-036460078b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c6349c-c6ce-4972-abca-384ea0ad4554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c964da-58ef-4e81-9b00-c9f0bc343ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd859fb-9acb-4481-bcc8-bbbeea33497e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b50905-a070-4858-96a4-e250d368d1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b94dcd-f058-431a-abef-12d5f09ad3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7823ac6-4877-4324-9fcd-d30f42bee49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ffc5b6-217d-42f3-b349-f64077b6dc98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e83d49-82d0-42e9-bc96-59fe2c775af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9f2804-dafa-4fb4-b246-ed5cc3d700f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e80320-fa2e-42aa-9967-d7d0ec18fc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.224.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4696208a-0d2c-46fd-9f7e-de02f76f95c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145d6e51-ff12-4f8c-b1ac-040065b74ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e551cc-74ba-4c7c-8a2a-730216bbda6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52db9ac7-326f-43a3-85af-0d01949e8a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f438c01-ca5a-4662-9b48-8a29c323e582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd29b42-7ca7-4005-9bdc-ac683589e922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ecbe13-6b7b-4a3c-98f6-406ae66184e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e415df2a-1e95-4c96-9f00-a9f4baefdb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47579b4c-7c4f-4e16-92b6-60e0978d9fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.45.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ba21ac-fb5e-4626-b0dc-139a0dea595d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38aef17b-5f34-44ea-87ff-14e0c08ce7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd6f450-1f39-4c4f-abc0-863e68b3fbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6062c9bf-15ae-4b68-b8ae-b5f0c5699c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d3a9f0-534b-4e07-9320-57f22a7ce6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febb99fc-2ca1-4065-8eff-65ded1f46911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b16f26-7892-4bbe-9af0-25bbbc58544a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3798c906-7fd9-4604-945e-786bd511fb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b588cc05-c18a-4bb3-9ea1-08bca04d5a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d4cbb8-9dca-44b3-954d-24f6dcf0005e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9684569f-5b47-421d-a246-6a2b73353f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d392c0-f3c8-4d1e-a189-0f7e9f6a834f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6c732f-383f-41f7-9db9-c8efffa56e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85661527-d8d2-478c-8394-1c0bc3969911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932f486d-ce35-48b5-a143-f9b262c1097f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a46df9c-6ae6-44c8-ac6b-71b37583d645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44570bb2-0721-484f-b803-86d35892672f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc6cf61-7509-4c4c-a0dc-dde91ee9139c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c0f2c7-e2f2-4203-bcb7-94bd57dda6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3522770b-a407-4d37-89ac-2818aca061ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5216c09e-8842-4973-a225-bbbafec88963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec716d7-d8ca-4ef8-b2a8-1bb383ee1460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcf676d-0355-433d-aeb6-4be18b965d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e00679a-2807-406f-810d-9cd8a9b0ecff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d7ece2-86c9-4b0f-96ed-bb87f17d2d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd94e220-6b99-46c6-be7f-07afdf3cbeb9", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.104.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8135398c-ce9d-4b6c-9766-e3380895c0f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.131.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98317371-9756-4769-892c-06b74248f10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656a507d-80bd-4802-982a-df9bf7c33dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07eede4-f35c-4bc9-af4d-ef0bb7065b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d50696a-2e60-42c7-b2c0-1ea9630f2e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d0f2a5-6174-4284-80b9-fb606f27e488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e3b724-1e53-478a-978c-74f1a1f06aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904eedfd-ab0c-4e5a-b806-1f28ad8da5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d934f455-9c05-400d-8ed9-098269f92cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72112c9-f9a9-4013-986f-8ccef9bab98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244d5351-32a3-4134-9f09-4077e9feafcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4af0de-2a0e-403a-a1cf-175517d493f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cd543e-31ff-47bc-91b7-cc1fd45add55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb4133e-af29-4518-b923-b47015d85596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0eba19-750c-41c5-aecd-6cf942493ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790abfb5-0c6a-47c0-8c4e-35eb99f9c634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5419fc6d-a1a1-495e-b35e-abad902e9d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1962263-fb52-4d67-b778-056c01925a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942107f3-de1d-4745-8288-945d5f604988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e94419-5796-4ec1-9001-174123469eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73770096-61eb-4944-9e06-94b7090a8fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2fbbf8-42e8-4c60-a325-3532cdc7b83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243a3b6-2a5b-4363-84fc-3b004668da65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b475dc-af05-4007-8c84-2270817f89f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3f2272-932e-4df7-bdc3-f4a4d5048f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95b119f-7243-49c4-ae02-3b9afc54375a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.40.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4017a4f8-cb84-440c-aca5-bf14d669d8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34018b02-aeba-45de-b4a1-ce0cde65c1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87de051b-85d2-4624-9b1b-f2cf87dc1a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f693e04b-8b2d-4805-9477-fd564cdf8df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59147ae-8d97-4676-8212-0ecc09ca2c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de122628-40e0-4743-8283-772f0ddb1721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90aacfe-d58c-416d-a06e-1658b9567f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dbd517-27ad-4a2d-8908-c6c2477b571f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e1b53a-1f61-47c5-af80-600ade6439e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d378f52-5b7d-477c-8eac-b605c30025fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39fa3c0-135d-43be-95d1-59c04c49adc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7dabd5-59e0-4900-bd3c-68a7808086bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf50f2c-3362-4bbe-81df-b5441ea7e877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac697d-ee52-4023-828a-26659f5c3674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec95af8-fbb8-478f-90ca-eba0e74ef5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e76b3d-0fb6-417c-bbf0-52cf8fcad881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f57beb-f8d5-4d29-a00e-4b1ea26ad539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7619296-cd3a-44df-85ef-4ba30378da6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7575aad8-ee91-4d7a-91ac-825b3ee7218a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa0e1d2-e276-481f-903b-b86c33bf6851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a724b5f-f002-4099-96b8-e9db46087002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1cc857-2920-43d1-a2b7-bf810b858518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79fa72b-640f-4a98-ab62-64c33ae33804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fa18dc-305b-43c7-be00-7abbb2c40640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d054bfe-89c2-405f-a2ca-26e680d0084d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa3e1b-7565-471b-b28f-3111f020ab23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76328400-a4e0-4427-81d9-ecb8483fc24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d827efc5-b56b-47e5-ba9a-1bc6622e0d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c96e90-ad71-4c68-9a6a-8511a6cdcbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ecc386-741f-4dec-8e44-54b6e383b5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50becaa6-c70e-4614-8e10-208bd2c7fb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feef491f-bacb-4542-959f-1c82dbd93e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a67f186-3063-4222-b4fb-fe2fb0c93df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caac575c-2333-449c-8938-4fffa9ba4474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d1eaf9-4ced-42ce-acdc-95c66363eebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dedc0ba-fc2a-4605-80e8-fa9514c2263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c5399-66d7-4345-9cd6-0cacd09abf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05517ea-66e7-47bc-a373-78f45a38a24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd65a3b3-9afc-4722-a5ce-fb65d5695d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b319581a-84a9-4b58-9517-c6e038effd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463ae3e1-62cf-4d21-8b06-28a4cee07a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5b7e7a-03db-43bf-bebd-650ec230a167", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3383100-951c-4571-bff0-97ef4038877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393905d3-88e1-4554-a2bb-fbde1025ede0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3673794d-bf49-4a29-9de3-1131a93a27b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cfaa9c-b8b3-4d10-8422-d6aa9f77acb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3837d78-08be-4650-aee9-45912342d22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d107e39f-c0f2-4bb4-b3a5-2423315c702b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b39f47-4472-43f5-ac78-5af8d19712d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2ee105-a8f5-4e49-8c84-86d846ef6c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14500ad0-39dd-47e9-9701-680f522dec60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15852285-d497-46d7-8792-7c0f6f167c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc623c66-c056-4424-9e8f-de4779cb4d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee6770-6906-4e1d-b01e-eb053b0acdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b028624e-962b-4993-a8c2-8b8a1499ccf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b77dda-eda8-4710-b864-720aeaeda58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138029fc-c17d-43a9-ad3c-445d1d459814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55105496-d46f-4745-b340-5abf5f7f76a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fd1a70-0b96-4d77-ac03-0fda82431576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10fa130-38b5-4ed8-a46d-b485fe0603f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b433ca9-09b2-49c7-be40-1ab104483734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b439b575-0c34-493b-9c8b-3134be3f157c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0dbd2e-5dcb-41b1-98ac-ff12469f3600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703bffe1-a7e4-4971-bb5e-fbf765b50d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebc0d35-1dd6-4ccc-82b2-e09d63a4dd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f2a743-8d12-424b-a9c8-d3ef899e7562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffab846-0363-4122-8e30-5512db30d918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210f160d-3d4b-4344-bac4-458d4c7ebbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02109c6-1714-4377-abcf-c2a4d8b07821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b668e8b-e818-4ade-a0d7-17ab0958eca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bd3b29-fb82-47e5-9e20-6bc034f56262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd003a9e-8c3f-43af-911b-e0ae4b12855d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3f288b-7898-4abb-8cd7-fa6bc172482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84a68cc-c886-4f9b-be53-3bc34d467a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed7c22-526e-4e57-9e46-b2ead3fbc479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2892f3-f633-419f-a167-983cb733d824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c81022-3937-49b7-8c9a-43515c8c6052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc54ab3-25bc-4ac8-bdc8-4ac009481a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd2c65e-2e4c-4710-92f5-b08e1803c555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba61268c-2f10-40ca-921c-336e8e4c4e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb256b6-3182-42a5-bc60-0097e5ad408a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927d557f-e24e-433c-aad2-8bc1c49d6f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3bdbe6-a497-4dd7-9367-b04a215afd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62e78d-19c2-44bf-9db0-ea0e757a919c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5139d553-ef8c-4037-82f9-222da20ae579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a82307d-dcba-4b6b-8e52-0a1c20d09984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ed4d5f-85e9-4aa4-a72c-a50eb618449d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7780eb-5dc9-4fb3-a9ea-6e7d1b714e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15762d8-32a8-4ba1-9bef-48374986e546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80743a8-fa33-4be6-891d-c4bf124eda7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4a62d2-852d-4ea9-b74e-97280e4b9926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80419ed-4ee1-4774-b5c1-0d68ec617687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397e5b79-0175-472f-b328-96c0995358d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.69.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df1ef84-b771-4325-81b9-7f75b0fd3966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a094fcf-7b4d-4b45-9989-0c2e2e88b26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.223.168.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be9f85c-c134-44af-8150-e120d3d51014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b77b65a-fa2d-4439-b791-c7b9fb853610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe873dd-0834-4793-ad85-7f52e433cb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9c5535-5b81-4f7f-9fdb-84bc574b48dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67acf13e-022d-45d1-ae22-276529fc2530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebf9f3f-6e0d-460c-b9db-ca0084056b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00daabf7-2b93-4d6b-aa54-01c6dcbdd9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a38af2-8f98-4331-96e2-c7a82d4ff5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb972b-141b-43dd-9361-bedae8798a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6534c7ca-ec35-4077-827c-a7e8db2b8d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abe8bb1-6a0b-42b6-8ebe-75760786857f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dd7f37-4a68-45ad-87ed-c1f2668f7b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bec64ad-1183-4892-aa32-4971cc1e4cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.45.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd6d625-57b6-479c-9de8-8486187c748d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8ab69f-92d1-40cb-8238-168dc4a79027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfbe848-c073-42b3-a69b-2974849ba7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3267daf-d245-49f5-a50f-5408948be6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59d2ef5-98fa-48cf-a558-1ee69d3a1aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.93.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a2f563-3bb7-449b-abeb-2ea0e85b574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c015db0-8379-4a42-b64e-5f78644b698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d345b2-d5f8-43e1-8fed-3dd16c3cb468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb34fff3-b89f-4818-98fa-a00deaab49b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35aa8cf-40b6-4c3f-b73c-0cc60bcaa666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5662af07-667d-4ae1-a05c-746608525d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d58b4a-4d21-46e0-ad96-4ed9b0db2e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9bd870-8a5c-479b-ad36-9ea5d7cb1d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b35670-8acf-4d17-90c1-e28704448b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0739b1e4-8052-4123-9701-fcc7c99ee5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c1ea5-5176-45d5-832b-bb10402965e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b9cf3-0f00-491a-9b9d-8b78a31398f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285f01a3-b547-4943-8ff4-ef0dc4d3981f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e64ac49-3746-4abd-b95e-58c5051c5d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeea88ac-2339-484a-b1e7-61587d9e62fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ed57f3-8b59-4db9-a3eb-eb7f13d62947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bb873b-4613-4f03-a6c7-fc277a9483b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df7738-cebb-4eb3-b470-c0a4d17e6169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159f9fc9-430d-4ce0-8e7b-7916328c7cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37fec48-0091-4b91-bab1-f96d3829270c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d646bf90-071f-4b02-9eb4-9e20ba570796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654648e9-816e-4b14-b146-833b2fdf5794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6ed826-96f3-44ec-b4fa-6a57e4f15f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d1c53b-01f0-4587-a5c3-2b30d2d40f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa33f7c-7381-4ed5-b0ae-796020fcf7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941ed78f-1df6-483b-9396-eb04dc25e73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f080bd16-49c5-4727-8536-ab6d494deed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9323441a-420f-4dd5-aafe-1ad1872972cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94487e4-5f4d-444a-b731-b99253e3edea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db4eb81-f5d5-4089-bed6-05d544ecbc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb61795-e3ba-4d90-91dc-737df32443bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33861f9-1a76-4d71-8710-2708ebef4939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d576130b-75f9-4732-b621-9ce2d9c9eb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9491e9-4394-48bd-9c57-afd8af1d8c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957a6918-5c86-4313-9888-32afe5f6282f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d18052e-c0e4-4fee-8015-e1c78d9e44aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dd5ee8-4bf3-45db-9bdc-334104e8f546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7948a435-b65d-482c-a2e9-36f49c1c6825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec21f7e7-a6a7-4bdf-a37c-9f97a25cd3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82c5a40-7180-43a4-82e8-ff038866e4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c573ec63-0d0c-4128-aa22-7e4e060321cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e11ff7-7f7b-4cb7-b448-610d93939369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668c9a9c-a205-4f47-be9a-05023dd45a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1db450-c8d4-4e76-a7e0-8a6d7be37af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24271e9b-8755-4230-81b4-4a2d0d3e0aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbf67c7-9d70-4ece-8b93-e765d6c26527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96274088-1294-4ea4-893f-199c20b54895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca78668d-c36f-4c84-8238-590c3c30c6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c2491f-5aa3-4da4-9077-ad872d58d371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df3273e-b6e5-49da-bfb2-152204baba9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18b6767-7b4d-42c5-aa6f-083cebe7f662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68410733-8edd-4a42-9cd5-ca1c7af9b5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb001a53-a34e-4616-bd52-46b9a6c6e5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737988d9-0f50-4d88-a8b4-e58e29ca8245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77893097-e141-4e17-9bdf-d84b5a65da31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10042c21-62f7-4aa6-a396-a2936342f871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5611940-4025-43ec-bce6-5798c181569e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.184.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5485108d-e07c-4f60-9bd3-8a2cc7120cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b9c6db-a4a4-41fa-8cd4-d206cb88b698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abbc243-8492-41da-8b8a-31903c6c5395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b065a16-26de-47d1-a011-118a2ecd8cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512bfa16-c1ca-4f71-9caa-46280743b354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f3bdf-ead2-463f-bea2-01476e83630d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4034d6c-978a-4d85-8049-0e6be9e2f7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd4156-1754-46cb-8795-46968438f918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42edf61a-6e74-40d7-8aac-cb87505537e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a868e35-1c2e-450f-9a2f-0d02258e3cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac8b6e5-eb47-480e-b34c-75d51ec2f8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642d8558-d0a4-417f-a373-0318628da828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb841b6d-193d-4017-b081-99e41fe6697a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ff571b-2ad3-4d5f-86c0-1b573e83cc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51eb6ca8-cec5-41a3-b846-ac2c895df832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa17c628-ed99-4c27-95bf-d76c5d3a8905", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b8ee2f-e665-4d5f-8b23-26e2ce067e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c69a607-d188-46cf-840a-a7f926ad62a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d107a4-1d3e-4933-bf9c-6db4f0f99f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38ebc67-a304-415f-b192-76324030a3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f858c-d61d-44c9-9ba0-a363fc0137f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb12c56-b7ea-429c-a8b3-8eac44795312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf5406-3832-4889-9d3f-f185c223b031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80a6ca9-4d20-41b6-b4a6-b2d475f1d054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3789de-8e94-495a-aef6-a8ee6489fe24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cf7a1d-cea1-477e-bed0-403680dc8598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22187781-64f3-48e3-a5c1-7b129513898e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf71931d-1a3d-45fa-8d62-f1069eeb80ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac11c8bb-2fd8-4086-9ee6-3b006495bf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbae8147-76c2-474e-8e37-db433a83261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8c763b-2589-4550-a8c8-7bbb55e0c199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc88d3-fbeb-4a50-93e9-753daa98af27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1421d3b4-b216-48da-b0e0-df4ce75c62ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076e9ba2-53ab-4e40-8997-51106f1f75d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a55f62-bb4d-43e7-98fb-946392c7f96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e1a894-4de8-407e-8ebf-b38bf4662651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fca5b2-273f-47d0-b6b9-f0df1914f875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b8408a-1a93-46d4-9d29-d5e1ef782680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46655bb1-835a-435f-83fa-4ebfbab0f89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d29756-21d6-4d96-bf9a-efe52ab46d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4beb08-a131-4a59-b49c-8335da0ab23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2b0aad-7986-4bf4-b4b4-9bebf72c34bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e681347-73ea-4604-b751-f1ad5cbf2875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea57ec8-45d4-43ba-ae61-06a649b6e0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d47868-7523-40d8-8f2b-2978be882a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d532a6-ce36-4410-a07b-cfb5fa7a1b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8c1b2e-53c5-4115-b494-f28040a05a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f442ac-1a6a-48f8-982f-6616d0d4ef9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0a95b7-42e5-4afe-9888-b7c135f82787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa20bcd-5d51-44c0-88dc-284d244ae522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be37b0e7-d006-469b-a280-935054e61f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676f2a4b-280b-4a43-8b90-ebfc56164027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5fa80a-c2eb-4b33-b615-7b6f16b4f99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfc391a-eae2-4fa7-ac66-e613c9d5fa76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b9909a-dee5-4013-82a1-ccb1fdebd21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b609500-a1e2-4b1d-9bec-d8f4a478a7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfdfc3a-d4ee-4c73-b403-a3ef2d899c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a853c40-0930-4b55-92b7-46e3fd01f3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584d81d2-7165-4f0b-8051-b8f4acd33470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c60e42-c826-48c5-b429-5125904fd738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc495b7d-b394-4925-a283-0182d1f6d331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656c6d85-ecba-4060-8077-d40404e2d753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f3dafe-a923-437d-b455-e4933de3fa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7e7ceb-9216-42ba-aecd-6c93d78b241f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7757014a-3d77-4f33-864f-fa4085c1245d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0b83e2-c672-42a7-a503-3ffca0735aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466aefa6-cbae-4d62-a302-03a108d96188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b789e8cc-cb6a-4245-a679-b72b195fd16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806199d1-fca1-46d5-837d-0da283f1bcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66fd6c7-8da5-40e2-8ccf-5cb2533ee498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adba267-96cf-482d-883b-713d76425847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd8b93a-2c1d-472c-aad0-5533e4911883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83901acf-d464-4617-afcd-ad1ca8128a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a43e53-dd5d-4ad7-99ab-d987890ed633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6f8842-2722-4dda-a7b5-4bced0f29602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.82.185.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fe1361-1cff-43b1-8fbe-8c4c1cf4c1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9df2598-e60e-4c6d-982f-11ab03d778a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8327a8-583c-4348-a5de-ca7436e7cd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf49450b-f681-4c5b-8f9b-5386b6d49a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7147319-742c-4f47-9e80-f637c6bc1989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0582e21-6308-4ac5-8590-5429ceb3e255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79734622-76c6-4449-b37d-51accf0e491b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369bd816-de81-4195-8e82-4ca4c81449bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96caf775-f937-49f0-b44e-86410c85807f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.40.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3524291-61cd-4e08-a636-ba7b8de6291b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a823fb0-4555-47f7-802a-38b35f46b5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa454ccc-b28d-48e9-bef4-e905d81d32e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6ab6ed-8bf7-42cc-839e-5f621c39ca08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da69f686-f336-4b54-b56c-aac28d28a479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fd2ddf-18b1-48dc-9a5e-228f029c1689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c49f7d-d039-4c30-94fd-4fcb35be125a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9ca6da-b659-4547-9fed-10c8e224d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.78.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0351f3-9d18-422b-ba59-b5dcf91388f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.9.31.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad1e276-1f13-4529-b8fd-5094f30d49a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e47086-00f5-4780-bc67-8a8194e0be0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7fe23-6974-4719-8c41-a5309154c386", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.171.11.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e21a06e-20a4-4814-a617-4bedd16c4176", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.225.60.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530e83c2-df8c-4fe9-ba98-4d471bf6ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b3e5a5-9c1b-4f5e-a451-480b08e45209", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.9.24.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd4f493-b82f-48f6-831a-43d2bfc858c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.129.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579bede8-973d-44cc-9447-a8d6f2e66b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.16.238.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d030f46-492e-4f53-ad4a-dcddceec518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.165.139.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bca9965-9bee-47be-bf0b-8ab3e924da8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.191.4.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669ad845-cd69-4981-be41-8deaa614aaf5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.217.246.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77216af-1422-4979-b57f-f8557d0ce28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.231.49.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c269e-2794-4e93-8ea8-a4d9d349cf08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.10.41.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a3c7cb-2495-4e60-8bf2-53f17b8d246a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467d4ede-0957-4de0-a541-74156d3950e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.163.101.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcdd8ad-d503-406d-a54f-7455e2b428e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31a1f53-2d64-41d1-92e5-9218ae56055c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.184.134.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834afc3b-4504-48af-9dc9-97e5524d6210", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.21.47.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caea0a6-d581-4f68-82af-ad0685ddb377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.213.132.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d36f54-7cc5-4c17-9046-09394ca247ed", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.56.3.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15e2ecc-8b27-4d6a-8b11-3a33c0eecffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6830746-5de0-48bf-980a-2abe0e6e0578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.125.71.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3701174a-884c-46f3-a2eb-51a54d4f9cac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.151.27.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdea915-7176-4f3d-8b68-159ce1e7fe7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.152.220.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf1202-3538-4a0d-a517-6deb10ca6ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.160.86.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f91ca85-60a3-4e2c-aa8b-666fb3f8a3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.224.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8933982-4fb3-48e0-902d-cc37a2c79f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaed51f-783e-4a2f-9b4e-c9f4802d556a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039ac549-e35f-489e-8725-9f9e0a76c95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15ce3d6-9412-4145-a9e9-314c58d1b141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.81.241.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1b09e0-d91f-4e3f-82ed-da15bd0708af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.187.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eae179-feb4-425c-98d2-a63a94594511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.188.210.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f55f758-ed61-4f6b-97f3-6faa5c554fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.19.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e61a779-e16c-4522-81c8-88e223f90028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.26.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1982cc59-f335-4a88-96fd-9ca1f1ee455b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.29.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea348aaf-b2db-4c4a-b358-81fd1dc77c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.30.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498affa5-67fd-4eb4-9862-0cc8b15efee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987cd1fe-cd99-43f9-8ab0-185b9e9c32cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f52ca7-fcda-47d7-ba40-9bc8990cd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8540d91-d28f-42dd-a5cf-1056e84078b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c25954f-c43b-4ea5-9513-a20a02c2507a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.77.9.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c283fb34-4032-4185-a746-e2b3af20e090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.125.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497e2794-5acf-408b-ab6d-868ad81c46db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84524377-2d94-4761-a0d8-ab0797e534e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19a2ec6-fd21-4bc8-9dfd-518a087b7363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4587f2ac-86b1-4877-b8e1-5ead8fc5a2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b032870a-e8fb-4259-8ae1-6044e610a581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7929f141-169a-4839-b662-64e97cc2c6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b45275-36a1-40f0-950a-7f39329a11d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221c763c-45da-45a1-9fd9-c44a286c9e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47cce08-7e03-4cea-acaa-c9e245426d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0860b3dc-0e15-4998-aa71-3ede52a5db83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c46e61-7592-4e1b-9edb-085269e8ffc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f3edf1-4e60-434a-b86e-d60acf557e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f43a400-c083-47d9-a5e9-613672b6a27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971f778d-12ea-4d92-85c9-fab134357ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ef039e-04e9-44a6-b7f8-76d27c80684e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37987edd-a2ca-4079-8d93-da39f1ff1660", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c35af0-2fbb-4e65-9cf5-8b7621e0f4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c077014d-ce00-44d3-aa82-8e8e243e77b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad4a885-f61e-49de-b519-1f688bc732c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263826b6-d355-4f49-bfb7-144faead6c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e6a5e1-4d77-4188-b8b2-4311546322ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea0d443-1d92-412f-abfe-a05508f376e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce63bba-ef8d-44ff-ab1e-730c84c4c933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03301af-7761-4a82-b7a5-2655e2a39ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae41cfe5-1c22-47ce-bcfe-a1a8ab2c44aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1272ff-c0e6-445d-8070-edece7230e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99408d8c-c5d6-4006-b4e2-3243045c7a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323520af-9d93-4889-937d-6686c209e9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f04a57b-3de9-4b7e-bdbe-0f9634bcdd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b39a41-fb0f-4056-8457-078e530fbccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1d9c68-783e-40c7-8ae4-69f6324628f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65af6850-cf5d-46f3-8b5c-f13fb5d89b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ebb858-0e13-4e40-9cd9-747dcd614588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb333c9-6459-4862-92b0-ef86d57e33b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5ecc5c-a0da-4090-86ba-b56f21bc4671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e2181e-cce1-4e47-a198-1e5d9ed9248e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff225dd-0e74-4b9a-a363-2ae0966da5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b79644-00b9-4123-a461-28d584c5e681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd50b22d-e462-41e4-9b92-fb2d75f7bf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be6e8ad-7f5a-4c43-96c2-5d00ddbd54c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c51c0c-e0a7-4db7-96d4-0960c5a045ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd28482c-6dcf-40b5-8936-283fc19d5184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5233c051-a9a7-4c48-9f4a-18d5847dde20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846f36a5-2076-4957-91a5-824f96f60ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6a8610-a2f6-41d6-bfa9-bae55abc7b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1d01c6-9d9d-4a8a-8fc6-a6d8e0efb79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f3ec25-5bff-4044-8def-00ab35c45e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b425c177-2048-4619-b4c3-4f6a5f3f054d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8407614c-123c-490b-b3b6-c329a8f07c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9ba870-5aea-4cb4-aecb-cb0d875b2fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63aac18-2db3-48cb-a4ba-2cc0cefcc911", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f484710-3167-4a29-8b78-436107e54de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3f578d-9baf-41ef-ab24-3bb7d1b6c018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7d6d61-3f46-4b50-ba8b-687052f2653a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06740963-08f9-48ce-aafd-47effac62379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcc60f0-9eec-466e-a980-4159ea73eb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67419c5a-e187-471f-96c2-68c295d7a344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7a724b-fb9d-4727-a127-714112753281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca1e0d3-fa9f-4f1f-bedc-9e316224536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a4b644-c843-4ef1-9a66-43a8c59de687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f05e3a-6886-4620-94c9-fd4cbf3abb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afb0624-a712-45d9-9d61-fc02ff77b9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ad3a55-0b7d-4872-8650-759c7c2922d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46779da2-0127-4000-9a58-d217431fb8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bfd7e9-e67e-4e2e-a24a-7bd60fb3697d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897e8a10-e566-45b8-9763-8f3e2c0a9178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e761a3bc-3bb1-492c-8485-175419c224b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2542b7f7-f7dd-47c7-ae93-426d05aecd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f3d166-9349-488f-a619-5cf494d62bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c484803-f7e2-43e3-92f0-335f2430c192", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd61aae8-8abe-4609-968e-6c275ba9b028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8bdbe3-9967-4e13-a113-f8e1ec6e1cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b289c78b-c54d-44f5-ab1a-611f8a00e9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55436763-028f-488c-817e-d631b51817c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa588875-5985-4735-8933-d2f0728ca5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c27480-a61a-4d8b-b5af-54dba48a5d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdee8b95-1a88-415a-affc-216a1608b590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eab9ca5-77bb-4a9b-b632-52f2fbecb898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482bf53e-724f-43c3-9c2b-e78c50c6e2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc3d3b1-6e22-44dd-8f74-3b6dd4cc5f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309beb1-6271-4a89-bd4d-f44a26ea6978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227542a9-b302-447f-831c-f01af51b9646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f921b4-2bcf-4aac-9738-58f8bd0b6880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54b0fe4-0c59-42b9-b7cd-e060e7465b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b200fd-7f18-43f0-b0cb-cf889ab8aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93af3068-8594-45b7-83b2-6649e4929dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe770dae-3224-40bf-9a4f-16b2546ebf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ede80d-3e8f-4f69-8d2b-0d0036391d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2413f0f9-dba1-47e1-a843-b646a5fa1947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f45263-25b8-453a-8ceb-00525832d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff94223-8367-403d-9eed-0d9355592c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3d1be1-755a-4527-a55c-b9f406389c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bedfc65-f4a7-4f96-8bf7-14cb0516c41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a93335-7527-4c4b-88e2-b227d9d9b9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b28893-26d5-4f16-9ee5-ba5879d6697d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10358b03-8e22-4ae5-9831-af5efa4cef4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e471c7-296a-4714-b3fc-0813e46b9140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e483cf5-a5ca-415e-b8dd-dab8388b870b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e5199c-611a-4e93-8970-402a95347622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f639ace0-cbdd-4743-a494-79d1b1594ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363002b2-379a-4b90-b310-9c591373b324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72df808f-29e4-438c-879f-69fd32412a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed33821-1e1f-414a-825f-41c7e3c09257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44718dd7-4646-4b5c-9653-2b2ca4c8a7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a2a532-b9cd-4730-a6f1-2784862c506b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218fc4d9-9269-4265-ae22-9052e842450d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984c0ab7-9136-4691-bb90-6f074ebd8950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4e86a-3e85-4ab4-86ad-8ab5d995a17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87398485-f46b-4f4b-a455-70b8d70a4b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e426cb-bb1e-417a-b12b-135966096580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7801df-e1ee-4e40-8894-84198f4d5a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74934fa-66c5-490b-81b9-ce47efeca5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5a4de2-52fa-4e52-96cb-30a3eb0d396c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e325964d-d09a-4264-874c-5af992234835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2e0973-ed97-4e4f-aba5-98cd287b8518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d40a61-90d1-4247-a79d-e4738bfd2aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226fb687-77ed-49c2-8fa3-e0c95e582121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da438e94-43e1-4a9e-8cbb-824520cf8655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fca09d4-4aa8-495c-b6c0-f1a978e18240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326609b3-7cbf-41b4-a38c-97ec179e03fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec60f5c2-2366-495b-a2e3-ea024616b1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891b9984-9d18-45e3-a056-d425592e4db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3d60b8-1550-4da3-a9e9-499facecc9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e298275-dc7a-4752-8fa3-5f4a10b6d201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93017fdb-a643-4d7a-aa2f-d4f51c9702de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0db085-1e45-4412-99d3-f5ecfe4e30c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4ef9fc-1f6c-4ce7-8f15-62bf2626474a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edf78b7-dade-4887-b46d-d8a58b79963f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804cfbe-063c-4eef-b3e5-958cc4bc573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c321e5-57fc-4409-a018-a246b31c363f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5064336-23c3-4d2a-bb46-f51092244718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e77346c-4a12-49b3-b8f3-10f87b25def3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8881402-902f-4d46-b43c-91bf055ffc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974dfc02-980d-4cd1-9079-9bbb21120d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d92fd1e-af7a-4479-a679-f3a623147c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee39d46-62ea-457a-9072-8c92c29463a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae611cc-fb44-48bf-b658-914b43fa7b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.106.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f182c9-c8a9-4d73-aefe-b430a46aec56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.106.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abed393-b7ed-4910-8dbd-720bc3d77880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.106.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc281efd-6198-4415-a23a-fb6f1fbfeba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.107.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34f4e2a-d162-4dc7-99bf-291ad5d63f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.182.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28f2fbd-379e-4dcb-8326-bfafe56d4191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.182.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace005b4-50cc-43a8-b93a-847acad2213d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.1.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22e3b5c-c5a6-4d46-9ef9-a569a49f6d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b2fc13-a12a-4e0a-bc15-45a4844b9964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58170d29-007b-41f3-b54b-b5a587d74b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.138.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4164d6f-069f-4ad9-bb9f-21df88df2fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.146.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7526f4ce-7fa2-46a4-82c2-0d7173b0e75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.164.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b74c8a-0ab6-4390-a904-22c821d34646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.170.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bed0c3d-b16b-452d-9f95-3e56b6f2a977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.205.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633c6b23-4424-49ca-9601-b6c79f531161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.231.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3687ac5e-0851-4e7f-a307-54f06bc52a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.233.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1249c95-758d-46e8-baa6-b60badfe9ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.237.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a802f7d-ff86-4bef-b3a0-d8ca0a4007c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.36.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed09f4f3-5213-49f5-9a02-d41a38c6fb36", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.43.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb5daa6-1a78-4bd0-a3e4-31c7f9409f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894bff87-30f1-4a86-91af-1f210255e2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2264d971-0dba-462f-bb0c-43c5532bd4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.66.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16524fb6-1fa3-4ce9-b2e8-8dd14cb6dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.70.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee0bbf4-1c7f-4fe2-99b3-8539ee1c932b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3122a8c3-e4d4-4022-aa1c-8f61f9d599f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced908dc-0cfa-43af-97cb-84e716243158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc568560-3224-4438-8a14-9333e454f97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.1.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5068f1c3-e6be-4ff5-98fc-ab759d751cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.198.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f44680-25a2-4e8f-b9af-e6f3e6147615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.201.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb17c318-949c-4df1-937e-4c4795252ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.203.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee87c0f-25a5-4972-97f8-48c7afb9f987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.211.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c9ed19-f6a3-4ae1-b2c1-bf06a8c389f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.232.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4239ae0b-1d1f-4df2-abda-735e4810e529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.197.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9f201b-45fb-4f82-8d3b-a4e628c9419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.188.140.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc06448-2a11-45a8-a464-d72b8c54232d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41d7938-0ae1-412a-82e8-ddde80e6e539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a06f7b9-71bb-419e-8f7e-c473b78fc897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e8c8be-989d-4bf6-aa55-d1ab6ed6b56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ac3a55-5435-4aa5-9747-b547cf725b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a19b106-2026-4912-acaf-813535789f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d01031-5ba2-40fe-a739-43e45790c610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0f0d07-32ef-445b-abe0-b605e242245e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.67.251.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771acf7b-ac98-4e93-ae62-0d48d02c5e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dad768f-5248-40d0-be36-bf2f5da2c19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff76fd00-0441-437b-a9b1-57224c82ade0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c970956-e78e-4daf-b53d-88de6b6812d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1da24b-40ac-450c-82e5-9dcd69cfb2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.2.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0580221b-4229-4a58-a72b-5cfb802631c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.14.89.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57950f9-e7bd-4ac4-a2d1-2e427edc9b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.34.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a868fe-780c-4087-ae98-37b2de2ee15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424ebd0a-67f8-4d3d-8361-5db1e2be373e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.48.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0a7617-6b1d-4498-92f3-4782060a884a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.57.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59aa1330-98ae-447a-b390-c9ec822f2b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.147.104.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5822e4-19d7-4a3d-8e65-420e4abcd1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46690233-c2ef-437b-99f3-ef4d90320e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.33.37.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58fa353-31d4-4178-93d8-f15b6117dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.129.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781e17a5-da44-41e1-8fa7-97658ce4de07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.153.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916b7046-021c-46f4-8e10-97689b084943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.154.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6232ee-e8a9-40b7-8e0b-0fe6aa641952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.154.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471b7f99-0294-4854-93dd-49837b820c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.159.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7079928c-d32a-4526-95ac-911cc39695c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.196.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f357fe-1e76-4811-810e-237c3d1146bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.244.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aecafc6-72c8-4b68-9d4c-1ff2bf8fe6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.64.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc1c8e4-3d50-4a4c-bd61-fd6f091f5ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.92.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc7da6a-ca51-4fd5-ad0d-bc4fa2e8e3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3742bc-4e40-4329-a5fd-5590511722c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ff3711-59d3-41c9-88a6-ae184e156305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.137.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083c4fff-61fd-4a81-950a-3e256b402767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.154.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba46c44d-e7d4-4313-b37b-c7b33cb8f929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2431c33-546b-4a96-b9e9-89a4dc848d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b798edd2-034a-4370-8738-780bc514163c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9e1e80-b3bb-4a4f-b0ad-f714e0475ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.172.173.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40830cb7-22a7-4463-b0ab-c89261dfb797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.204.120.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3807a00a-4b59-443c-93da-0f38f565dd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.204.179.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b1a490-10d6-4269-8895-edfa65ca00f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d6eec6-6711-45be-ac6a-31068a04eb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.87.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcac69e-6597-499f-a1b6-e2371db34df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.99.112.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f99e36-3e87-4a16-954e-1df849a6db8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.170.168.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72448db3-98cf-45cc-9796-42fbaa9549df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe580061-5627-4b93-85b4-b576f5f2b298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.194.151.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b617169-09f0-40d3-897d-468329fa7223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.196.78.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b028cd3-eeb4-434d-a906-bcb75f1c54c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.208.133.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ab3924-ee69-40ad-843c-f1406b5a2fe2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.123.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ebbad1-869d-4866-950d-0017f680c529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.25.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a24dd4f-3a2e-437b-8a05-b95940a824f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74305885-35ba-45c9-8595-3146ff59cb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.54.31.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be8e011-75e7-4b2b-b2ba-d632cd8bbc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b8e1d7-c440-44c2-ba28-77c8d548e461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.115.108.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34ddf49-4bfd-435a-aca3-994d9a7e1053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.126.103.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e59644e-3a39-4d2a-a267-5b1c83c10ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e28507-5f53-4e4a-9d58-5bea8a687919", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.162.155.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aef9d85-ad00-4065-b85d-d4a474dc363a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.18.115.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2af59a-5cee-4e91-9fd8-6b060af7f4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc573e1-6519-43ea-975d-d7e42d238dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b727c6b-0592-46fa-b77c-e0987875bda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b9e266-24dd-400a-b57c-59b3f838e5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.13.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d2599f-c51d-4fe3-83e6-adf21111c79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.144.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4273fd36-70da-4915-834f-098425c33c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.251.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd581e-e096-4512-a5a7-ed6a78595f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.108.3.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a6ca06-bcf7-48be-8a52-01c5351e67dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.152.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b98c1db-9671-4f18-a1aa-0b41395a1847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.69.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db309b0-4d14-4279-89a4-a92458cf2253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8bbdd-f9f0-4806-b598-be822f3f58da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dc502a-b4fa-4763-ad2d-4811a7203a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.183.63.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed9ad80-eca4-4cc1-9aeb-0b07a5ef7fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.202.208.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963e6986-c4fe-4a09-84e0-7d4e0e477ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7094cc-8fe7-4baa-a93b-1f23e1bb5202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda4aa41-3fe6-420d-afd8-f902a1740934", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.87.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d074cc6f-0a76-4945-9a49-6bd66e853fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.92.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86792cdd-0e13-4cc5-87fc-0922d515de70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.43.106.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bf1f17-5177-483a-a6d2-554a72d3a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.61.48.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146e423e-3544-4112-8263-08579575ec77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.155.93.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa3be11-7bda-47a4-bc7a-4db838aa4eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.173.90.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9132b-e6d3-4f7f-bc9f-f7ce0b661a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8061f57a-a330-4aee-b6c4-8a9245d77798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5d33f4-1ff0-40b8-b70f-094d18360ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a26f70-66d0-475d-8d5f-8e14a94b47c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec8be2-7c06-416c-a96b-a6f52648f6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea76065-2f45-4afe-8639-874bd75ef0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3f49f0-ee20-4d98-833a-ebda977b253c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a1d0e2-4497-4a41-a2e3-a1c8457599d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68310d66-cd90-4ade-a047-fc38868411e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687dd355-4bd0-41ef-abf0-664ca50a3a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946c9aed-1661-4009-b1cd-fef9b1e40d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23315b91-e21a-4a5b-a553-41a4c315b4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a91fff-4bbf-4538-82a8-bc9359a20e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86c6eae-f0a3-4d80-a087-62cb60b27ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc52b89-b66c-47af-a5d6-dfab8a0708c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f1e423-37fe-400f-b73f-b7623e882c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c782b04-5a26-4bff-b791-a9ba3a3276f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbed7b0-8eb4-4ff7-8aa0-dc55e08a4fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2139a33-c59b-4cab-be9e-eadd56308865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bf8255-cd81-4aa7-a643-b080d336862a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116eb1ad-6fca-4aba-b720-de4f740afc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc07a1f3-ecb8-4a3b-85dc-3dcfdaf803ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1c6039-b176-45e3-8299-2ededed5c1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151523ac-8f70-43a9-abe8-247e3060db1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2db617b-c553-4af3-98a7-7dcc73bdde33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d909a9ff-9cd9-474e-85d8-9619605a279c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59746f9b-adda-4b7d-b6e4-c282f3ce9a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a878207-275e-48d7-b404-b8aeef3fca9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7079c9-d47e-4276-9ada-4eaf14245ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ecc36-5592-4046-bf9e-d268c7155163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ca4e57-7580-4b78-8649-68f46fa75c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bac62ac-e7a6-4861-9eca-a37a0b1d8dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.227.148.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd3fefd-f0ee-4273-8972-af1b659c699c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.247.83.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74701794-8c1f-40b4-9d86-dcbaf193f0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c777c53-2050-4045-b286-8c238a30da18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a312c4-9632-4733-9d2a-85d01a37f428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6647755f-15a9-4127-8156-12392d030c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300fb296-ad30-4205-a7ee-02cc28318af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54bc742-a695-42d1-a9ea-a08c289d2e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2834d91-5806-455a-849a-19f8b9d93500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c0cf44-e346-4d41-8172-3e061f4e2471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571ddc5a-6ba1-4e8a-87ad-8ba7de4df287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e639c2d1-e356-44d8-8220-e1f09eba2000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f30150a-0d94-42f5-8334-743f0969648e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697fae0b-cc82-4e5c-8f7f-03fdaf97c01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd452828-cbd6-4f8e-be85-0b4469666f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4023a803-c5a9-4aba-a961-542f10619d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da03762-a475-4217-95c6-d2e47c6c3777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af62598e-4002-4fb4-a907-a9c6474e02e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3716e36-29ff-46c1-9882-a6869333d570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07eb089b-e05c-44ac-980e-7e134b66bfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dcd10f-2807-4b3a-b3be-c2739985e32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18214d06-9bde-4161-a0f9-7554f7673ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8a8f34-92d3-481d-8bef-37f0b52bcd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e282697-17e6-4102-b037-f2aeae326eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6136aba8-e967-472e-9030-75aa252ee4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6774ac36-e81d-44f3-810b-2a05ee13c07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e2a026-45b9-4003-a031-35f176a76181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2dd3fc-4ded-4306-aa2d-98fb45d42069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfaf094-69ff-4899-9b77-b8985cb23ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0b0e21-01d1-44cb-b108-ba0f54703ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c17de0c-c473-4ebe-8a6d-4ecda5a8df71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3424be2d-82f7-41b6-afb4-e7fccca63277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feaaaf3-1a45-4647-9d06-34e65471da91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25991fa-b07f-4e30-ab44-342ce33df684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97892d34-2cd8-4b9a-8c0e-8c47ad426606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a64fed0-f016-4025-ac9c-239daee007df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef70ef1a-4790-45f1-841d-fdb7db42486f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e8d0a1-eb7e-4be4-93d2-cf92b09ebcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c838d24c-414e-400b-990a-d252f6f20d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bee26fc-00e6-4484-8885-7b7def35ef67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf4d2f0-df36-4a75-884b-04ec5cd57368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a448804a-6a1e-400e-9996-48b44b4e7baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383859e7-2e18-4aed-b4ab-ad8718862f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b835323e-843d-407a-9c3a-5e6ad9fe0c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8bcb54-b6ca-4fac-a617-a7525012f315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24496ab5-50b6-40d5-9f5e-a883775b4665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def0a61e-42b2-49b5-b1cb-d7b63121c4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ffcc4d-a3e2-478d-8a69-3a087bf50b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0a6617-eaa0-4bc1-a41d-4d194f6d72be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc56d57-9b89-4e89-b850-ed185646aef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efa6f74-7f72-4c1a-b005-da6b1bfe1e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bc07e0-f202-4d72-8462-18e8a1311279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839695e4-78cf-44fc-b2c5-d45ee87e5f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f862e5-e270-4ad9-9e09-94707b7baa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486b7ece-a323-4bcb-8117-f93ccc44a954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd33325f-5956-4c42-871d-be8a9743139f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6125f65f-70d9-4f94-a9ca-ff4bd487748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bbec82-c55e-494e-aa73-1a116b01b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45348893-e430-480e-af93-b83d8cec938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19abcba-fe33-4bfe-a296-8eccef4145ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d400735b-a4f6-4283-86f1-efed7a5b013b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb8d44d-5048-4290-8ae8-1be7a5eb4b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b3cc1c-ca99-4017-bb5c-ec4aec2921d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a0c9f2-e713-4f6d-b8b1-1f33a2b5a411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd3b477-8b8e-47b6-b932-5c838641e4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f816d55b-3898-4029-96bf-c8a49519ae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970f233b-8fdf-414e-b013-ced085877941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84996a9-bc91-42b9-96b9-08fc36efe969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3110d940-acf6-4f21-b223-2e902b0baa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d555a375-b4b2-4bed-8237-27db2cf3d8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e591b1-2d3d-495e-be60-e53d9fb567a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.252.238.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dadaf2-5091-4b25-a563-ee53bafdf812", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf9bf30-8c35-4627-a5a7-e5ed5ddef3b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d16f230-807e-47a8-ac46-391d730ed0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.92.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15586205-cd79-4bb8-952d-48c36516468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.229.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c57145-1f3a-448a-bc69-5a60c36cf584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.172.180.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b04133-23d0-4a57-8acd-501c156bab37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.49.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c216ee-f185-42bf-ba53-ffac2cad2135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.23.12.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e2a1e9-0640-489e-960b-5868bb9d5b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.25.82.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11b774f-a2ab-4bf6-9bd5-3ef94fd64675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.67.51.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1e0650-7b2f-49af-a072-b0feb7201262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.0.56.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c09c72-4dcd-467a-9efc-4cc5bd7103d8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.157.205.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df78c10f-db9b-4ec7-a4f2-cc9b6aeeff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d3f23d-4ec0-4b15-b87d-03f139880335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.20.249.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4107eded-e05c-45b5-936b-733933a5dabf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.62.15.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3852471-87a8-4492-ac75-fa36020a79f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.80.72.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c8da2f-91b2-4b0c-8cf9-b235e1df49a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.150.93.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912cf59a-9f65-4fa3-95ff-c6b1d5edbbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.76.191.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2184766-2f3a-4167-85c0-15663ccb7e55", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.85.83.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c271364-101f-4ebf-9519-310a40ac2653", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.93.229.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be70c93e-e7af-4bca-87d7-3ccd6ee33e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.118.173.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9178d904-4918-4022-a476-bbe96f5e210c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dab82c-26e4-4563-aab4-69f10aeeb160", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.128.177.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaccd3a-d239-450e-a634-1a4d2ad74623", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.163.221.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a7f1f4-1eac-4ca6-8180-f5ae2ed31b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf87c1af-b9f1-4fb3-b64f-11e88f8e2bb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b1cb05-b96b-4c45-8e86-77565bf3c281", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4893100d-32d2-4224-88d4-02c36c458be8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb2ff8d-f29b-4861-977c-58cc755d4104", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deed357-ef0c-4bd3-a3fd-f1950c334a70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6344a8-3130-4f68-a45e-9dfaf60e55ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54911062-98f4-4065-b737-cad1564063e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.139.88.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653095a0-96c0-4c6d-af05-583157f995a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d81fc7-4327-420c-b4ba-38109d5bfe9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.24.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12981739-4504-43dc-aa9d-8df38e545ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bb2409-eb9e-4f97-a672-0dc831b951c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.24.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee063c58-5065-4716-80ac-c37abcfeb657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcb4ac7-727b-4586-88e9-b61f6bba3cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.35.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f579722b-4d8c-4c34-85aa-b519d262c22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9841c481-d466-4888-bd23-b4378d7712ba", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.178.209.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5040f4b-fed1-422a-a2c6-2a1ce43a9b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.226.2.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a86dfd-f41f-4f18-83a0-84025701044e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.247.153.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce647c2-330b-458f-89f7-2b1463db12cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354bce12-6a73-4285-8a39-98c95d223aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f3bcb7-4c1e-44fe-b976-02eab5f8b507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.132.164.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ffa3c2-3e13-4bbf-b3ce-374131df30cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.133.64.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1806b33f-41b4-414a-b6ea-f64db890531f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.108.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f1c5d7-ce7f-4554-b10b-9a315530296e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bc966c-8236-4245-b699-e1222af40b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.119.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35c0ff9-6978-4aa8-b82f-afc2d93da9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5539256-f0d7-47c0-8d5e-d06c80521bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373e93dc-541a-48fd-bd81-0a6a5aabe87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19f0561-fb58-416b-8c29-27acfb42b254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.14.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e31782b-686d-4da4-8ca2-a6383f160666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.179.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83082bba-040a-4a00-82bb-bc44891d1946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.189.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebec7cf-cc7c-474d-a599-aab74e996230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd0427a-ae50-4d2d-a804-9d6691ec6f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.23.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f6687c-82bd-410b-924b-1608aa1807f6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.28.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a028834f-8af0-42d8-8df2-29d384398576", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.49.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbdb0eb-0f32-4d20-8ffa-4477d848e5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5d3add-2955-4a3f-af17-b3e056a3a20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.202.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f4f904-ca3b-49ed-bd4f-c356a2d523c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.124.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d697722-f477-4c05-b6c8-313b175b04d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3401ab2b-a8f7-4109-bf4d-691867215d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.149.4.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2db80b-4e6a-42ed-98f9-a4a579297c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.117.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e554e509-3b38-4e0c-9c2b-4a5ebc6a320e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.123.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c10d156-40b3-472d-ae53-3a87c682ed53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.94.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32bad9d-b17b-4098-a6d8-e653ee25159d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.94.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b6c2c6-06ee-4e5f-9559-d90d00559e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.145.110.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15dd353-bdc1-44dc-9da3-5088315e7d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.219.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f91938-eb8b-4610-ad99-289110455ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.207.213.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0edd4d-3ad3-460c-bad8-ee863ef8e338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.37.71.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1eeae1a-fe59-4af2-857b-8ddec315d9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.47.26.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d133b9-1f5c-4656-b001-bce67c58a10d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.47.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d099ce-ebc7-44f8-a084-5e16aeda33ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.5.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba17215e-eb3b-4779-b65d-8550d2add48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ac80d6-832b-43ca-9822-7c3b2063eba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4214224b-ce4a-4d56-bd6c-9cb81d1d7cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6712c71-b035-48cc-bf7b-6cf912c3f93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4857d41-87cd-4a53-9d2f-36caf9714506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a316f81-404b-4af8-b08b-52e55b55e887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.216.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546ba1b7-6aba-4a8a-b567-006e0d740368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e55a2dc-750d-454d-910f-95a0d1a565b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.162.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd33b30-18c2-4a54-829b-24712c3b0d87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.221.74.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5952f9fa-c361-47c5-830b-f69d6c85dabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6611e7f-f182-4345-9a53-b1115c7fea61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.104.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83725211-1193-42d7-9e39-e4edcaec86de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.189.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfa7b39-29cd-4cd1-b1fc-d7db9d2d54b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.191.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a6da07-fe0e-4344-8dda-020c2bb8caac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.106.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d67807b-bf68-4e43-90ea-53b1d321fe1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f56bd5-19b9-4b4d-8034-e3569949d1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.33.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b010b17e-0888-47a3-8458-3d30e33c4e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.53.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db7793-e904-4123-bab4-de3892841c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.5.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616662db-e1e1-4be4-815b-05a9b3b05965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.39.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafec12d-9ba6-4566-a7ee-302d9f2a16bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.93.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6030c8-715f-4b35-8050-07e84a6f83ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.218.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6049eb8-c893-4a1f-8a78-83d177efd4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.226.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32b68de-6ef6-4bbb-a224-aaa1d07c5f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.250.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690becf5-da0e-4a43-97fd-c8c94b51d20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.176.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b3864d-643a-49a8-94aa-a1e51621a650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.92.182.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb1d847-6481-43e5-95b4-54fa5b5d8d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.92.239.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c884983f-e842-4f41-a5f5-83e80138f567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.37.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d303f22e-20e5-4f11-bc61-d1fd52700bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72d3905-f225-4af9-bcb7-d637cd4fab7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a6d449-27fa-42d9-834e-bcd5a822bb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bef4e7-58ef-4e81-a72e-43c27cacb586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd1df7-fdd5-486b-bc15-eb5faa0d72b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63759ceb-2076-4f35-bdff-db3b20d1c77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ba182b-8b81-4eba-b7b9-dd82cb8c2d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31254fb6-8bbc-4490-b447-a3e7dfde0dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0748715f-61fb-4730-8a29-7998387f87df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3721e834-2060-4df6-8b0a-b251adb18b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60da08bd-bdd0-4f12-a3ef-00f37868e61a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.177.79.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6af437-9b80-442e-9724-e3d5a199834d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.190.160.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329b21f1-0012-41f1-b747-b3760152992a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b295fd2a-3237-478c-a866-e911cfef9edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.188.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb5601c-1960-482e-ae53-bdc634776c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.189.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0003d626-b9d6-4008-9a9a-578592435de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08860348-9037-4846-b3b6-ce1c5e4af7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e84910-b898-4e61-9966-912fbb153d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c507414-8f13-4cf2-b5aa-6be973d8114b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2021bf1b-096d-4eab-9fac-5b4cf169cba6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040ffe41-075e-4cfa-9d97-2bf76cbdf84f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cd91c8-d449-44f9-b6f3-dee4396e8ba4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65363332-182d-438e-a4ce-e8dcf8b741e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720cc4f2-038d-4316-96f3-90f3e888117c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.33.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f66191-b071-4a7f-8118-497a3275870b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.102.25.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0366dd-f590-4b92-9519-7deb8e072bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.107.32.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3a23db-0b18-4dfe-8a8d-4041b9d1fa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.13.241.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79313899-2be3-4989-a514-7ee789f143a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.141.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfce1bd5-63f6-4e02-8589-2d7c0fe624d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.149.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764327c9-832c-4d99-9458-be38b4393930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.116.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ee0e7e-b271-4bf6-b31c-8dd7316e5535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4c0b94-da41-4faf-8e88-98452250cb5c", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.21.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe70195-88d3-45b7-85e1-b7aa08f88f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.25.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4274a3-a258-4133-9b6f-796800dc7cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.47.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2fa4c7-1a8d-48dc-964f-ee42b6e90e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.64.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031adb7c-d2cb-4ab0-b9a0-51476dbd8f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a520896b-4101-4099-be99-1b46c2394cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.133.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0348cfe3-0f72-4d3c-b6cb-594c85ae7646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.241.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44fc556-139e-4cd0-bb87-b482b0e8b5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.254.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23576ad9-cb83-47c4-9a30-7982f0ef029c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.162.0.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d57093d-edc4-42b3-9b4a-7d457395aef1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.17.106.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281ef150-2b3c-4a98-aef7-6e2eee329730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.179.220.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0704832a-1dde-4548-91e4-8090c87cd37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.19.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf215ba3-4e6e-4bdc-aa5f-d79f7c27b232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.242.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2265d259-abb4-42d6-b409-dfdfd1331403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5bfbd7-1f9e-4444-b1ed-2deb51345aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022f401d-5f17-4dca-b37a-d44304133d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.57.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082b9c1a-709a-4008-acb3-7b9558c6291e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.139.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f784de22-147c-4b17-838b-b1dd083df01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.146.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64734a3-de42-48fb-a6c8-dbb65c8cd3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.172.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38023155-5382-44a7-a377-64c9bf4698fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.190.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa615528-a120-4f5f-a718-6afcdd4f6f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.74.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c03482c-624f-4ea8-a0aa-9ab9145782ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.49.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a71833-fb18-4544-b728-1be753e07daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a5bc88-8dbf-4cbc-bd35-5c82728500bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bb872e-2e79-45a0-b06c-6b9878ec1d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.238.240.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa2c9a8-7333-4eb9-bfb1-cec4fa1c8423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.122.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cfbd6e-9d2a-4359-9616-9a06de20b338", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.31.203.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad73380-df7a-4b25-b81e-e7b189c766f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.12.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e63d1a-6200-4b04-9785-25e95fdb61ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.51.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363189cb-24ae-4e90-b69d-080832bf42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.93.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d254571-653e-4de7-8e3e-82c745653941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.157.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584c19f5-ed10-4cd1-b57f-88517152eb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.173.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381deea4-ed6f-49b0-b3fc-94da94cfa909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.234.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8836c5-96a1-4f8b-bd6f-e9a810291099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.156.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9d671b-46cb-4076-aeb9-0f9b98f2ba45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.164.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739365eb-ec6e-4555-bb56-74fb06466dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.175.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420a57c6-33c7-4d77-adfd-e6b2d00788f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.15.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53061ee2-a396-4614-808e-01d14f3634ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30df31f0-2850-44b4-89a6-9b449786c8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.109.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7063388e-f36c-47e7-99ed-82018254a2e9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.71.30.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397e9b6f-7381-4571-8af2-86fb6dba4c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.243.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6ba7ca-5941-48de-8e63-af77cf1355fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.35.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda53e61-14e8-4b5b-a2b1-81cbdcfeb48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.7.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1570d21e-bb1f-40a9-ba64-31f39fd79bc5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.211.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345594ac-deec-4745-ab7c-4561411d3b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.237.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84be8e81-2a3f-4848-807b-9b6518ff998b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.73.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58367c5a-1551-4837-8004-f6fb906c45a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.99.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d122f67f-e615-4cdb-b503-454a7af6ca1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.118.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d59ea53-123e-41d8-a3d9-acdefa2e8e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.23.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d8a0fd-bdff-4e29-95bd-975961e1aab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.249.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae00c2b0-fe62-4d6f-a1fd-aef52735c2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.251.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f51bca6-41a8-4c53-97b3-72afb213a4ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.31.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b172fb-4d58-446b-8d96-f45dbda99069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.38.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49d9ebc-4e9f-470d-875a-a53603117432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.38.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1045b5dc-0119-4337-a1ab-9c29220aa2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.7.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c43d839-6a4e-4330-b2be-175ba3c135c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.8.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a562b8-d702-4678-ba66-f428eede1c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.211.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59541917-7c0a-4e9a-8fc8-09bc7efe90c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.252.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dcb917-d64d-4d24-a208-6b835850e287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.82.83.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22879c1-aea9-45f1-ba2c-8180924482d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.89.6.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d601bd4d-70b3-4ead-a753-a76d0db5ad57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.212.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c0b602-fd7b-4053-bbb9-08bbd5ea79ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c5c7b1-3927-4957-984e-68e9eabea3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.192.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05c9cc8-4023-4b94-b81d-fadbb870c0ef", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.118.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2601e58b-edc8-4fec-8293-03416f0cd69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.146.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efbd07f-9b00-4dce-8d98-0d46efca5e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.247.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158924e7-3efb-483c-af73-d626a955312e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.54.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308cde88-3e2e-4746-b757-1f384bd69415", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.68.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab979cb-48c8-45d6-8a3a-29117db33f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.80.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287bd1fa-550f-45f3-8fb1-f1dd0a6542cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cc0ccc-5cd9-49d7-803b-ea428969ba28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9cab3e-353d-402b-b93a-6fb8c99a7e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fddee5a-b78d-4cd9-8ec7-481563fc26aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c885cfe3-a73d-48c9-b911-064327507cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514156e1-6426-4428-b574-2d479af52d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f94f9b-7986-4d57-8397-337c0e0d9ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281b6e7e-3e86-41e2-ad10-7ffebafce811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935f39d1-7214-4966-9d7e-8647af1489ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae2832c-1673-4dd0-bf67-0b8ddf2ef1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f653457-0ace-4ec1-82d5-347d773bc8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e25cb2b-a470-457d-8aca-286b6465c39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1dd067-7584-4aa0-abc2-cf2ff080f658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fa2488-7b41-40fa-bef0-d69db0956f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93529cc-f54f-479d-a383-4b6a4a6a85a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3541ed4-8a00-4914-bb1f-e97bdc450476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399b0249-3110-4a77-84fc-99e63e26652c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645295e2-b76e-45cc-865c-caba4de7f2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f700c9c-f9cd-4d8d-863b-4f77ca81fb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2646b60f-6723-453e-bcb3-250d19538c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0edb77c-bbbf-48bf-af90-c83abdc9b900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1122f1cc-4fed-42dd-b345-2d45b84c2bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931f94bd-dbb2-48d9-9ce2-1b5753606918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1990c691-a224-4da0-a0ad-33d8bf62eb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51a641b-05e0-4000-acd5-ef7e558b6dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1be6b6-42a2-49cb-903b-12af94b00ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c846f402-9ac0-4772-9dc2-9b923b3daf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36854511-837d-4721-8bb4-9feab3e2c198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425e89d0-a0ad-4dfd-810a-23b56eb511de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742b0d0e-7645-4030-a49c-86938398463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b316fff-658d-4e1e-b4f0-888543208f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c247e2f9-158a-40ad-b404-c0cf51dc1afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c9ea75-76b7-4018-aa66-f78d9597c6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93866448-892e-4b9b-9460-240b9a3f8bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6156d59d-93ac-46ca-b6cf-6c0851c5b526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b46970-18df-4f13-ab2e-7e596f1ec0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4c76c9-10c1-4ee8-b59a-a2ba1e0875ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4bf206-da7e-4882-b282-7c6c4d7c4b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4407208b-a8c3-4b2e-8b6b-92a678cb7f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e4bf5b-abc4-43aa-98d4-afec7df8b5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc39b69e-92e5-412c-8631-5e9d9b0e2b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0022f62e-08f2-453c-926a-7aff52550df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e3c3d0-38b6-4a4c-b283-a66fb9abcb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8297d56-a169-406d-9d01-2b19da4efc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59304ec9-0ddd-4bdb-a288-10c86abd6843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27e220f-e952-4a8b-822e-efff95e22959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46801f8-078b-4eea-b3f1-8ca092eda9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7a4ba8-25dd-4090-81d6-10d6e1d0cdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4457e69-5570-4c76-a85d-2faabc46bdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0dad29-9138-4c4a-bef5-9b53e3e6103e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b3da28-67a7-45e7-a13e-24d56d45dc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6327301-526a-4682-b7f0-715c5699489f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7e2b12-faa0-4538-9deb-bf98ec88ea73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bbd16b-dabb-44a5-a277-cd0f28a0f8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4f338b-eb49-4fad-876b-e4418aa0b414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715df47a-c79f-4851-b27b-d794318b0a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b2cf16-575f-4d61-8449-e6407267b817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f535bbea-3d0b-4605-8283-1c90c00ddfa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93066713-1a6a-402c-96f0-c8ee3bf02e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b58d929-3627-445e-92bd-704653521b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d0f2f6-929e-4b4c-83fd-189738d84088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1babf4-37e8-4b84-a272-c2b013f7a0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbacbf8-a299-4318-a881-0b94ad9ef6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd7b1a8-6663-4348-a4b4-acac747d941e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f286cfe-b245-4fc7-b407-4dfcce1118e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df239504-4a92-4a07-8e1f-d579d7bcb36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1785eb2d-aa8c-4c5a-8685-5b80e19cb69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d129db-05ac-43de-b3b7-8668e788be89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985a1473-8e9e-4a86-9a6b-def626077104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23717a6-e51a-47db-9285-d8167424ad7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488beb51-0eee-44c3-875b-a4055fdd7c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292af905-85dc-47d0-9b62-0830294fc9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a04b72a-4c25-4310-a3c0-12e7ca66b784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48db8713-5839-40b4-9235-89156ddbca6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053f18b4-73db-4a02-b65e-db4538f80f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8789b052-1ce9-489b-a829-fb4b4c5b017f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea3b5f0-a3af-4b52-935c-ac27a15f613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f1b25e-ff6a-4c74-83bd-f4406369aeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1c5a22-250e-4884-855c-99e98cd06703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573a208c-8b4c-49a2-9331-9ea70c287cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04cdbb8-34a2-4c92-a8e4-fc07c1294df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e930451-7b9f-42b1-8a52-9a658c0def72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a100fe84-9abe-41d8-9500-10d6f20f3cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15acf48f-624b-4a43-93b6-e108ec96134c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798f2f51-b384-43ff-a694-63f46cdfa558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84837df-e6d0-4c10-9259-17083220a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e643e740-9a48-4607-b660-729d2b109d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a5a811-dda3-4532-99e7-c69affa73d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296571d9-0a9b-446a-83da-64308f8e2c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e672b38-b385-43a0-8307-f0da129986fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943c3265-e0d6-4b2c-8556-a78056b9031a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4195910-0aa7-4337-9140-d52f15d35258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a431835-6f58-456b-b538-44c36c55dd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d70126-da3b-454a-97d2-00a70b355bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a11e62-dbd0-4ef4-a3f3-1576822d322f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97986f3-79d1-421c-8c9b-feccf70fd603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d2d6be-3285-421c-9ef2-f349b16f78f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e08b402-fdef-4cbf-9cb0-c950f96069d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d21f8c9-d47a-4dcc-bc65-b6e17c386ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022d44ba-8e03-4025-9ac8-6cf2fc6703b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f9494e-725b-4001-bb3c-d08f72e5a367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63f3a64-ffa2-4e48-96f8-72c0ca5d4793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f5d65c-57f8-4fd0-b01b-b02063520788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2e2e4d-fdeb-4e79-a496-a10c7919c765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d90d56-5085-49ca-b0ce-82d79282bed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214d0ce0-0926-4a5a-9449-193eaa90a194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b3a1b9-4259-4d9f-8ae9-1b8915d483c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd124595-69cd-4166-a294-7c067783396d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cbc974-286d-4376-97b8-f29be62c5cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2916c3d6-b75e-43d0-a622-9041ec41aa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e478dc-9d6c-4417-9439-35d29bdb8bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ebaa89-0ce2-4625-a8f1-30d73d387c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e8981a-45a9-4226-a43d-730b75118ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92cb686-273d-4927-bec5-b1d30d44a8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b98c07c-bde7-47e3-8920-76b93efa23b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d1f34d-8436-454d-9cc0-aee935efbf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe983a2-4bde-47b0-901b-798bb34c0eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b7f605-c6dc-475c-ae6f-0aaa1249701c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af887b2a-016b-4d54-bdc7-d52aee761a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be301cd6-7037-4c00-a58a-697a773dc396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32208856-8f03-4172-a7f2-839c9b526050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f284d61-6ad1-4979-9f14-2b4e34f4f762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ea2c70-5398-4f73-b1b2-4ce42907e651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34292f2d-9688-4f8c-bfb9-7e6eb5eb669d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fe722b-3f87-4217-be66-d35167f6b386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2b78d5-c04e-4fb7-9cd4-f2c0b49e7790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c757fff4-037e-4025-838f-19a2dcc72398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa19179-014e-4b15-8ef7-6b96fd807279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b822230-10cf-48bd-a302-4b7ceb1932a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf1e294-0dd0-4a9b-b3ac-b7fcdb105ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06042a7-1e37-46fe-b3da-8546ffce087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee2c801-ae71-40ab-b888-29dcc3741f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6438d679-9d18-4dbe-be18-1d16076d77d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbb24ab-42e2-4b5c-a713-0932219c460b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a93f8de-1c11-48aa-b4d2-21a3bb49d9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cba098-09f6-4e8d-b429-8fbdd9921ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00caf584-314c-4e68-af4a-1f7283264236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e557ba0-99f7-4332-9dd8-acf797b4b62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada1516c-b4e7-42a9-9e10-d445a7e046c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a02f3fc-e495-4089-b2c9-d474fbfe8efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de6ade2-b078-49f2-8a0c-103c7144dd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32933e52-862e-484c-9b0b-89ed84075a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb57380-a8a9-42f7-9e4e-d0511edb1f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edc9050-b932-4d37-b086-6fca71780618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e1fa29-eb23-474c-a959-5524740ddd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f77a9b3-f825-41c6-9154-2c4994c1a8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb04c4d9-ac41-4d20-ad9c-5800c882f133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d265b88-39f6-4546-9ba1-73a777365337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f610f8-d0cf-49aa-9b05-8ce0e3604deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97e75f4-4204-400d-b6db-23bde587f7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302848db-a819-4ab7-8be1-36bdb621d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8c3a75-1db0-44d4-9a27-309d26790fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd4ee70-f773-4295-885b-f308354537d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2eaa6f-df85-489a-b277-a36e2e26a7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a93bfd-9596-4112-be43-0bed271b2320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d86ea7-ce2c-4c12-a6e3-8099922c954e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94458a00-a82e-4c90-afd3-cfabec346adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e3e87e-962c-4a23-b008-e1cb598ad82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b9884d-adf0-48a7-b417-67bae0941439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be61559-6910-499c-b380-eb0ffda8cc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9693c641-9dae-447c-9d90-1911c7deba5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436dab63-ecc7-4df3-b974-c5b25e4221f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3859d04c-79c2-45f7-a0a1-c6aac2ec9396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c0c426-e6d9-4c06-be0b-84fdaa0c5178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc66113-4f35-44a4-a4f5-38e5dc02b2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1708288c-b2f7-4b11-b9ce-41e3cf677172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54c37ab-a724-4331-9dc5-21703c7bfbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f3c044-783d-42a7-b2b4-37cc255145e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb6a4c8-3343-4fc3-8f0b-8853b0f8f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d478a4c-886d-4d1b-b41b-770e01b8c7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38724584-9c68-4cba-8c30-e09beab0f616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896af93c-dd6e-4ec4-91ea-c28fe808b49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2305b6ac-4bf6-4eef-8cc8-5782a59afd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f136567-151f-4e76-a7ce-7f606cf669b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9e5e7e-bf24-4e19-8e4d-191442b9772d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0b4523-ab49-4d49-87aa-98c74c61c921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf700fa-6ef5-4a44-8db2-4feeac255dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4fb351-b5e5-48e8-928a-06ee8855dfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c36541a-20cc-4269-8bb7-420696eb2d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4257007-c498-4187-b22b-8685ad1cb13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233bbf2c-1392-4c7c-b628-eeba16c7cec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36007b3-2a9a-476e-9f13-68e37bba899d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e4ca19-261c-4f95-8a40-11ba7aa63728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2438a9-c303-4ae9-92e4-ad228562f039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1418c3a1-ae8f-4797-9efc-e94f82904648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378652bb-5acd-47ed-94c8-17e75aadf80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479a2a55-3121-44a1-a38d-c8e565ea2be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ce6a46-96f9-4d8b-a2f8-9c1ebf6da839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3aff22-7625-47dc-b9b0-d5c715f29236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b481900a-37b7-40d3-8931-344b952581b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e281c20-0a38-43d2-a7e7-73ac95c641a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7cd694-726a-49bd-bb84-14d6a51a0723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a985a692-6596-4bcb-b81b-2cf3e373c613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c86eeb-b65f-4930-a525-6eaef475f58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7a9a55-4591-4b84-8e7c-f22c82372699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2265415-a396-4234-a7ad-28a037142769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51077682-a91e-47dd-9723-ce8854cfea3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fdcf6f-c722-4719-aa93-3a9669ff6f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c50e27-69e3-415c-9765-1beb6dd9bc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c52e07-3638-40fd-96e7-d6238cac727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f063f3-9e59-403e-ae71-4ee2118bea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2afa035-d1d4-4737-b743-1cad44d690c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed736ef-f6a3-4ae5-bcb6-3f1e968de6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fdbe25-b13d-4787-8a99-cf0ddba5079b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14f8627-27c3-47ce-8d28-6b784c0ace7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e52492e-0df2-432a-b8b7-286fb61374ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61762c07-35c3-4a54-9f05-3887e85474c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6037bfc8-d95a-47c1-882b-e1e2def26f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3ea365-114b-4a0c-a954-a252fe90288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeb7eac-7889-4257-aa5f-1667b91611f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3d7386-7d6a-4598-b449-7ca8471789e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1085ebee-765f-4d08-9f52-83797136a344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed63efd3-e366-41af-8252-65054906fa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c5cd9f-a5da-486e-97c9-499ab8fed604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e5639-b321-414a-b044-d089fd051b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbf3a35-b142-49d5-9389-ac280517cad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e998446c-5639-46ff-955d-1e84b10f5cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b50bf-962d-4af6-a555-1a467f428c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db2c51b-0bca-438d-ae14-eb3828063e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2029d9f-cbe3-41b0-bfc8-caa9d53c2c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50ca1e-c89b-41d3-8256-f9cec211fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aff1e97-a277-45a0-a256-5fcc83df6a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df18a25e-481d-4c03-98f8-c1816ea9ba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc494e3-fa27-45dc-b16e-8c42f1f27439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbf6015-d321-4164-ac9e-69ba78fc4ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7580e7-5077-4dd0-b277-683a8c0f408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70c74a5-b9e5-4170-b637-bda66ccdd3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7544d56f-2bab-461a-a0ce-474b72367a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8803d7-3253-4f31-99da-e13e51892a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35262e00-98f1-42d9-b8f0-e71edcd6478b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69690092-d2b1-43e4-938e-09c5d625f8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250ab4e7-9f9d-4c9f-bee3-ff9870d632e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d389efa-86ec-48f4-98da-39b0fba6c5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6553fa17-1451-4877-9551-4ec5ff38ca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ef145d-f48d-4992-848b-c0658f58ae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafd9741-7294-45db-9874-58b6602739f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e855c6e-06ed-4fb6-9c77-e058b4be3532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96862674-57ca-4ad3-a134-cc41dc6a45d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a1e363-7e12-47f2-9ed7-6f564f2dc74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc755d84-bade-4417-af5c-15ec4724335c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a9cbdf-ca77-4bc7-97a2-e3e2e534a015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f0e12a-20e7-4e1e-b2c3-259c70f5c52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21ba903-a0b8-47ef-9e30-0ad5301b55f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ab3faf-d513-494c-bb3b-d7ddab87e0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf3accc-21f3-468d-9e9b-c07a52e62bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c4a4b7-bb45-475a-8560-b99e722b0a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a4463-a4fe-4cee-be4f-f74edee89c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1beaaa-950e-4cd2-bc1c-0b8de7799c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d5f457-bb35-45f7-8b18-63730e057cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef6d41d-708e-4fd9-946e-2d6789295cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8ffa1a-a76f-4f45-90fe-238fb275d50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3b0ab2-61fa-4bd3-90e6-fef771c33f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a02a36-5508-4e5b-9a0e-5fe20c90709b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e6441-52bd-45b9-ba4a-b2d71180d500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d85d8a-4181-41a4-aceb-a7a9f63be782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e834a52a-669f-4470-8d96-b24c2419d782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163dfae0-8835-4269-a371-8ee430bd7f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2a4ba7-8af1-4af9-b215-98e6c035d84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09a6b2c-8624-4fcf-af18-f7170f29bd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e99a890-9312-4f35-b3f0-b9dc0cf968a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae998cc9-fc6b-4817-bcbd-7b31955586ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a559aa7-bdb9-4905-8882-8d8bc093dcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abff515-bcbd-4663-b3c6-97549fd7ee7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7c8e7e-b2af-49e1-8160-8f7ffa2788c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f9f865-c3b5-456a-af7d-fc93df1d0c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da919f86-b23b-4282-8846-46b8a4e0a3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde6107a-3ba8-459f-9645-149eca01341f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db2174c-393e-41d2-8218-98b452c7ccf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db48ab6c-caa3-472c-af68-a04f4b1ddc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5da235-920d-4b47-aa4e-e4cae111221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22df9765-a10b-4567-bd22-84b27cc09f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e4a0ac-4ff8-4467-b4c1-90510ac3ae6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d0319a-3c4e-4d2d-bf3a-8bd6a0232a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ec2b68-dd4f-4d81-a543-76b00c962f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756be7ac-b7a2-4b89-84d2-b4705ab3575a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3adf5c-4047-4a90-bf42-4daef573a641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4181bb-0a7d-465b-a970-9c892994af01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5dbc6e-2593-4a12-8b8f-09b67359467b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f4989b-909f-4039-8bc3-45abbe3e9fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3262e795-a678-4370-a5b2-39da3f33e11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee7bacd-820a-455f-b491-ce989c45f464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf537fa7-26df-47d5-8ca7-f9cde3b3b063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b25c98a-ef9b-4c27-b1d0-db1a38c86bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea6d531-9883-4b6c-b801-279710e023b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d9ddac-d364-4bd4-94bd-214a2d6ffa27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caf8339-2f9f-4bcf-baad-749c2c9ea0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0671d6d-0a6f-4d8b-947b-36aae13f374e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e65286-4bd1-47f3-b02d-1dfe9ec3369a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762e5701-89b6-4669-84d8-c79c3f44c869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae00d6f-340f-4491-ab23-e424252f7e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2ba771-73d4-440a-b3ba-60a8a863076e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde4c070-8343-46a8-9700-9cd4c082dada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7bfd63-049f-460a-8bd7-3d3c7f5c557b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada61401-cb02-4989-8fb7-80f555e6c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dd2fa8-f53e-483a-b9ad-d678a2db33cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd87c77-3950-44db-976d-978bf931dafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cd8df0-1381-4724-8178-f2963909c9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedf6339-3f96-4690-ac27-055d737ad67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee38bd96-dec5-4f8c-ad3d-6f9486d07f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef617dd-88ba-4cff-ae0a-e9612e57e153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6860d332-35bb-4862-9a89-b2fd11647383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37a558e-911a-4329-94be-b46d8cbd4d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a798687-d80d-4b68-badd-92565f16bf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a52f46-6fab-4d1b-880a-2ac962c33708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b2f9c6-7192-4723-a114-87d280eb05e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcb57af-97d7-49a4-bbfa-7a12e77ebd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05c7bf5-5a3d-496e-8692-e4bad5268671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ece0960-2e59-4ae9-861d-89d31234738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ced312e-04f0-4fad-af4a-4d47d9b28ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e66f57-b5fc-4e90-b328-c7aceb9cea9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e75472-89d7-463c-9a86-3e21e10c8f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c73c0-3999-44cb-9dd5-758fe42a91b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08cdd73-12d8-434a-9367-0d43257035ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f297c6-5943-4c1e-aa9e-3d38ccf69117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588901dd-88cf-4a17-bfa6-08bd768a20af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d10037c-ac3e-4f39-a69e-76e2d55735db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bbea99-3c1a-4833-a8ec-fa9ce680ada3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebad155-71f2-4370-8e94-e5a7fb972ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67606398-3fd9-4c6f-9a2b-087543384d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8bf67e-6e5c-49e5-bb1f-af5c4a3489de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e451ac2e-d279-4ba9-b5ee-8a108dc9a98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203c10c1-4144-4252-b776-11d88ff8612d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc75395-6cce-4d73-ba2f-a7d615b2a30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd67a147-5f30-4626-8001-bd318b554d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60851218-6576-42f4-94bf-03b924f88103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdf0417-a909-4384-9e5c-4f207708aaff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9287da5-b343-4ddf-befc-2cbb5799ed0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fdc13d-000d-4c26-a70e-112b98279337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa38a3cd-7339-4706-9928-4b12bbac3e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8705ca71-8231-44fb-a4dc-ff2d1fef0903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49341570-b536-4f26-aa6b-117b792232a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252e5dd8-3f07-4a15-a7b3-b0011136eeed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2a7f57-6542-4edf-8139-3767b7c6d5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd5435-c0ca-4c53-a021-c42c37471305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aac3e1e-17cc-4504-aab3-3b7fc9ca925d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9120fdac-fd22-40bb-9176-001cd6d5fc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cab47c-9436-4d33-a6c0-be548202f37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e9d453-5daf-4d8d-bb07-f9525110d565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ab0112-e26b-4e3d-86a9-6ddcdf740da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5d0e1d-cbab-45d3-a212-4bdb89d538db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737da190-2383-4ed8-9426-c1645f6c7a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.183.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e299b13-a9a0-434d-9ef2-a209b454a873", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.205.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994dc442-ee73-4739-97e1-987ed15eaaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.236.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54abb7d-e3b0-4bd4-8a1d-49a0f953be47", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540cc8e7-58bf-4098-8dee-b410974a4117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.201.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b973421f-5706-4afe-ab8d-0868848da8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c529da0c-5c5d-4b80-b46b-813eba35e1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.113.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6271cc68-d621-446e-847c-0b15fae0546e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16efd57c-8c07-4f33-9764-771ddd0013b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.92.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f8f29f-4be8-4a3b-a83c-2703c598f17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.127.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f5d1f3-f6fb-4b02-915c-1023dde3b214", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.217.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d08577-b77e-43d6-87c7-d8e4b281dd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.87.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7358b0-985d-4819-a3f2-96496ffc5bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff522c3-0d62-470f-87f3-61538c6c9f60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.245.241.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc7e209-3525-4117-8607-98c3332dbd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69eca0f8-1869-4f5e-b5af-6513e52f39ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c3d536-203a-43c3-9eb5-d74e25ffd5de", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.111.32.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2500479b-3e6e-4697-ab9a-e611342e2f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.158.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f80590-4baf-4e74-bc8d-3bb6e234be2c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.118.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b84f6c-643a-4d43-b46a-0d67109ae58f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.7.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b49a65-6f12-410a-93c8-0412c48a4ad4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.140.10.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354289f4-eeaa-4402-bb5e-c09145d9d35d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.27.75.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017d051d-b1cb-4152-93b9-284d30a87e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.94.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c628fb3-f13f-442e-b70e-4d129abd00ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.126.154.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ee1402-7359-4310-be6a-e1f854a6970a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.186.120.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd612dc6-c6d2-4e85-ba17-933ef50b448e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.217.84.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7f193a-1b74-4473-b9ac-2226bb4c0fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.235.54.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82a2128-5bb1-4018-8590-a30c248f02e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.238.163.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acde250-6d67-47d2-a0e7-5067623535b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.7.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbd7408-c22f-434b-ab66-e24236eda553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.255.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669e5b8b-41c5-4cf7-a90a-f5114cade9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.61.117.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9f5100-6877-425d-93fe-a26ed66011e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.61.120.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71e813a-00fd-4127-a698-1087f5989c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.22.164.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87d9a8c-abd1-447e-b59a-de56cb5d5667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.144.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac38b4d-230d-4027-a4a9-080c0a422c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.153.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31ca9e9-fa93-4abe-8c23-fdcd65dbffd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.168.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb18810b-fe56-46b0-a0be-7b5271a1c51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.252.186.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88d056e-1c57-4096-a84a-2979fbce8472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.3.231.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c01d95-d1c1-4b4c-91bc-287592e6446e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.214.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96440cd-20f5-4aea-a868-dd631e135f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.120.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cd2a63-34f3-4d09-acd5-821109bb46b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.7.2.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaae6f6-0809-41ad-b13b-f378319f3fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f960a19-868e-4094-a0fb-234a3ec5c24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.157.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ae4b32-c4a7-4b9c-8fa3-e750f4185211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.114.8.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784012ce-d1e5-4c6e-bf13-6041b546c792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.174.42.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c28507-2581-4e34-b6fb-0cb085793e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.191.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282aed6e-ce6e-4f81-9715-8cca927b8866", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.56.124.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebfd19a-bbed-4312-85e9-a6c630e4b99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.46.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273d67c7-01a7-4e51-a220-f565a1f4d892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.74.35.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fcebf2-043e-4af3-9879-5ba61884b789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.253.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50589d36-05ea-4b1d-9433-4c23a14cc4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bcff59-bee5-4e8e-9e20-e1f1e0194165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.221.162.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa19c220-eed1-48cb-9e91-ae9eb0d03832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c333294b-c2e7-4f78-b49c-ee8e5ae4599d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.96.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e81555-033c-4df4-ac35-50cdb37a0641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432a354f-ddbd-4a84-b1d8-6d0319f59eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c92ee02-12d8-43fd-9181-897bc2b5e298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cc79e1-4b4e-4496-b283-8a1335ef4c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbbe893-4b29-42ed-9ffa-394493f81139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0df32c-5c06-419d-b982-2434044170aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052fa5d4-71eb-4f4f-a666-e09f84b3d0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2946d6e-2d35-4594-8a4a-2a9b87ff49b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a750d161-4eef-46e5-a1cd-2ca7b18b748c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53941b92-3622-44d8-9e0a-f9f893fc1bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d6e919-f556-412c-af66-09b5e50ca19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ebad54-7c01-4038-b8a8-db2b44a92dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645e4f3b-3e96-4a9b-b8de-ddd81f1214d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28706096-3bf5-4c1d-8dec-66682dcc6500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172c3c22-13f9-4de4-9b3f-028586af4ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4da1c11-f409-446d-ab5e-af3720b40e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed073d6-322e-4a6c-bfe8-ffd07d9419e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14a24cf-294c-48cb-bb1e-4a6f95707c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00812255-94f8-4d86-b228-5ded6cc9bf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef39b43-51d3-4d1c-92ff-570f2b3fb481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0625449-4fd7-44de-aa2c-ceb3013da176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c120660d-1ad1-4129-af4b-1f88d2d065ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5618b9c7-6daf-4171-b75e-8fb32b9b9719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b87a95-8fad-4560-8944-78840dae3a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0d13da-cb7d-4d67-9fe9-370674e64eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae398b02-790c-4252-a23c-09c7a5e10acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffc9cad-4015-4a60-a6c2-a7e0eb42ea67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cfdb61-5dfb-425b-81a8-0394780cc263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afdb64d-bd45-42a8-b168-166e865d2524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.142.110.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bdfd4b-3e46-46d6-816d-6552c2114fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b1de24-f7b5-46a9-be4e-00d9eb51ac1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4ad9ff-1f71-4842-b41b-c94a1ef720fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d2242d-9837-4e03-a9e4-e51f1ff273e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.69.66.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22433a15-1236-46dd-a342-22f185fd57d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eef3bb3-119f-4a3c-8d60-ad49ee39625a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8800f179-26cd-481c-bee1-d64c430304c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642f9978-0559-4724-8c79-64edc6571033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bb5836-3bb7-4fd1-86e5-4713553a594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46ad4a4-ea17-44a1-aa70-a6fbcd10bc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8280757e-c4b1-4632-864f-9036c21b568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248777f8-7290-4827-bb77-0526a761b031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc76e22-f985-4d2f-97fa-723ea84e3c44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6db7c3-aa09-410c-a178-59c39f4bedec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875103b0-9d41-4148-960c-2ee71ebc6c2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1690704d-47c0-4e21-91a8-878c2877cc72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a5e45d-d6d1-4cfe-b1c6-52aebf5fed14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816fe8e1-e708-44b5-a7da-852f0952921c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0717a58-b2cb-40ad-b496-e11fefeeab9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596f93cd-cb34-45e4-8d70-e1e4e7bc46b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564d8c3c-63a9-4ab4-9068-e0977ef35218", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72cd069-f4b2-41c7-b5a0-d5c86733c141", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012a6e4f-2845-4c58-98e5-f7f29813ccb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77beb1c-519d-47a8-9bb0-b463263a47d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b45d52c-cdab-47b9-971f-4c5ae19fd032", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f8602d-9ec9-415e-95e9-500f007d8f87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4669d8-c709-4caf-84e6-55f7e75e813e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f0e63c-d181-4eab-8650-b5404bad07dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d293f290-9139-494e-a403-3e79758327a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7de127-700b-47a1-aef3-d1d7839ecf28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a25434e-bebd-4fa9-8da1-1422ca3a0f9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d66349e-32b2-4b45-a4fe-3ce143f5a08e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4b13ef-a390-4494-a398-82687443e6cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c246a8f-9cb8-4e35-9f81-240270b1322e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b983fa-61e7-4d12-8471-557683fd32dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff51d0-7472-4efa-95ff-e052f30358c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8929f9-6145-4e1d-a234-b76313d0bc25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97373565-4534-40ab-a85e-0e28d421e296", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b26c85-d20e-49d2-875f-222e1bb6ef3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ff482-cef3-4e15-bfa6-ccdd25191c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5677e2f-cb5a-4d03-8718-08f62e5752ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.248.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354c10af-6287-4c99-bb12-ec463e1bf6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.110.4.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea87c58e-ba91-45e3-a188-86faef44b9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.198.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af85349-9e6b-4495-a26e-fe6321d25c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.130.140.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f12596-a91b-45ca-9968-4f99e1a4b0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.139.220.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654dee13-b07e-4fcb-b7a7-a5d599feb443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.158.186.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4477df3f-3bdc-469c-a0b3-66408a046d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.158.228.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb02b7b-e631-4def-b364-a443e65f7037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.182.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fde95d-d051-42c6-bb21-0209dc731def", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.250.42.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f06c917-afef-4af1-9d8d-72d588a901e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.64.172.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ce7836-f810-4cb7-a470-39e0dc2938ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.105.48.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400dfded-f5fb-4a0a-9dc2-a89b2e38fad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.113.152.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713696c7-3600-4585-89f9-7ed9976f1721", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.142.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38daa311-f530-465a-a0e9-d8064c33586a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.90.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c71c6c-91f1-4e71-b614-e95491846538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.81.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb68c3b-7d46-4164-a4d7-8512ef704933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49610720-67de-4b93-8bc2-53101bd29cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.40.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5136f967-8662-44e3-8bb4-13178e66faa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.243.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0271f3-c682-4ba8-8d87-f52d8d47e2f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.45.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920190c0-8a9f-4a96-a472-2fcfb177ff03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.191.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd1cf4-40e3-444a-8149-c17af3d2741e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.182.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e749fa2-d19f-499a-af7c-6833e479914a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee1e1ff-ba01-4422-8eba-eb4be8a885b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.110.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347ee796-c946-4d94-9518-c9d5d4957a1c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.139.215.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066e47ad-e1fd-4338-8ec9-6c300eb37374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.152.72.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b669eb2-1903-42c0-b4b9-c14fcba9ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4ef0b1-3942-4d47-b73b-36138635f8f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.58.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a95d47-cc46-4cac-97ce-88b2db583d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.150.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e5db21-4676-4619-9d6a-c9c015eea321", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db6fcbc-6323-4ee0-8828-b7867278f1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.20.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24a5d43-ce4a-436c-97e7-52edc55999b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.208.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d370a767-876b-422b-aa8d-6f97b16a318f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.53.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e26afc-9c34-4dcf-808b-4f9a9a03e6c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.152.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fadda8-85e1-4af2-aa8a-ff50279f1b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.3.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93de6b80-e928-4744-a243-e21a06cda627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.126.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32b087f-2051-406c-992b-53c1eaa1ee5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.174.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d2a466-708b-4776-b20f-f19606e9013c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.164.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcdaebe-b988-444f-9b0b-d2a3c4515f69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec782c5-8a37-4266-a58e-9bacdd28aa23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.232.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a422da-ff8f-43f5-8fce-defd77f94900", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eb75ba-dbdd-4ad3-8b4a-b09518e1da7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e55e89-817f-42a6-bd6b-4ab421302b81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.69.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2e7766-9162-40ce-b8fb-d5d02fd27a95", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970397a6-8567-477a-959a-2d5f36c4c2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.40.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182fad3-3241-433e-b43b-242232548940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.82.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f273a83-95c8-4bba-80bd-5a29032f4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.161.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ecf18b-7860-450a-8c01-5faca75de8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.13.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4457ac-0f94-4dfb-8c5e-8da72aa2ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.55.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9f9ce7-2e56-456e-b4d3-995345d42c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.45.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346018c4-bbe6-4212-8e48-9ff00ab1aa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08b8b92-c38e-4af7-bd8d-2fc65526b803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.233.21.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bae0a8-c31a-45c7-b2ce-24c2b0701635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.165.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4839ea60-d6b5-4ac4-9069-a324dab8c63b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.175.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242511dd-3966-4fbe-aef2-9b751ffd2784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.132.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df92b20-d918-4c0e-95ca-0ac11ce38b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.33.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4120fb3c-b539-4fc9-93b4-1e11196fefcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.125.47.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1161cc-a457-4448-8630-42fcec100910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.239.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4154db22-67e0-4187-b4b7-bd3e24e3fc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83926b7-175c-4a5a-aae3-f7c0e47f4c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a84856-8337-4bef-9105-b1ff0f5f00f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d716840b-b879-4123-8b4d-c2416f8ed699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059f415-ffd3-4225-b809-03a02d265942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.26.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc4e639-7f15-4cd7-9e6f-e3c024348051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.122.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf909049-eb29-4074-b0b2-b6744fbeaf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.211.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eac215-fdc9-4f95-bfce-3f31d7275ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee0963f-cc7a-4f69-92f7-794ed4f0fb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce5716a-29f9-4f35-b952-912d2575ee9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1e91cd-95e5-4d5b-98ca-2c53dd02a392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d193d45-5bdb-4a31-ae4c-f91db6b7c78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf974c7-c4e6-47bf-99f8-2a3e899ba428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527c73da-b03d-4a47-a045-5d8508886115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ed7651-fccc-475f-94ad-b6e6999b120e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113eab9b-9a49-4c85-a574-edb6dddea90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02c25fe-cc01-49bb-b649-331e0737d003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c427e5-5b69-47fd-a010-30e057b6c816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5ce87a-da75-4ed7-9be2-4a96f9a3e439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c927c6-77b9-41e8-8c30-3b8d7f8c069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20a7a35-2a31-4111-925a-eb12553c52f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642faee5-31be-49f2-b520-6f26b51df7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c65e392-3e66-49ed-9511-f1caf124184c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898e01d9-f718-423b-9539-5b3fb536e577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9ebc9-72e1-43d9-afa0-12ca1a81e38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc271657-cca3-4b0d-a40a-aa04695ce36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d83e55-c7fc-41d4-9d74-2149a1565b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1f2c1c-e460-4018-93a2-9efea05f414b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb891fe1-15a7-401e-8129-67c9bc7e7692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209a1a54-3d75-4015-9217-45f8ee2dca50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4b9139-df60-4442-8ae6-77b0380d3550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892ebee4-12a0-444f-900e-0f968ba39313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c988d890-05f1-49a4-8edf-7dc0e2364448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e3763a-5cd4-4d03-999f-b8f53f7abe01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364a1218-32db-41b7-9f78-db77338fc3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f685d797-c128-4b8b-a3c5-88c5c17617e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470e7e1e-e6a1-41d9-b76d-4fd06879e57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e080d7-78a0-4475-9da7-5f0454dd93ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07870c67-a4b5-4cc6-bf98-0951dc5fe77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7791d6b-2b96-4bf4-9ab6-38b870324cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316af215-b647-4e7f-a3ce-55994940d16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3ea915-01d5-43b0-83b9-65a5d840e388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cc0e99-e1a3-4235-8f20-0a2377591e00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6fb7e1-a48a-4c65-8bee-07e08898235c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dcddeb-fd2d-4ef8-8530-abb4a3a03163", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54426c69-62f0-4824-bda8-9fbcc0c2cb04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02de2f07-47bf-443c-9188-d19eba2f073c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6307f297-3285-4238-b9c0-44ccd0e712f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d0561d-5fe1-4aeb-bce2-85ed0380a64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7309283f-5893-463f-bc42-8f88bd4ad4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7e4619-a7d6-4b86-a49f-b798c2da3be3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ffd8e2-d87a-4bc0-808f-1d680b719ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa5c216-cca3-4781-b9b0-69d241d18f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77e8d79-cf4f-4480-a27c-65ade845d3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6130c8-3935-4012-97cf-3671dc7fdbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe76101-e4b0-4ada-8b60-a374d3436151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0659b723-2025-4485-9255-121020d749ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc18227-a4df-421a-b96e-b8523221674d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b294437a-2f1d-492a-83a5-6850c9df57d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33211076-7f47-4873-ade7-ee4f57c01d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49eff5d-a548-40cc-840f-62c17505850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc70cd-32d0-4cfc-9b34-5f83d19de3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90af921-b47f-4ed2-a328-94aa53d489df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0bc9ed-9c08-4ea0-a1dd-37dec6112b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d2296e-80b1-4dc5-82a0-d071765081ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88a8768-8918-4e27-869a-b2410f02ff8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022344e-3588-491e-b181-9be6eb5b0628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406fd5db-1e57-4a07-85e8-9ae4766de291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1988d9-60f3-41d9-9ad3-491b84333330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afeb4163-93a4-4f0e-8662-ee26c6c835f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6540c0-6422-4e1d-b365-bfacd6e85503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04db1e5c-18ae-47de-ac4f-99b122fe3e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2bee23-4a4b-41a5-818e-19dc90ffdd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bd4960-fa76-469a-b974-e8ca2418d6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2343f5da-1929-4b2b-843c-b15fa140e48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88331dc8-4ef2-4f99-b2e6-17d45caf5288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02936802-62a1-4956-b5f2-5721855ec7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9939364b-33e0-4839-a32a-72b730c60021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b445b7-52a9-4cc0-b446-79a5e16bee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8834807-8769-4ff4-a8f3-d7c6be7018cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb83803-aa9e-4fef-ab1e-75ff021cf5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680ff834-35a2-4180-8aa9-6c55532fa4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a59770-deb4-4d7e-9757-70bc994208f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1379fc2-703e-45ab-9316-cb9ad8ffc496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddd2144-a25e-4b8c-ad59-b818ad2bc91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ca3628-70b9-4a93-b385-12e7c653cd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543dceff-a161-4985-bcf7-8b8b980ff256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.80.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfb197d-0cb3-4d81-84d6-3fdc7e837aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.148.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964c48e8-61b8-425b-b507-0d803a357b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.168.76.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec1f461-74ce-4709-80f2-a9345eab89c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.177.11.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ff00a3-bb49-4310-bfc4-f28555f8eb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.178.74.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e32cbc1-8781-460f-86fe-c5642d3b19a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.134.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49f5a0c-84a4-4f91-ac55-22d7a0f8c74d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.122.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a08650a-cd10-458e-8c13-66b89ba191c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.82.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13056d22-5359-4ff3-9475-ca050fad469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.67.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f8a52e-c176-47cd-8c03-b140deec32b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.191.216.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba2ec90-6de5-4efa-925b-a62c9d6072e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d547d9d2-1cee-4809-8085-12a8d6172f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da63fbc2-fdf4-48f6-ac75-c42600b51eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfaff59-92c5-4062-ac09-b5b92dfba469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db57efae-8b6a-4695-9484-4a159225182c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dff7cf9-8cbd-4dd3-8cdf-8029e25e7a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e40c34-2676-4808-86ea-c4599752ca9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b8e940-c8a5-4130-bd27-e9012488dfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28edebde-b759-468e-ab3b-1b549a1b0367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45481b6-7b2a-4416-9b3d-73bafe7f28d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.236.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc981160-6057-43c1-9059-e5b3111baab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80e5d2b-d9a6-4dbb-b048-abef4adc21cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638bfbb3-7e13-4a3e-b787-71652614aa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e9c2b6-f34f-4ad8-a2dd-d2da664fdcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debebed2-9146-426b-af7f-3208f1c37c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26ccd5a-07c9-4712-bd34-8640c05c8e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e076977b-9d0a-409d-bca7-a6a61765fa09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371e23e6-d91d-4f22-a4c7-391f673451be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0367ab1-39db-4148-97eb-414398211f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cd5f74-ffb3-4ef1-bd3d-64ad1986c950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a8f98a-fa18-4430-9c91-5a783106d811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbefea3-00ec-4a0f-8a20-8a648cd63f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.34.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6d2690-e0d9-4d03-8a48-5c9937d60645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.96.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f245dcf-01bd-4218-8b60-b44ac2dc8340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.61.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9c9330-0c8f-4dca-9418-2459eff0398f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bf5980-8485-4358-85e3-2bb8b20a2f54", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.39.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9acdd5-4588-4cb9-a0db-0a8041342d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3988a99f-a0aa-4657-8ca8-4b3767eb579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8823e11-65db-4f1f-8208-7b14467127e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.250.157.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d59a84d-3ad8-4188-88da-d79450ab27a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6a1c2b-bfdf-46ae-8f2d-6af578044f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5902da9d-da71-484b-8094-04e42ed99cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d44bc1f-0801-4946-975b-10dab34215c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceaedaa-0cce-4073-ab58-305fb08f532e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e0c77b-9df2-429a-93ed-725c57a81eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba9387e-9d65-4789-aa3d-c1234755eed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a459c3-1764-46e8-b552-b049be1aa5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74988970-fa2c-4d96-99a2-c92b3653023a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f946d0-43a5-4e3f-874f-a99a77d3efdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.114.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f40445-f956-470a-bf03-46f4aa05d033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d49738-9aea-4aa9-a646-04a63a88a498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea8821a-c73e-4d8f-ac99-06c9d2b504dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.13.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3de33a-bf83-4dc8-8673-31bafd2c9f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbefb3a7-fbe5-44bf-9c81-4a905ae95429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.15.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630a8104-5973-4c6f-976a-dccd2cbd3be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.15.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade5d9ab-2ff3-46c1-b7ee-75a59d3a4d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fba5c6-d602-4d2a-abfd-8852f13ea03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cd4663-39a0-4a3b-970b-439e35f9daea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e702dc-d579-40dc-b464-34dc7e559444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485abeeb-71c8-4802-ae39-ee51caba81f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd6117a-a620-4ca5-b658-0b7ba077bcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1308d77c-835c-41d7-be76-c77329d216d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec919827-0929-4eeb-ac05-ee5ae32d27eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a27533d-7380-4287-bf82-9ce4ab23bf62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9c06ed-fc82-408b-b78a-bc0970ce853d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525f5fe0-b4ab-42cc-a0a2-fd3e0016ee13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dabb501-a058-4363-8e04-9d5331b19b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e98b17-f4e0-4cbb-9513-92ae948a3b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbab6bdc-a62c-4a8b-8cfa-6f249ebba32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781036d9-3481-48f0-958d-380f121ba91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3bfc75-d157-4def-801f-6ede5b43e4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281930a3-585a-424a-80ae-341df7e45c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e441592-d9dc-459e-8cf2-cb52446b15e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eeec4a8-56a2-4ba1-8628-74bf84f0205e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df63f9e8-87da-4a57-93d6-f9617e72b4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66441a8e-9785-4ba7-a3c6-9a4de5d08ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eea1f27-38b4-4d9b-980b-6dffb1667950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696deeae-f72b-4f83-98a3-7f91a5623ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.151.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2470361b-96af-497d-8c70-477347c7cbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.152.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3010be5f-97f0-490a-8849-4a646f413904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.40.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dadc468-ce8e-4eb4-add1-a562802c1942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.62.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a5b0d0-9fd7-4ad5-b865-03f2f181d377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1348eca2-e047-4327-b406-6edc395e3360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.124.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8898e4-1cf6-476f-81eb-480ec8125c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f7d80e-a072-4fc1-94d1-83fe68884534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de41481f-8803-4401-8d5f-d32cb3f27f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59260879-66b8-40d5-84b7-7476ecb97bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a95ea2-1ec5-43b5-99ec-bddac45701d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44e98c1-1b45-4a07-81e8-49535b9873da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.60.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ae847e-58a3-400e-b132-24367dc7b502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.67.221.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dc292f-5fc0-411f-a4c1-65e1a2501785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.244.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806d20dc-490f-4389-abd2-19db83ed60ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.3.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1f89bb-6c37-4ec5-a37b-b38ecf3f5307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.59.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9145f193-11c0-4a77-907a-5075ca86dc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.59.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cf3096-9668-4d1d-aa85-25bcf0fcf8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.59.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8fd91e-a35e-425a-99b5-2555f774a9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bda3ae4-43c9-41b7-b0fb-5a5eb99ed5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828e946c-5314-4dff-9b58-51d9ca80e825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1699f48a-1232-4916-bd20-7926856e2cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db657c2c-9823-49ee-a7a3-9fcbb7adbf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4277a5b5-11f8-4cf3-841f-75d0b11f1574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a68c4c-0d02-4537-870c-c0211035c501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3ab8a0-aa12-49f8-9072-1ec0d04ff270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00dec67-f8f0-463c-91f8-5e0f93515abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845d9972-069a-4e4e-9993-7469c116af5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfcf328-f014-4666-9e93-0682b1557c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bfeac0-1381-4dc6-aa2c-b479e0416623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41f361d-9ffd-4373-988f-c8fd3426b128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f3e27f-36ae-4e1a-90a6-9ccb1fe5362b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d52780-1835-4e87-b541-d103421bed09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.172.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336fa1a3-7d8f-496a-b9c7-3745d586c8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4460c1c4-e1f1-46f8-889e-6b599839fb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436d04eb-0c2d-484d-a62e-2a7875c1b110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e09e7b-7ef6-4405-a625-55a334148f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c918ac-9295-4805-add0-490a4df02512", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47616e7-67d6-437a-aae7-238f14fe185d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0a8ae5-18fc-4e31-a09d-0fbb23a297bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8bb5a1-7e13-4108-b2f9-443719dddccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04d34ee-e1bb-4c91-988d-dabe4210e31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a495f724-38dc-4bc0-873f-62cece6e1a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d12627-7625-4417-a56a-a9b6279152de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.227.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2c6ef4-041f-45e0-9a9c-6684d5983cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe34646-99cb-43f1-b563-3d7827cf54bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88d00b8-bb53-4306-8f95-b8db17944907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.7.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf29650-e291-4f68-944a-f497df3daa97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1325a6-0ce4-4cb7-a022-a7df4272792f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6746a76-0df2-48d3-b1a8-954963103b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d149012-4c50-4ba6-b1a5-0c931f7a4743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.17.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e67b02-a2c0-4172-83f4-8e09ea870de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.224.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96507405-8f5a-4b20-86cd-a937dd14be8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897a1e5e-348d-4ebb-a989-d3d0290199dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01fa3ed-0c95-468c-a3ff-1b3a58db92ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a975331-efe4-4551-8d63-17a4e8e22e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3e4abd-02cd-481b-8bfc-9ffc5fd46b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85379207-adc6-4a32-b5dd-cf9764fb125d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db90c90-6df5-4ad6-be17-0f288147fda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a254bc84-acd0-4493-9d8f-e0066a0ccd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390c2b17-ef6a-4147-9694-ae14348bf740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ff7a02-aea1-47b1-8b90-b1ddf236fe95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d684c147-6feb-4c8d-a3d9-b0b573d1fedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42e51a8-eec0-4cb1-ad7e-6a4d259b3668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a9df30-e42b-4c0e-a64e-f550501f360e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9022ea0-266b-4bd2-848e-2182b82ce271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865c59a7-0c10-4a71-896a-da7aaeb3c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7fb291-599b-414b-aef1-86041a590ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb8e4f9-ebb8-47c9-b57e-c4a5fb6baa2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b52d38-c2d5-4f86-9cc5-8b607df5f620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101d43c8-b5ea-40af-942c-c96a1e05a5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1e21a3-4f9c-4ed7-8b02-5594b9f83acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf426b5b-c9dc-4d47-8fc2-761cff91e952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada3bf3e-82d1-4361-86e3-54ae4e4f7833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5683a97e-ea92-4ee5-890b-6e73b2477f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41f7b03-2c28-4e1c-a2b3-3183760c9e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816abd7a-91a0-4d0a-a6b8-b4df83c8ac7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48696b95-bb1e-44f8-b6d8-b6adbe30c1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cf1fd2-a4ff-4d9a-91cf-3fb5b58add3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8650d103-12bc-48d9-b970-feee0a1198d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589cc7ad-2257-4fa4-bffd-3770232debcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff59eb7d-973b-4377-9c0a-605e98ac9432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f851c643-41af-40d2-8d17-0c3eaf84ccb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768834bc-4a60-47a0-871a-97ab4aea4bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.105.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da85b7ab-03b1-4b6b-9b7f-a3fa84bb4bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29389947-0444-4372-81eb-3861e15381cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160f2fa-3f9e-4a20-a5c6-45cdd279044a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362ca0c1-8d9f-4863-9e14-1e259b71213b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50525050-348e-4431-9f02-18e4557c3306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.107.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18131076-125d-4671-8c46-ba525e19bd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.169.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951b23df-dea8-4641-801d-58fbc8bb60c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.254.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa5cb6d-83f2-441c-b734-8e91bb526616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.78.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aba42f4-6b9f-43d5-8e7c-d262b64c0f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.81.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d97e73d-ff46-4ff6-89c2-1be8bcb57585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.95.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2057b2-0b98-471e-a063-c9bc2e27badf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd275036-9623-4c28-b4e7-11f6ab662e20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.161.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e459b54-3c2e-494c-b5af-c70151b42443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.107.215.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391c70b8-fe92-4e11-9698-fd9a4b2c4f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef7aa47-13cd-4c6b-806c-341089aa6e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c880e8-433b-4005-b3c2-66bde1133a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1182e479-6390-4e0e-99e5-2f4c69d1baf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.129.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07fc6c7-d771-4846-9df5-34eeac0150c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.165.56.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ed0896-a559-4261-80f7-d489026c6732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.18.204.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a39297-6ee4-4c82-a0b3-77c3f72a016c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3e6e1a-1f2f-4805-aa8e-7b6e26179573", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.217.81.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe773def-250e-4a8d-882d-a751d087a614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.203.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6dbfac-9f22-4c48-aed8-93b8f4ea74d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.23.108.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed507ae-a4d2-42e3-a5bb-78a4b199dfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.63.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd2f8e5-4e8c-4284-bd15-c9351510c8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.239.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4984c9-5cf4-4729-a6f4-68fc82ba7c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.31.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840b160f-fe77-419c-9aa6-1fe650218e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.75.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b38c8dc-92b3-4891-936b-a6589a2d34ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.111.183.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51656304-0b0e-4e85-9ea6-c47ba5c97dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.117.20.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60fbd81-d492-418e-800f-93c2670a7a24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c542750b-1b83-4571-8eb2-aecfc2f3aa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.181.223.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ca3559-8d2f-4301-a09e-ac9796695379", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.185.144.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e005866-72da-4a08-9112-7f21a669d58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.157.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d5f725-cfaa-4cb4-bb9d-11fe855152ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.169.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae27f0c-1129-49b4-a16a-0345e71cd4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.183.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fc7cc4-79b4-4864-ae59-41e964483dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.192.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c159eb91-1839-43b2-8160-279d9ccf3582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06ea08e-451c-49fd-a20c-ee1afe71b9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e18107-99bc-40ca-92be-cb02cf2d4f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.203.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116a0d78-ab73-4018-8c14-3c707dc4fe31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf841e3a-197e-44e6-8e6b-89491bca2113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.194.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4225174a-2673-4db7-9512-cb6afcc300e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.210.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c23f34-664e-4a2a-901a-632ad7a7d168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.212.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20ba45b-78dc-4cde-9d65-ef0112a13132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.215.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b79683-6bc3-4e9a-8861-874971d006b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.216.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f41fab-afaa-4b11-85c8-ab4def0325b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.216.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb623a0-25a3-497e-b707-525c3a6bfe88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.217.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645d7957-f688-4ff1-9a7e-974545d77bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.217.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab872cc8-ae00-4d87-9c3d-a393935309db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.217.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8823301-21f6-4d82-9d3a-f599ac74ae6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.217.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bcd4c6-a4e4-49f0-8ae7-893392cc4228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.218.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa8593f-8b8c-4d24-8b50-2d4440082133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.219.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4963bfe8-6cb3-4c1f-ae9d-7904b6366bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.221.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a04f751-842c-4315-a7f7-a3f76239d248", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.191.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f98b19-327a-498d-ab36-bcbe102ecd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.238.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73143d62-7c01-4ebb-b3ec-f4b2ea80c39f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.250.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42181ab-2b7d-4213-b98a-0e6cb7e85cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.50.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef65e71-ac1e-4e9f-abcd-aa971c7851b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.91.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ca6563-aa90-44fa-a4e1-1b302e171467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c6ae9f-e4c2-42d8-bcc4-77b7300d83af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dcf1aa-8b61-4781-b963-0e491b52ea12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3f11b6-6127-4f46-a38e-f020048cf0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bd793a-6b7e-43b8-9b2c-314430af0c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959ac270-c005-410a-a645-9aaad01dcd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328e86c2-e91a-48b1-ad62-999de97346e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9b9c7e-ec38-4700-a57c-2ea867b8edeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec7f62f-86b1-4913-855a-8d12a640344b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d426995-e34d-4030-a682-33916248ab52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4706e95a-3803-4873-ad78-3ccd94f9c0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c92e2be-e144-4768-9cd0-08d40e73b61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d532311d-7af7-4288-babe-dcb9928f94ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d1d41e-9a60-4fcb-a3b5-a434bf05bb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16217a3-4cc3-48e9-92e7-9a51eb4afe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e243e6d-8bb6-4677-b91e-43b141fcd5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e373d71-e62c-454a-9d5d-f4ce2a43dd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4922f3-116e-4081-a934-3c1ea2693358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad48af14-5201-45b2-bb21-4e49d8f154ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a31aeb-331a-452c-9f11-ae8d30f79cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815e5965-2d0d-4d35-a9cc-c4c63ba421d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76304cf7-b8a6-4346-a160-aba4bce72ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16aa947-fe81-4f0c-908d-05c24625a66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d531b4ff-508f-4536-bb1c-806e4c5338cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38124e24-8818-4569-b1a0-6c56833d80bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bfdf6a-dd4b-419d-a462-704ff276e344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9a4859-5646-482f-8b44-557c656e36b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d810f917-7203-4a76-a645-3d082d650236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49175393-7de1-4681-959d-da666ab5f28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5681faa-bcee-4b40-bcb3-f6ac6b3c2e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e95bc5-b38d-46bc-9d66-eb0a516505b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37eb1a7d-b539-4548-8d51-3f6df16de80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9790d912-e7cb-4560-b71e-86f7f5bdc49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e66c1f2-9691-4722-9bdd-f2dcce084636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afca3589-83fd-4b2e-8693-03724b8c4d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d2adf3-e8ab-4416-95ee-8f1c54a9274e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1160bcab-98fc-40d5-8369-1d9c56c33179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.63.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df81a814-d5dd-409b-9913-d91340f9caeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.82.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d57122d-8522-43e3-bb2c-ba8d1c9bab6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.10.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d92f51-6d8e-4335-864b-24cc59bcc57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830be855-acd0-4846-9057-a63060d8bc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdbf29c-bbc8-4d2f-9506-62d7c826e238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.116.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfaeb8e-6676-440d-bcec-0cf1b36ba3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e7896e-74b9-4f03-aea7-8627027a6fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1213c89a-723c-4cac-8f0d-b75a76d46c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e54ec8-0575-4f9e-bb63-88862905a3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1c9c33-5818-4dc3-a1ce-a96c37f5f283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d56aea1-7cf8-4522-8425-69408194deb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a9d53e-8ea2-4349-ac96-134a526db30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43351e43-07e8-4801-92c1-d282f3d93c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ee2ec9-00fd-4373-b296-16a67a699b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87d6676-895a-4109-b259-e80bebf0b1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c125879-5404-4f13-935e-f13dd352515c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c707ddc-ee4b-4982-b80d-c4b14cc8fc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7e7ed1-1493-4177-a247-01ffdf3a340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac0efd5-f93d-47ac-901f-5d5d9a9ce244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781ca297-6ded-4526-a040-1119de6db83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f03340-f093-4990-97cf-7faa8923e0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a069112-9807-4fb4-8d0d-fa6330dfa2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a198b02-23ef-438d-a8a6-ea37385e8e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19fab5e-8d1e-4423-9748-76160b98f495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6ac0df-67d6-4a03-8650-a774fa5c1866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e255b-5915-4617-b4bc-c124599a2f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20d62ff-9a9b-436b-af2c-2ca7e6cfdb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf3444a-3cd5-4438-b7ea-7bb7dfc90bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c819b841-6395-4c8b-bd9b-76e2f2050569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcce3e6-9e1a-443c-a22f-1c324e02594a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a98142-a652-4273-b6dd-02a0e94ef564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4717bb90-8e90-4773-bb3f-6320620dca44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b66dad2-0500-4849-bf9f-c3d97225c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d6237e-6684-4080-81f8-f772801608da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ed0282-caf0-48b4-b65a-99d613bfda1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0b471e-a929-4ee2-9885-4fe3373df0ee", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bac26d0-62d6-4be5-b54b-158375ad4c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423adee-8229-4540-b032-f0dcc8d376d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906cd8ca-7a07-49bb-a94d-454ea2ee6dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ea27c-b569-4ea7-b5d3-e2be42a096a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef628f89-8dfd-44eb-a887-1384aee74678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aeb74bd-d7c4-40e9-9497-b0661e0e719c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2997c0ec-4cd2-4353-ba17-e9cfca690987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f1cadc-b66e-4353-92a5-f1b408d04303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.255']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1568df3-1943-4b89-9c2c-72b24c802281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38c8c43-b91b-452d-952b-f7f29d3f35fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab30699-07e7-4616-ac40-e488a9b1236b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faecfbda-3f96-44b6-8fe3-4038e10cc74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32101de4-b063-4560-ad81-b7310b3d9131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b059715-d5c0-40ab-98de-c43f8e2e2703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064c8372-b715-4eef-a37c-79d730103d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d80f90-66b4-448d-a19c-a0c39c127bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3b66a1-8942-4818-bc5f-97c13fac2113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884c060a-d212-47a1-b20e-3721d7aa8758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbafcbc9-e223-4f2b-bcae-6c3fb442b390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3e0d81-4bdd-420e-bef9-59144cc4fde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b493fe69-7744-4dcb-ac8a-e0c85320a5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3429008c-7793-4aab-9af1-9dc9846d3c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cedeb4-f5e8-4bf3-a740-ba1f659b8706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0ba36c-eedb-46cf-9ea9-95c08baad03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e136cdf-8067-4cf4-94c2-1036e8bc4f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1a4bc2-7ed3-4ee0-b753-e4c77a1611d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5548d3e5-bc08-42ac-9712-b28abb306521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483d26d7-d9b1-4086-b598-3efef758c978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fc52e2-3ee7-496a-896d-250b010c5275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.173.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747b5c24-ddd3-4672-9c06-256c6ede34d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812f7b51-a1eb-4214-97c7-0dd57108bce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75315228-6203-4df9-8510-997b38e42fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548c4b56-93d1-41db-849a-3a55c57002f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.189.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb0e4cf-9a5e-49dd-92c9-0855ffff5723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bf9761-482d-4bbe-a30e-ec3a74d42ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6742d552-74c2-4e9c-a965-a06362a578e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1758617a-20d6-4668-b8e5-4819b43cfbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd00ba-2925-4fdb-bb39-8c2f55ddd0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef0ac33-eb9f-4f96-a55f-6db20786a5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4be3fed-5b48-461d-9420-33506a0fe835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99e8792-d191-4159-a0af-2728a6104129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4163a40-ece8-426a-9646-1aaa38aa9595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.245.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d02c3f-783a-445e-b85c-779b078b1cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc125750-176d-463d-816d-394f6c7715d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd02e9e1-ad14-4877-9aaf-204104309dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2431ccf2-7fb2-4527-af48-dfd0489cadb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8974def0-f178-4e2b-8bb9-0920c12d6710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f6205-614d-4836-8ebf-9f1db4c3a8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82de5544-1523-469e-aa7c-c21e72a23844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b41740-1f40-48cf-9eb7-c08bbdf27f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702a519c-93bb-4a81-be31-ac401ae276ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd91b8b-a2a7-468f-92c0-e772c1c77358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf25e0a-d099-495f-a414-a2dbcbb583a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7b59b3-ac14-43e7-99fb-e9eb0ad8198c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25d7820-5938-4adc-af90-5d6d7088ff95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920089de-e816-4a45-8af5-8dedf79decaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94be82e-de81-4bcd-bfd8-27ce4427285d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96fe559-90d3-402e-8123-c40d776668fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3145125f-7ea2-4a66-a641-918ca2bd60a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b288bac3-27c2-47bb-acfa-b26e2808110a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.7.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0eaff3-900d-4cb3-9743-0f71444f1c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf15cc1-ec49-4ad7-803e-c74aca97caac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbff8acf-64cc-41b0-b449-78215953132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387bcfa6-d419-460a-bfa1-46f0d760ad4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4ac47f-f1a2-4759-9823-149895a2b7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbaf6c7-319a-44cd-8ced-4b496a53697a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb5b1e1-5a37-4a52-85d8-a94b43b506f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98b115f-f8fe-45cd-ab78-ce9527235bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a0b895-2664-4377-a097-2373f56d92ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.85.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101c5f57-094f-4d4e-8c86-af0c5d66d737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b05d41f-c343-4244-be3c-15a09b123719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fb5f46-bbc5-4899-b393-9124ee9dc01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c683f4-fd54-4ce1-a3e4-bd99109a4e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaa9ee7-85b9-4600-af65-2a7e110688de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebb45b2-460f-4048-bba7-b276153c096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1c0c52-f6c3-4f1f-930d-bdf60facfad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fe2be2-d71c-4d2c-9acf-49b94b81393c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52577670-7b7c-487f-809d-43ff3e688d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29656508-10d8-420c-a7a9-60076ae94af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f162d1-f164-48e6-a82d-f09fbab3f7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711908a7-d546-41ae-96ea-c92c91d4b947", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.53.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01e1994-e21e-47fb-88d0-701ed573d76e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.182.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886e99a5-2639-4c1d-8ee5-bd8dfc929eac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.49.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e69cab-f9dc-4a6b-a9ca-1ba297b5cce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adefcd84-cefc-4403-a639-dcbace5d0279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699f0c92-1afe-44cb-9d43-0cdfd18abcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.126.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dacc90-5845-4fc2-b6bc-cd966a4ce9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a05122-4939-4775-b549-539764823364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e02cec0-60e2-4eeb-ad73-5ac9b062599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6053c02a-98e2-4619-8e12-b45b20d423cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812c145b-1c60-4267-be5d-aaefa820be74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fb534e-86cc-46ed-8f0f-bf33e48afb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.142.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e960c63-b4da-42f3-a790-63432e299a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d5025b-224a-455f-b976-0f57131aaf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113421f1-171b-4643-ae9f-3b3288cff182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3834dc-c421-44e7-ac74-29267f674e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c9d092-5eeb-4f93-85d9-8511a2ff12c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ca47e2-4562-4a5d-9487-894591335865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057228e2-2a54-4d9c-8bb9-fd6a28d88390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999d5dd1-b15c-489b-be52-70e22b3955dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d296af-1f10-4b42-97df-3626c5ff09e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c340b0e-3be0-4f43-ad33-15303c39fefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c46d7d-b3e3-432d-b1ce-e87f52e64280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd3daee-4cd5-48ea-ae2c-eb292379a979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486ffa6a-9cc4-4e22-83f6-8c919b121d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d99a9e-1af2-441b-8008-13481dbc4b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cad2332-b36d-4fe4-8513-ada1da20e98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cceab2-9087-4e4f-9444-6999bdec5e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b91d71-33c2-4661-aaaf-b02769fa8caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278cefa8-72ea-44cf-ae2d-ae161ec6896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6faa693f-279d-4cdb-b4a5-25614c792dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e07d1d-95f4-493f-ad87-2e5a090f093d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f766dc2e-0504-4434-92f3-cc1894675c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.199.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bb6db6-640c-45a1-a587-bbe73438ba84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a1516f-74fd-4dbd-84a0-ac5187638f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db28409-6ecd-4ae8-adae-e43d7a3e3a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277943b-2e88-4bec-843d-3c8c1163f0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc100ec9-385a-4ad6-a24e-38eb36c4c830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b156fcd7-9ae2-467a-b25b-0cc909460a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5733ce0-ca80-4b84-ae24-3c504b3732d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a39416-958d-486a-952e-2cc00bbb3fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.24.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69ee83b-470e-497e-bc92-df1c50c7b263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfe081a-afb7-40d3-8323-0ade015ffdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4245962e-d585-4fb9-8d20-6da280de105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbde6d1-f2fc-48cc-9066-5c86bdbe40ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20aa199-876c-45f0-ad8f-0f3130fa8e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f113fe-9fd3-4aad-864f-f237da07d15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5659576-2f8c-4ef8-ac6b-c5795a904bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6143d7-1c4e-48f4-9328-5c6a67f508c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfca9a73-10f9-41fe-abab-dcc8ac4c495b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425258f-8b20-42eb-ac85-9aa39ff7482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38aaa24-e04f-42f8-8e73-027cbad6727b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75923da3-d751-49aa-87c3-44027d803fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff70fe3f-2c5f-4c6b-a054-92baab53eeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7712b489-8a0d-46e5-bcb4-ced6811c109b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d478239b-4e6a-427d-ba9b-54ab391ab1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379fc763-07d5-4d63-adba-712c5161a28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62a7b32-7b3e-4e4d-b30a-59d24497c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f582fda5-ac55-4841-bb15-ff5a735b8581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb8245d-efa2-4692-ac0f-4f010847497b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7614589b-fba6-46ab-b01b-0c746e7c5b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8802956f-6bcf-4ac6-b239-a8ed37d9938e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.76.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7950f6b3-fa5c-4b76-9a97-a1c5359f383c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327bbbc7-1db4-4d59-be1e-6a7da6f7ec53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.86.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0023ab-2707-42e0-b1cf-bf3ae4dbde88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6290f74-e903-40d2-84ab-34a17223629b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89ffcaf-9eb8-427a-a2e2-4aee0c846544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.27.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d3dd3-e640-428e-ad4b-49c3e3bfab26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.32.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5b7b68-5d59-44ad-b663-401bfafc6fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f0e258-27a8-4a5d-9c69-8145af8ef5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68420d2f-11e4-48cd-8868-d66a542b3f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebf56e9-2119-4807-b949-ae528f7a1b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5202edec-9507-488b-9a14-2ca214e2e4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8989096-fe07-4ce6-b81a-50fb7c665168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3042ea3b-349a-45e7-8dbc-5518749b1001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.226.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036f4a62-ee9b-4be3-b32d-58d260c5f654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f357da67-a816-49c7-b87a-bd21d58dfa8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146449b5-f606-4af1-b936-2cbd0089b62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c66ad4e-47b5-4130-ae88-3fa2162264ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959f1b7a-a45e-4387-9b95-ecfdeeb4b34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285ff520-209d-4a3f-b9df-368e4012fdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40635cc-c0e9-497b-b91b-0a4b12c687c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8521b960-5ce9-4b9c-a563-e38708f20796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8308b489-cec1-4771-9d08-38934650c78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fff70f-aaaa-428e-878e-881e1aa5f033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f4aa2f-83ca-48f0-b048-65c91a34ea95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a598f2d-a3a0-461c-b227-d956ca289f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37475d0-9f44-477a-9d17-b3267256041a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b27bb5-0e26-4ee7-bc6b-2b3f54f557c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4052dddd-2908-4708-b875-0f2ff18b2eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274d4ca3-b26e-4881-8436-663657d21277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f01f9e-ef9f-4461-b902-db57b9ed2072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a39d988-49f2-438c-8fa1-b706c4bb74ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62db2e0-4c56-49d9-971a-1bbc1d1bcf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f891755b-5dd8-4b3b-9c38-645bb1d0087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9cce96-a64d-42dd-a305-aa31a21f6f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19048d1e-935b-49f4-be24-882c02a05129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0db8857-5139-46b8-a91d-63ee2a4e1b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db6768b-1710-4a6c-afef-da3d8849301c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4241349c-8f77-4e3b-9d42-2540c8b74303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f49d73-9068-4d02-9a74-25ee42b0f4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4234f720-475c-4a3a-80a9-2a53a7886c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9e054f-58c5-4477-b3f6-d2605d3e5dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01949d9d-a214-43a3-85a1-fd4ec829a85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38dc817-ffb8-47f8-ac17-816332cf8326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cdf2e2-e8a2-453e-8333-9e28d30261b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03ec6bf-32d5-4235-93b5-5e7692b2de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c25aa70-8731-4651-855e-23f4e551d8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac8c711-d897-4ddd-ac48-3cc287ceb492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c99fd71-6324-4c6a-95fe-138d69104b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe770203-2a4d-4a3a-a06b-cde0a7d075d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67f902e-2b31-4f4f-bb36-64781a3fc582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5803eed-f098-4c1b-bb67-35761a472b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34042445-0f9e-4879-9932-d6d5a93d7d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26b7f87-9b4a-4f1f-93d0-d8eb2961cef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de9b2c5-8d1c-497e-9f86-8dff583cbb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8ab274-a1b9-4196-9c0d-6333b6a4c0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca18a7e7-07a5-42f1-b312-3513b446a41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed70c016-0624-4cb9-aa79-7b9880aeeebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14921c4b-66c3-4d22-a0c8-a42ff8254909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c432096-75da-4e51-9f9a-538d46a2fef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39807d1c-ced9-473c-9c0a-bb8a61e6b261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a027e5-a61b-4642-9743-a9e6581d859e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332e197f-61bd-4daf-8af4-a725dbca28a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd6e51f-6f4e-44d9-b564-9d7ef3635b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ffeee7-4501-4a4c-ba00-ae706efaf60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f70111-8782-49da-8ed1-b83140b19e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb846d2b-ddbc-4871-acea-6e13030e21a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8a89f3-aeb0-4c58-a0c5-bdb6d6d998ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21335e2b-3be9-4b34-9fa8-ad2cdf617f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.177.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b71ad24-40e2-4fcd-abaa-349f986382f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37c1ea2-b4a2-4638-8fde-2c10ea44ff70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b7b93b-8f3b-49a9-9068-2967d44b1d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.195.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da68edc-4869-4746-86bc-ee66f718a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556888eb-3d5b-4b9a-ade3-5014cfa94e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed16242-6627-4d74-9a5c-bad68f0f0250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb85e63-aac1-424a-80e8-45a92e709760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d892e-c554-4ec9-8b90-4c3f2e29d8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca923269-b586-447f-a307-d6dadbfd7af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7039c348-b88d-4c32-bff7-fc5544e5f23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2f9c9d-c2e2-4ffb-a34e-969595b85a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3eae537-7b15-4f45-a2be-55b497eccc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd79d4a-0b45-47ce-8e0f-1041904b257b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344598ed-de09-41d9-b043-5b8666c05f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623d2384-00f0-405d-aae4-4b704e2ce813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.38.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34966b7b-8334-410b-9e9c-5c72ca077d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.234.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d5dd6f-9602-4dc3-8371-ed7b811c6503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.87.34.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c334c5-eddd-4a8c-8c3c-43b7290bf008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.104.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f023a22-4b0d-49db-a0cb-b3659fddf7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.18.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb49f00-f0e6-44de-a8af-6890ebc0bfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504aef18-4d1f-4f73-89a9-718293582c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1203ad-d018-4368-b8c2-2ac05c02ba7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b12d1cf-1edf-4528-aab8-b656bcf913ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de66ae92-f44d-4592-8223-3edf3c3376bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20535e8e-720d-4a29-a39c-7b1fdcc6a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.56.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bac1f7b-406a-4968-8161-5ac0a6ad25fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb8b7bc-1464-4ab3-b106-530e76af86e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.66.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c96f0ec-7ba4-4859-80e4-7be9f5fdfb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01cfc34-105a-4b82-b619-fe2f7c667312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7367836-9706-494a-8e03-e82d9a7fe712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b6e383-de20-4ffc-ad91-e177658fe6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.242.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc2ee17-ddbe-42e8-9273-b075f10acfa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e92e20-9015-4b13-bd30-1288de046e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f125ad1-501b-4794-9117-740cf3022d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.246.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4837e3b-dea6-400a-9e63-f6bdbecd148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd74f2c3-f78e-46ae-8d3e-88b195adfa50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6cf81e-02b9-4952-b552-4e5a3b227a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.248.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7902aaa1-b95e-49e8-8fa1-e8a7544f4aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.21.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30af37e-7218-4f9f-a5de-0c7360af55e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.75.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e09964-9573-48ee-8f4e-d3a0821e40be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.79.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5a4f11-ac78-40bc-bbd0-68cbfc8c1e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a5159a-ea37-46d2-9dba-594e4dd55d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbc961d-87ea-40a9-a939-73420a009458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f7be9f-ef60-46bf-b17a-89c8c2826218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.97.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6fbabd-7320-4b27-a94d-a49059a70cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.96.228.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673753a1-989c-422f-9a0f-0ea8d8c1f1d9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.99.161.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76884386-edf3-47dc-966e-c73a22fae059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7f0d9f-d5a9-4191-9c48-798e871c64bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaa4e03-9242-4f51-91df-c1a108c8c3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39afa219-6704-4cd3-885d-3eeb271548d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.82.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d82967-c561-4797-8728-4269d4a91065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.36.47.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48f5df6-8372-4ef2-b29f-18bae4cfb75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.6.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af944f7-6266-45b6-ae66-493083be5b3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.47.218.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d74d7f-9bd4-4f14-bfb6-c759c77dc04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.161.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014dc9d6-4ef9-4968-89a9-68d72756ef88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.195.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae855c71-e14a-4a35-8578-8bda5c10fabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.245.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d528ac7-e80a-4aea-bc8d-5f7d2d93b2c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.252.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775827c3-d0e2-494d-964f-bb92d77d0949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.7.225.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67ad6a2-62ef-4eaf-98c8-2b4e1025129c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c847a8e-5461-434a-a485-ad4ca9dff984", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92713b8e-1c63-4a22-ac14-25306b0b3f03", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.12.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6427bc-1eca-4b80-b601-80e4ab8991cb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ecb406-aea4-41ed-b906-1c5b3dbdeed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8492d53-b015-4611-b2e7-52dadba9793d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.162.208.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7400581e-fb5b-41d6-acb1-c2a1723019da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.163.79.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69debfc9-d8c7-4e5b-90bb-13bcae0803df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.163.81.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93cbe65-5c18-4d92-9251-802761380b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.101.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e974f49-afd9-4b16-a127-46ca56fa3dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b3dd16-d677-4d88-a85d-3e1dc505091f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4636504c-0e33-4c4f-9358-37864f7858bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.183.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea056ce-c15e-47cc-b372-7e164ea1c6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2247185-c1f1-444d-931d-a85ff98fb2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168c5d3c-bec4-499b-bdc1-a5bd71abdc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c244ed-d6ba-427b-a287-9f281251472b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.180.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed6c3a4-1204-4f67-bc58-a1f5fe2c30f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.223.67.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d60365-ec44-454f-8a85-95a3ecb1eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682f4a15-5a2c-41e2-bd86-785c1befe9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.27.4.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b272e-0981-4ba4-b2ab-5c5ffc303778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.45.189.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d8011e-3435-4b23-b10c-ca1cd9aa9e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27880f12-f80c-459a-a038-bdb2f6da4e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9151eb-27e1-475f-ad5b-9111562adf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.17.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b42943-ba2e-46cf-8682-253fb0e1f323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf2451b-b366-4a6d-970d-50eb5b05ac4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5566cddf-0e7d-48bc-a461-dfbadb64c89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.162.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30351110-e87e-476a-b7c0-7c17b7531947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f716b7-3589-48f3-a102-00925e3aba1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91324534-7cd3-48b1-a8e9-84b176fd4075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd7a9ff-37fc-4ebf-b44a-cf347b4a1ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff51c0e0-59c1-498d-8f21-baba45cddb98", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.91.244.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e7ec27-9844-43ff-95e0-dc22923e2003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.200.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bb368e-5d1e-494d-bf6c-b113a761bb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3e6f70-bdd1-4a47-80a0-239408da2880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff8ea4a-b06c-4a61-a34d-8f3111230653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904fca3d-c83c-443c-bb8b-8be276e99a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fefc60-e5db-4e2d-ad28-e758f72a821a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950835c9-b985-4306-a97f-1eea638f8ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.253.184.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4a60b6-09ef-47be-899f-740fc8277d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.17.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3798ff4-37a5-4546-821f-eeaeb4bfd755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.204.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edced2ce-5512-412a-be0a-ac4303f3f77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f94cb5a-4fd4-4cc6-8a18-ae01576e155b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1740099c-e003-4333-a31e-e92e995e0a71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5c6d18-f1a0-482d-9db3-1bfe1e14a9fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb5ee14-c588-4126-b8b6-281b3114521d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14a69ca-4dea-4cb8-981b-b0c2bb77f3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9650f39-efe7-44c9-8c52-cdd28dd24b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.186.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95ca2cc-50b4-4298-b0f9-14f1738dfb5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9d3518-b547-418e-9e51-62fecefdcb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cccf4d-79d6-4b1e-b105-b98aab7487d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6975511b-83c5-44c0-8c1e-392528f4790e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae83798-48de-46e3-8472-546bb592f651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.177.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ebfc29-522f-4391-b25d-6c0288044b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6615cc8-0d86-463e-a7ac-f2f8b988a7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.34.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc6508c-00bb-4d94-9b52-26366e070acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1781b5f3-384b-4213-9398-ee5a8757ec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.138.164.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c8c4bc-815e-4066-8f23-db5cb53ccdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.16.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ec75fb-d616-402c-a805-a1b4d091e07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e809e47c-76dc-48ce-bdcf-d90452ea4c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f3ae5a-c6c0-4f87-8d7d-04eadfa4ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347afc4b-90fe-4e34-97cf-375a8eb7016f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42a981d-ec21-492a-b5d7-24520c58f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feaed20-beb9-49ff-b7d3-fc1692b48d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42309606-83e6-4840-b1fe-a39c20219453", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc682f34-6c69-4a4b-a5f7-9c118c59c0dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a64131-bb38-426c-a928-814cb900b6ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66297504-fc9d-45ce-8967-5f8c1ea7348e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd6444e-cad7-43de-8c34-d702ba9dbf62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b01930-eac8-4fa2-b82b-c2be4c81eb34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc7c2ce-f7ae-4ce2-a07e-8f400b25489f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b0974a-4c83-45d6-856a-20bea4b19f31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc0a2ea-12d0-4c90-971b-bb788d0d595b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1640d05e-fc4c-4ee2-9868-a6829405dede", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ff00c1-69e9-4768-8121-bf5c740195cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a719d267-a2e2-4878-9dec-af55fffe1f3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f98973-4117-4949-bd44-d344f67d32c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1068f2-2470-4678-80fc-abb788fbae9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f05e956-d3ac-4011-893d-aab0d27c135f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26efed1d-e43f-4c04-b5cc-0db18199af45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12050330-684d-4029-8b2c-dd22562213e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fba39d-250c-470c-8794-e2d7bf4058ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4162910-f5f1-4832-ad0c-682917ea05f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246cc080-9fc2-4828-a3da-f4661665fa4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eac996-1d94-4939-998b-fb1c8ad1431f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82946db-c4de-403b-87df-8190539a8c57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef5564d-2376-40b0-b629-53da85f558b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.176.211.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb39ef80-7042-4f5a-87b4-14a238b5efb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c253c8b7-f3d8-42a9-b627-3fe1fb201f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5dbf88-0def-40ac-bf20-1955fe1bb105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f558cde-192a-474f-9326-284f86f0be81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38460749-b3c5-43a7-821a-d4857cce2830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.126.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0714ddd3-ff79-4953-97dc-12ee0770390c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545e32fd-5093-4817-ac4e-e8dc47c8d24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb6ce9-d231-4c5e-be7b-698c27d93807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e8a84f-df1f-4322-a24c-4e13abd7fab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.131.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f04507-5388-4cf6-b003-c55188f32030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.5.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2adf4f5-fffb-437d-814e-3dff075efc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.171.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0193e36-cac5-472d-8b47-c278811983a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.1.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187b4b96-70cd-46c7-b4f3-3d49488485a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.148.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc9bcd7-2544-4154-9bc3-76fa75cea68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.15.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68226520-e494-484d-a837-d65dff788f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.98.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c45397-fee5-4de3-bcdc-7e6c62cb25df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.96.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5217cd0-b18d-410b-802b-f847d48b7a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.150.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b069787-17ab-49a5-bc89-f1fb39ee06e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.161.61.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645e5222-9e9d-43f3-aa32-99845a91ffb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.9.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbb5639-938d-44a5-9a27-d58166f730de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.38.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2036d2-08e0-4d92-9cb0-2f561a47aac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.51.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dc4e30-808a-4082-9eb9-e5d5f2ff2f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.51.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06e0df6-abd4-470c-8921-15dd7e15d871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.210.22.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42799763-e629-44a6-b67b-525e6bf64015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.193.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14681f8-0c48-4b7f-949a-12789a13d3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.167.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7431a93-2c92-4a66-9eb2-83fe0deb3a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.186.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c256ed-c09d-4e25-a148-9e3a23aa1e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.66.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9818e4-ea8d-4047-a922-cde8a2d01a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.44.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d492bfd-1588-4fd3-a12d-48d245614fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.133.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b1263c-8427-40d0-ba0b-dd58ec31dff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.40.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cdd95b-f4ba-42fb-a1fc-3c5bb7e99411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.2.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45f1a87-0078-4b3f-bdbc-65cc7aba9996", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.118.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77b8be8-ac5d-4d30-b225-f111b2307811", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe8ca3b-6ed6-48f1-8cf0-92e41f408ab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ea5ce9-b143-40cf-a57c-9de26dc7a4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879c7888-67fd-456f-a8c5-087264eb1625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6cda25-f4f4-4347-9863-d242e13209ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4753505a-9dd4-4ca0-afde-3cd327259d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.186.20.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5ec34f-0c36-49c0-b32a-a32e0df74742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.20.236.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6382247-0fac-4e36-a035-71769f9215af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.209.82.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e226c67d-3ee0-410f-b297-1a40dd221713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.229.141.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5e38d3-af74-431b-b522-cad646c5c9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.112.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7239d5ac-0ea1-47fd-8ac6-30370879b50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.241.238.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a6107c-7520-4f11-86ec-30cc689be973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.243.46.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c458d8-ef52-4535-86aa-a788df6275b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.247.139.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e1963f-ef2d-4b74-bb9f-734f0d9de427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.250.244.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0159ce-571c-49e0-9cd0-a05caf3fe9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.251.254.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6920e826-aa43-4d3b-b88b-01f1ea1f94eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.233.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d8189a-de8c-49bf-a8d2-d37a304724df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.149.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccc9dbf-42b7-4491-a6f2-45fe8b59ef5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.239.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f63e39-75d3-4716-ae1b-236a0b60525f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.213.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e12ea3a-865e-414b-ad84-0b428dc46099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.16.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075fe5ed-78cc-469d-b2df-a1a5af3b6a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.112.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8b033c-cc65-4425-9780-da2ed63f6203", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.151.192.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0136125-7f56-4ac9-806a-f977c5c83b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9327a8ff-0013-4fec-9be9-6c10c9bd48b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.61.184.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08182038-6ac6-4b79-b3d0-43998aaa9421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.61.184.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99887874-3593-46f4-a16c-e009891fc947", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.63.163.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f7f75a-f12f-4300-bb59-adbde7f3964b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.191.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e52227b-0e83-4757-8195-76b4f30f4cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.168.150.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29465ff8-9413-4ada-827d-5c6a8d01d9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.173.147.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e269f47-d975-4b80-bda5-29908c5c1002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.176.123.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1429a74-406f-4a64-965a-9f84962a7605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.247.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4058412-c12c-42c4-b857-0b8918d70597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.42.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79ef2e9-e97d-46b1-970a-5fd2b0150b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.58.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8db678-34aa-4f73-954a-0bb0240d8bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17479078-e67b-4b33-a14a-54618b757661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.209.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7cf6a7-d101-4bea-9ea7-4e59c44d50de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.23.234.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--face94af-a199-4e16-878f-c6c23062739a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.234.213.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ad7f44-e20c-467f-afdd-d8f26bf91549", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.246.77.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec297027-abc2-4ecc-8756-a96afb071229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.1.184.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7745ad-d62d-4e2e-a142-14abfeb580ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.155.106.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b68479-f165-4367-b159-02455b2a3603", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.219.23.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc88f5b4-8a6b-49f8-89a3-a73dc7d11ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.220.235.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839ec578-84d8-4923-bdd8-e5f5842e4307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.221.134.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c47cd7-2111-41cc-bfe7-db6399a4269a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.130.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b164d-6084-405c-848d-3d8c19c10d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.191.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6fab4e-ab53-493d-b362-a5bb8897b9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b654f31-97de-47cb-956a-bc2c2f7a828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.197.243.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbafdcba-6a33-4456-9e10-7b3f0bccbf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1244b4b3-06f0-4327-b205-d74397f2625d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9e04de-ddd5-4f12-9434-cbaffb5a18ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde5c22e-d4c1-43f4-99ce-6dae5db4187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.246.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f475f2-8fd4-45a2-a46b-fcc7ea5447c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.36.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bdfaf1-05b3-438e-a4c5-e307c791c195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d0776c-759f-4586-af9c-0b8a08b60736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.4.12.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea90087-ae0f-4d78-b443-6544a58ecfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.64.6.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad42293b-1e1d-42f6-a3e3-6a670ff60d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.89.24.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1546723-f866-4538-b493-609b042ffa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.120.94.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d161bcc-0e2d-4aaa-9214-b92ebb975b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.67.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac330805-961c-406f-b7d2-18ab044d2a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.101.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ca3d31-f777-4eaf-9514-4326f46be2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.104.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155f5e78-c8ce-49d9-9f37-33c4d845bea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.124.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede9234b-6e4b-4f74-b239-75fbb1421822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.127.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da85a324-42ec-4ae7-8445-669ea3ccdd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab672b6-f66f-418d-b11f-0102269c2cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.10.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c095a580-e072-4788-8f96-38fff5e6f743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.10.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b367ea-f55c-4627-bdf2-5195f613e221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.12.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec1fde4-e6ef-482c-9af6-92d8466a2d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.149.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33750cd3-4cb6-47da-8ae3-8de905275fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.19.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1033503c-074d-4e74-b25f-fbaf11598f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.191.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f6a5de-173a-404a-afeb-f8ea51394bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.21.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f92c1c-cdcd-4ffb-8e40-cb254b0fa20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.24.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3139e5-977e-4c4d-95ca-a6e6a69f944d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.30.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17593990-740c-4777-b128-3a5fef1f88a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.41.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7dc4ac-ccad-4b60-b596-ae573c06beaf", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.74.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f94f73a-7c36-4a6c-a1e7-1f9f5b0b10b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.86.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c4f5f1-68ec-47ef-935e-9f38b04778c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c5b34-1c98-4f97-b4b7-98913972c11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.97.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c3667f-ca2d-41b0-8575-a2c721ec2c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.99.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9184b139-6f65-4cea-acba-31426f2f304e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.142.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867250bb-93c5-496f-86d0-c0138f28788b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430be727-8e44-4b85-967b-7e45b423ae33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.240.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ce02fa-97f0-4893-8bc6-706de19937f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.252.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd7847c-0fb2-49a3-99dc-660133ed641d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.235.40.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b544305-be2d-4e2b-ae4e-f3f7fd8a1177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3763d49c-e938-4579-9f43-e0598e12e8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.34.93.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a78b60d-5190-4df9-940b-2afc9e87fa7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684cdd97-84f2-4bb4-9a7d-b7e908111334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc41768-acf4-495e-b496-1b74aaef0d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2c57b7-4d06-4c19-8cee-4b0cefd32d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e856d0b3-5e42-48ec-bc95-5c85f0cad23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b772358f-668c-430c-b7e3-26c74bbef6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbccb8e-6ce2-4360-af2e-4a70f2aac553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fd255e-ee16-4314-a7cc-70808367eb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc3fa9b-0dda-4a80-a584-7dd01459d5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c02d40d-09fc-4d42-8241-33d5bbb542e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806020c-a3df-41ee-9f15-79d46e4f5ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d95ff8-7c08-4497-8746-dbab19380153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c96d52-df6d-4960-9be4-700630c85bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27ae580-ab44-4095-81ac-45ab2efd0b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cd749f-a62f-46f9-814d-34867b1a7395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecf9c29-cf4a-4d81-851b-ef35ef5b1db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7ba28b-37f7-40d5-b608-74324ed16734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edcc93d-1fe9-4da9-a956-64581df5de62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4a10a-7ff7-4924-9715-7ae636390c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0aaf14-1769-4609-ad4b-af25b4561042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e47577-91b1-4669-a9c6-a24907ed06ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb50ffec-fde6-46c4-8874-1ca0999e14aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353755fa-2d95-4b5d-adb1-b323035f4d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057d6784-f28a-4fd2-aaa6-4fc073260e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77cb2b1-b30a-4d37-91d8-23bd31886532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01273a05-b25a-48a2-a44d-a33f0007f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1472fcd-38b8-4d0c-bbb0-7e47aded33f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4f38e1-8626-4995-a11d-734b9ef11adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aa08b8-0f20-4c91-9721-092dad029c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d14e0cc-329f-45db-9d9e-5fcafcd26589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d96252-a4e1-48e5-89eb-0eace770966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7324af-c85b-4cd3-85fb-f03032cb2149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93094c62-431d-4d2e-a35b-94616df5d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae474974-a771-49cb-a121-1889cc90f51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b8247a-e024-46ef-bf5a-53d8c0afcb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682d6c2f-f0b4-49d2-8549-aa88048fa66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c56aa5-e0ed-42d6-8c94-8716afa913d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bd7cf6-6fab-4831-85d6-9b33b1fceb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3360ee-f728-49f8-a057-0db864eb2c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7dbefb-96b7-426c-a77d-5485f5114451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13779ef1-79bf-420f-8945-78142f5859c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90022800-4db6-4959-bff7-37c9306a1003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bb7c57-b098-4cbe-b636-57c52d31f560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7ed26c-b46c-4e94-ae91-ac088e14178c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53f4d9d-0ff5-4c01-8797-5b9f76a31fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc88fc81-80b3-422f-a47e-767d8c6d3153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb9417c-79d8-49c1-9769-f59c0120c4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b371b4-e954-4eab-b8c3-795de5e9c66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040f2184-24c7-476c-917e-fa3360c991f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811fbc84-b40f-488a-b424-9d5a412dcbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d809f3-a20d-464d-b881-899baa8e8677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648db4d9-4bd8-4cc4-a3c6-7ada3c7a6df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c348963f-c6e2-47ca-9c67-3cae71669caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355a6201-937c-4e28-a02f-e237614e0e01", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62649ed9-bd2d-4d3e-9e5b-8967d9d1b8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2c466f-e8c7-4f65-a5e8-b9e9ceb46f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f21470-e30a-4310-ac5a-9c50f51c997b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd31275-2b1d-4a87-b432-204385051323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b14dab0-1334-47f1-a1f4-c76c7c90a431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e267fa0c-0fb4-4549-bafb-22fd0e14aa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605c098c-7b7c-4b22-adad-72a95bee4558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6ba4ca-8836-4cbb-b197-2240659a7030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ef777f-dd8a-415b-8b20-08f0359260b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef972510-bd36-4a02-9db7-93e0100ecfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af2e601-0f96-46a6-a7e2-07f04783c562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23f3fa3-3a75-4548-af9f-46ec18f34eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d640bbdc-1255-49f0-96e5-17ca30c814f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beecdb8-0f08-498a-be6c-671bfe6ae5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952ef3ac-0820-4dfe-9fee-4caa806f4626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5970fa-e549-4363-b0de-c3594671f25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c74bf5-7db5-4cf9-bce4-82aeba0aa42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601b06f8-84ac-4e8c-bd59-599b740bd3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5774a06b-254a-4d78-9278-5e66b171338d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af42746e-3da0-4e37-9659-adb3ed6cd6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7684be9-b867-4c17-a05a-cb39fad96f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66549810-f1df-4434-8228-b148c85d9872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab9faca-cc10-4580-aa40-8289614b3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff35fbe-2b7c-47d1-a20f-54d37feac9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b67c0d-36ae-4c88-b1f7-7c975d91d32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c7e498-8789-4676-b8e1-be0d1c218b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4371e074-c7eb-4895-bac6-a4a8bfa3efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c4531d-b09a-4374-9008-12047997e2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef27fe5d-28c3-4020-a15d-cd2025a87306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a25175-ce8f-4be2-97fa-770395b2e118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4132843b-ec4f-4678-b6f5-635fb627d9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757345c1-70f7-40f3-97f3-be686b14fd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4252f6-6780-452f-bd7e-22451e7c2307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026d9568-df89-4cd5-b8b4-a83252fd087f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f0a330-417d-45fe-83b2-97d84d5d7f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4078fcdd-b23b-48ed-845f-53e436ddc678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e328fac-0249-4370-af4c-a4abc8936488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21299858-497a-4256-a63b-dc065e611830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c367e4e-7f01-49d3-b299-6592f1892531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3364c9-432b-432b-82a0-050f8ef6bee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245cb5cc-2887-43a4-9f21-d03316556d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c65918-a5f4-4c6f-99d3-4df4d84c021d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3331abd9-a137-4476-a0a2-fc98ebb6946a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07306b83-7b85-4c33-a055-365efbd8c857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fb659b-29b6-49b8-a1c1-26bc810ee6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dd4ee7-73c0-428d-a941-082ef981e4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e46a36-c70d-44bd-9bed-33665c798bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c19cced-34cc-4775-8130-3d9027987732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1098a604-b6b2-4395-8eb7-6932763ca0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfbb365-58e5-4f58-b0f9-fea1f0ee9bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd91dcec-6f15-43a8-944b-04c1c87729ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef9afb-0461-4572-82bc-2380ee979e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1502bdc2-6c79-48ea-a1a5-c2e4f6f28891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b028558c-2270-4228-8b69-7030cf50936e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e739e8-0b74-47d0-90c2-c1e0fbe6e16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b3c188-3884-4abb-8c8e-4bf1f144bf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c61179c-5ff2-4734-83a5-6a1c17178e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6874cf0-a332-46a7-acda-09e696e42fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548e56c1-cc8d-44eb-8682-e8acc4060b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfe4d70-ec91-487a-9329-ba0953fc3988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e688317-cd01-42d9-bd2e-0c8a0c0fd38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39332d98-0717-492a-81f1-035d5845cb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ce9026-b36e-48bb-bdf1-69860ec2e102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bd8692-e76e-4d79-95d2-cc00999538fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aec340e-05a4-45df-babf-befe76e21954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8588d827-7099-4799-aab7-5edfefc253fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a09716-0143-4734-93b1-53177a95f5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f741787-ff37-4ad7-8434-7f4df955efbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47784bf1-0adf-47bb-ad31-2708f291fae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cb3260-f388-436f-a508-1741a94a6a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9659b869-ad2e-44c0-af9d-83924fb4e2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40868d6-35bb-4ec0-b15f-7fdf605e07ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb58e3a-85b9-4888-977a-742bd242ccce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb41c03a-061e-423a-80c1-2d3257b43578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6a06e1-4923-46ee-bbda-b7654437de6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac4f515-f663-49b3-a4a1-e7542bfbf69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f67813e-cd8a-4124-b3bd-2e9dfba46510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67df7e9f-1e88-4806-a98d-6b219b654ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec387f4f-5721-4af4-bb72-f41aabee9572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da8781f-753a-44ea-aeed-15a768d1364d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87985f02-7ef8-40e2-89d6-12359cd982a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad351d9b-fbd7-44dd-b16e-87ed2b583f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f90e5d6-265a-44a5-8f4b-e1e3122db1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32770533-f4db-4a82-9fa3-6aa9c6620e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3656e95b-e81b-474f-b6a4-8b3f6d08cb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bb8c4d-72f5-478e-88e1-b876cc2f88ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204fb70e-4d51-4ad8-95d2-d91221326093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1cf63a-d4ce-4ebc-b59b-1cecf6a14c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90adc1f-b54f-409f-a71b-575dc3ab0704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a100cf-26ac-4246-8524-1e5493cdf8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97968f87-c843-4d92-a3dd-d4bab1bffc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64e3a25-0ff2-4e06-a2a2-0aea0bde9589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6798cd97-639a-48d7-a52f-e03fb631b044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f73797-e473-442f-aae3-c07ce29f9145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1d9629-fd53-4bc8-9539-d03bdcffb2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a922894-93c8-4dc4-912c-73c0a9c55785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0338c90a-55b0-4ac5-ab17-8a0a7e9068d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a4e4e8-6c37-489f-a311-98db236b92c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9975728e-863b-427d-91ee-da6c60748a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6290d1-d86c-494c-a3bc-c6f7f1ae6c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f9a403-7016-4a1c-92a9-ef49cf17051f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a28840c-81f0-4cf3-83fa-e43d8a16cb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff6f8d1-d74a-48d4-b0f0-f81bd05dc48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d80e89-14ce-4858-9c88-d169505bd777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4146a0f4-b2fa-42b7-828d-0c1b884c0fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb8f87f-229a-4a11-8e2b-8b8aef5f4389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b1992c-78ab-4775-a29e-fc2180edbb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e95cfb0-45f7-4922-81fb-5fd1c1db1657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9436932-33d6-4389-b467-4480b599e75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ef5d58-63c9-4479-bd5a-1581add4742c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1386f7-ce0f-4a62-adba-53547279a82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edc2ff2-bfc1-48be-9e57-c5a85ab6f68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d400452-a7c9-4cc4-9bda-2a68f8d3bbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e8c91d-8e38-4c7c-9bd5-d1a2901d7631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34770614-780e-45a4-a7bc-f4884444e56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0c8b03-9160-4170-8d8b-0a9b83c517e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bde4945-00c6-4c2a-bd3a-cfe04a09e076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a38f50-a713-4709-9cab-225f25b4f9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd8d1da-da00-42f2-a887-f58769001bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3466a4a2-fc38-46ad-8f22-1a6ef07e82b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4718d2-6552-4aef-921a-020d644d49ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5897db52-b968-4bb7-8136-57de64a87a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b261da9-d37c-426c-a056-c362bb8b4e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3fc980-e185-4274-83b0-7fba04cff1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0981fc69-226b-4215-9ff5-5f1d4831501f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2c08bc-dc8e-4d30-99bb-f1c0ccf40cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93df7c68-342f-4f4c-a2e1-ae5d1371340d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeb8df1-de03-4cd0-bd38-5e86d2ee1086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa9bc42-d5ce-4c14-8975-8d00e6a09638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfa9a84-36c8-4cb8-89b6-75b953e78686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d47f7d2-5d16-414d-b764-86b218824782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c07fd3-9790-4513-8025-a7b018e9c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852a9098-3673-4de1-b8c2-a535c7c49f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41993030-46aa-4d3a-a625-01639ca12d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33b5bbf-49c2-4f8c-803c-3ef0f09a4e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf44dea-4291-4e7b-bbc5-080516d97faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50654c3e-ef47-489e-96d6-af7489a50938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2da661d-2b07-4906-85f4-972d6da1bf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03873220-6211-449b-a554-3498afbec962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3626253b-e010-4d90-a469-3b43f367b6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f353cb5-4630-4bff-8923-b2f745d2e4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780d8dc5-bb40-4d50-9ae2-10fd167b3ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22af31d-e2d4-4553-a87b-758ca79f3bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b251f73-8a1b-469c-b357-45293fe593ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e492a1-25ff-4a00-9b14-7656cf0aa447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54425a75-157a-45ef-b942-afc893fe80e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2985bbaf-68ec-479e-a6d0-87c033feeb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6c2305-46ed-4b5f-ae94-9a35d78a8e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a3bbc-b589-4966-83ec-6927fa5d1b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4835d9e1-d32a-4606-bc85-cb5471431be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df262c8-6c3b-46a9-8fc1-bf8d29ab74d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809cfbe4-a682-437a-872e-eebcfd962543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11df3994-1daf-4b18-803b-e666a1df7201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2f9601-e715-40d0-8f17-6ed8461f640d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998880d4-607d-4d22-bae1-348923abb9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603836be-2b08-4c36-827e-4b61565cd0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e34496-e5cb-4fb1-be03-bff47b2fc264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8385daa-b0a4-4f61-a226-2d36493b345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78cea41-92fd-4428-adb9-d6af444a0435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b6d660-bc7f-4ed4-9cfd-977f50fdd831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa42090-13e7-42bc-b176-52653a0ff897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a4b50-4582-482d-b892-de931fcd38fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e58d5e-634c-468c-bbed-10eb7b149fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15ae751-fe91-4f24-9f03-df962e5aeb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb9d90b-8c86-440e-aa29-b8e00dbaa886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c9a31e-e2e2-4fcb-8cc6-d6b53dec9810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba043ac5-880b-424d-9be2-d1724eafe953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911ed771-df85-4c15-8717-7026c68929f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e30ecd-2df7-4fdd-9678-cf3a1aa484a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ccade2-665b-4602-92ea-1af4e24c5ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7f16bb-0472-4ce4-ac24-f9a0c9f4c01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456ec9bb-6d80-4c38-b3ba-d53fd139ad16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083a2123-d71f-406f-8b1f-533f452831c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f6cce3-0d97-4fbd-a1c6-ddde7b10d983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039a3336-0b48-4b1c-bdda-5648eff6b878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f20c2e-9755-4a1d-826f-fb5bd5870b1c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe0d01e-6a36-44a5-a638-998c2d86b34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250711f-b851-412d-8e0e-2d29fff43390", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf46abb-0822-44d0-a3f6-1be3b4b34902", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c26f2-802b-4e06-a583-3847addcdfcf", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e1a736-f5fd-489f-aeec-c0211ec5b684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26eb9c3-2736-47f0-8ff1-9ec91be8e822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4148d9d0-4f5c-4340-ab46-0c9dc621f8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb8e675-0102-401a-ba4f-b16499b6c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe6f456-2fae-4fd1-9275-a3652afa2d6a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fa464e-1f33-48be-b219-2c7123fd61e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7731b56-a0f1-4be3-b3d1-d1b9afc4eb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fbd70b-2d32-46aa-a532-db1088c54432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbbe3bf-6b80-4d98-97e4-a90305b452b5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.91']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a302fc1-0dfb-4ec4-98ec-87bd0538d0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d74bed-7f55-4592-bc62-76abdab151a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.94.85.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164be550-9d01-46a8-af75-1ba0a7fd1cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.26.250.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13f273e-fc48-4e5b-aed3-5a88b92aedf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec9230e-cd92-4f78-a9df-ab8429c3999e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6527c74f-80d0-4f59-9bf6-10e1171073ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf8afba-325e-4849-81b7-7d4808f6bc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d6b138-d348-4f21-b5b2-a82b84fb3fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f742273-30d0-4fc3-8cad-6d49ed90e7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80164d1-551b-4f88-9897-cdc5e7e7d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6764f781-e76d-43ce-9cf3-a45cec395646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75afbd28-519a-404a-8034-2c4cf46529a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edec0d9-787a-4a9f-bcc0-dcb203b082f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe440b3-4860-478c-968b-774808cf980c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb56d6d-f6af-4e06-a752-b0e9ce55c8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c854228-fbac-4204-8f50-9e9fd2b67a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37148d7-2ad9-4af8-8b4b-45427543a093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f1790a-5bd1-4e2b-bab6-a2c7a1f218c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7cde5c-7d03-4c7c-b318-38de74574096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac57037c-9665-4d05-97d0-dc18ea86fa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2cda25-64a8-4e06-afe2-c7ab67f587ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e561badb-880a-4dd7-a1fd-48a207e618fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d5f0ee-e915-4d61-944a-9c1926def29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154df4d5-56a0-455f-9bb1-f954b42e8a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427a9405-c689-4379-a69b-6965c34a2bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9fba0d-6ef4-4795-92e1-aa837f19f84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8019703-cf31-47cc-a0fe-64fa0cd22476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bf9d70-aad2-49d1-ab0b-25e47fd95ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8455e84-eef5-41d0-8f50-ce33ed57cdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf73793d-4f3e-4ae6-bcbe-e22958506e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49519d74-a876-4d92-8399-7b33c0f02a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe8c772-f9ce-4bed-9c24-d3ff327a005a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87e1914-fa78-4dc2-b003-ac33223bfe6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ee2882-e4f3-4ad9-bfce-02b0b4654026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b8875-3aff-43e9-9a20-f326f960f9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a9c0b5-a996-40a0-aedf-a3aa1ca5504e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00011d4a-13a4-4424-b8d5-3184389fa63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05f00f8-139e-4b0c-b74a-d871a4254f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75bbf5e-9592-42d2-84f8-25254b1212e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa1ec51-6063-477d-8234-97a89be192d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb10cae-a6b8-4ae0-87b0-23881468e0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e99642d-9188-4558-99e3-19f1c2044ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae4a608-47a6-4cff-970f-6eba063dc36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d35ef7-2c5e-44a4-92af-55fa0ca180d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d9c5d7-9e14-469c-8347-3e570afa48e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abc838e-5a3b-426e-a666-2ff365c3f861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c433aa4f-7d33-406f-ad0d-c200013dabdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d544234-2386-406c-b12a-136c718157dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402f75c7-f428-494d-a79e-61d192e1e359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48a8174-dc7a-46d7-b01b-1995bb181d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448d629e-c47b-4654-be50-deeab9b89e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e470abb1-791f-4441-81ab-e053ada6ea2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dc9518-a2da-425c-b52b-91521bd7d3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98c5b11-bc49-4633-93c3-e61fc2094e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a13ccf2-1d67-40db-b5a1-3658f84c063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200939fa-e059-44c7-8c6f-b26f2d757106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf59c097-6233-49f9-a045-9e9ea5c6e59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54410c3b-3547-482a-b5ef-c60ed9e79a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3c7b94-cac1-49af-93ec-17f28f52761a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4779f16d-35b0-415e-b4db-2e73cd1448df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb17e21-c090-4747-9895-740173969ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441cbd61-43e4-47cc-84d5-2a46eaff5f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc788a1-774a-4883-b124-541c9097a501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf1a9f-ea0d-48f3-aaeb-2748b4202a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38cf8f7-4e30-484b-aae3-c54bfe38b83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2073b38-6772-4168-9aef-11ee6500f25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890729c9-2a8c-4ea4-a3b8-2ba709502847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7211456c-41d5-4dad-a565-41bd541ea620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f14426e-d4f2-4269-a850-73df1d69e607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55752ba9-9f6e-4a87-ab0d-56bfa39cc8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6e91d1-75bd-41a0-a1ab-33789eeb7b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021dee4e-94a7-4a51-9ac0-ccfbc2e388b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b60cebc-e875-4c1a-bfe9-37d01bf79a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec232f7-9b6b-4dd9-8da8-61ab391baf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c48d6ed-a26d-42b6-aab3-1305edf81f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c186f8e-a53a-448f-b6a5-bf93e1e90b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526db939-2bcf-4d32-9efa-172ee468c705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681900ec-62e8-408b-9897-8ae3cdcc4e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39508757-b304-4cd2-a50f-b4d9d23b1565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1e611-be2c-4e86-aa5c-c60d8d2c296b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713a30b4-51aa-4e02-8a3c-57269bc2602b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaace3ac-625f-41a0-a67e-23b55a0cdf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbf6637-08f4-42ec-a71c-491ea76b6e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b6b491-088e-443c-910d-5b81d3d34e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cb8822-6ba4-40dd-bba8-ff201fcd3332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81509a2-98c1-4f47-abbe-3aab1da72266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bebe421-fb23-4d46-9670-399103dd351f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c66bb3c-7b0c-467d-b2ca-22c9fc9e6788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50151043-da62-40ce-8651-dbd06d3b6fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0bdc57-8af5-4ef0-8e23-eabbce3d5590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bae830-1f56-4e97-901f-e77d01d1afff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e44409-8488-4ccf-85e6-7380dde9fbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35cc44-0cb3-471b-9f71-1dbde34be4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b080f333-cfd4-430d-8eeb-6d3542c6ae43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94a15e4-1f16-47ec-a0b1-8e1e6e45afc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65560b5f-0bad-42a6-ae88-2344813cedd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7636b26d-f0ae-48ed-8886-b2cb45f9b45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454ce06b-dfc6-404c-ad17-ed5efc4bdea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c9613f-7012-4e68-8581-979b309c5d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08065bb8-c4ce-4bd5-bf8d-5e9fc2c35b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64e74e9-ca9f-4f7a-8d53-e283743c3499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80a47b-f1f9-4a6c-a322-fdbd7981e06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f45c6f7-bc61-4477-aff1-f5f82ef312fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2a2b6f-f6c6-46e3-8374-3db77a0792d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21de7fc3-92bc-4fe0-92b9-f22f6f4ab32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88efc645-2b58-4c76-b6d2-720ed3aec1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4b7d8f-919e-44ce-883b-0e40de349c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d123f0ee-23e3-4c4f-a59a-ae3432252067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ad1923-502d-4859-b7b9-d23928b6a3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35de945-2c60-4931-a6d5-517c67133814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be94999b-8f30-4185-9f4a-109563bbc9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313ccb6e-0387-4ce0-87d1-8d6f9d4df0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e4062a-ab4b-4527-9133-523081f84f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86afe9ad-4417-49bd-b2c9-effb20469061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc0e428-020d-4078-907a-09f3a3254f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcee7d2-00c7-4dbf-9143-17f92bc34d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4359910-f5af-4dba-81f0-9f2634da37eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f167bf8a-32cc-4c8f-b344-c0a7bc715120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb4a4ae-b6b4-4ad5-84a0-fa2b83fe2a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53898364-c737-4581-bd52-87645989966c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6afca5-5c6a-49bf-b77a-973a1114b3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816faf55-412b-48ee-8d02-83824284a673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1dc9db-43e4-431c-b259-217f03fcf412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b004fb9-aea0-4911-b945-71c2bd69af68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d4146d-0ade-4056-9ca7-69ae58a443da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56134c4e-4bc3-4c48-854a-72f8451cdf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d816cc-b15f-49d3-b6d4-202e896cd33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c762d982-25df-46c2-8c4e-1c625392fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb189e-a55b-45d4-b2d0-6a8af33a19bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a073fe32-7e2d-4267-9c9b-2443b0795d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadb884f-ce9e-458a-8977-15d5894f3716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3523143-fdb7-4f47-8fa8-4498231c585c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da1c4a1-de16-46ba-879e-c8fb860cfe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b700bbcf-1668-49a1-a351-f85362806924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d8b3e3-570c-40e8-be2a-026530c7e6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2795d144-c5ed-43ae-bdce-dd102fa744e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408f852a-482e-43d3-95f9-b73fa9153958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89253d5-e770-4bdb-a444-5a116bd4018a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f48aed-8bee-407a-aa7c-b587bd53c1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d34deb-50ff-4bf6-ac26-65a26f81efa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2871b771-efaf-4d97-893b-e7fd4d2a4b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28468be9-e1f3-441e-b360-d04bb4d7613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c76098b-bdae-45f7-b92a-3d0ee4d44ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2effe42a-fb61-4f26-a500-5b6154be6d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2008dd-500b-4c9c-bd5d-9b31208f5342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defe1548-e1fe-45d5-bb61-842219489deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40b26b4-d05f-4b01-933e-11eb444edb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae267f2c-5556-49f0-92be-131e3a96f51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492830d5-1d23-4521-bbce-4084eb9b7891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ee3371-2ffe-482a-8ce6-54e54a841605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c3ffeb-40a1-411a-a54b-4db88050a5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf52c7d0-9db2-4574-82ba-4b79f59d3039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dc5f74-e0c1-45f5-88ee-53300f4a09e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1dcc07-616f-4409-af8c-7d15b422c665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a0ca88-2a93-4e35-a13c-1ad3ca48bd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ff2ca-8730-4383-988c-ca8024cc3b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41484a04-2831-4b41-b4f2-4cb24eac3e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac214799-15c6-46f2-85a9-36ffe39aaad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e869856-d3f4-4086-8bc2-6149fbcd64bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71acf100-1002-4b4c-84fc-e8ebb060a260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f57836c-ecc7-426d-bd50-c38cddeec683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d12b2e4-5773-46ce-90ed-c7aca0d0bcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82573f7-362f-48cc-a0c9-2c3e51867650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9517c642-85c1-4ff1-a195-d5caa37b032f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8c650c-74ca-4ad5-858b-0cd254e6344b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ec4a1a-e127-42e0-bf0d-baf4b0d7870e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83eca74a-0daf-403a-984b-072bac3a497c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad263a32-6023-4026-bedd-723652ad7bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03575c05-8c50-40f8-98c7-c9a8f4394f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ca6079-9b46-4bb7-93b3-64f4d75534d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2816d9f5-9015-4f14-9c9b-4fd4533371eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b6e807-c785-47c1-9f09-c4a6fb0d4064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab18c94e-60ee-4e5e-9e3c-9da6edccc9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d576d6cd-f343-47e4-b92d-72f305e58092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53456f19-73f8-467a-9156-d5303e36a234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa290e58-9ccd-4208-9772-03ccf69e7665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da909e0c-6eab-4d64-9c7e-01ada41435f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3fdcd0-7c61-49ad-bba0-e9a79117d59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c03a9f7-8430-4808-8b7a-e66352c5aeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a6889d-7c5a-425e-8185-463c5a780e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9517feea-13a5-4208-879b-26ac0f899151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5518dac1-0d71-446e-8a46-d91fe7889eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a58b944-1cd6-4680-82a5-627f2f37a951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895d8011-b1b5-4735-8b6b-3231544ed130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ba25c6-e14e-482a-bef5-58de1d4ac101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f866c7fd-0bf9-4508-8dfe-bebfecd8f34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd2994c-6b81-4f3d-aa86-900041538524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41259aa1-fca6-4bb0-8ba0-b2b6a09eb00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bea0cb1-8308-41af-81f0-a057f0be1421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f99ce1-13d1-4dc6-86fe-dc6b162f9369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ddbb87-a2a1-4cc7-9aea-275d4ebb3931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeb727d-29dd-451a-947c-1184a5e467b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776f4136-99f9-41f9-86a2-36afe52d99c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9680b30-922a-4958-8380-dc0d3a8ec297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971bc143-6c4b-4a42-a924-9ca312dd592a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee5dc97-0fdf-4b6e-9a6e-5e8a8011fc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58399601-e89d-4808-b715-6711fcb57e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200dac61-ad7d-463a-a16c-c3f5de6cfbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99ccc09-1dfb-4f93-9792-94791cf97f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b24d600-290e-4c0c-88fc-b80de9dc80df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9fd2dd-cf3f-4b96-86fb-aa0538147edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd139c3-88f8-4b22-9caa-ee4db3108b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b1f51e-5ff6-4fb8-9b5c-9d196f80558a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99993f3b-5be1-48be-9357-f677eea6fa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02300d1d-75b7-47a1-81ae-02d9bdf4be00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f300167-e43b-46cc-81ce-eb279b9ffacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a22366-a292-4793-8f6d-8aab329e7952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e3b356-7385-4946-bfb8-33c74b1e67c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75ebc16-6d70-49ff-a315-a8fb6cd2d3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3c743e-0146-4691-b3f3-012fa2b4c949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4f1dc8-9edc-43be-b3a0-8e1bfce3a73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2428024-84e2-478e-8e73-7b2a06bd5755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9287b500-dabb-46ba-ac48-eae8365c593a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643ef1d3-1347-486c-9337-9bdd31c480af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51bb24c-ff3d-4475-8e80-3091bf1bba53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea03eee9-6e5e-4edb-90c1-8c71694f092d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cf9bca-719e-43d4-a5c4-5f500f1981ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8819867f-0cd3-40eb-8a1e-faf306780995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67020de6-2441-4209-8a9d-871f56c5075d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd4629e-c33d-4c9b-84be-b9c2a608cce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9aa68c-02b9-4ba1-aadc-9e9460fce642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d01213-702a-4e4b-8cc5-fcfdbbcbe3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717464db-0e05-4873-934f-251baf531109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2eead4-1a27-4f0f-b58e-7f83cd6f3a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626e6ab6-f794-467b-89b1-a93edccc4c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e36b41-b77d-41bb-b6c5-cd94d0c8b670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab51f6dc-1ddb-44e2-9499-cc9e20d4ec02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bacd1b2-9393-43e0-b56d-c04af139b999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21464b7c-1f47-4abf-9365-21462c687f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d3a52c-1f28-41bf-ab63-895a25b04cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373a7640-87a1-4f4e-9e3d-7d15466393db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edc70b6-0048-455b-91f4-733c66f72822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5348571-2b31-48e6-9a3e-ce69dedf5b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd32042c-a6be-4ba8-aeb2-88aa736191fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b100e66-dad7-4210-b635-0f28c6fd9fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09eec30b-a615-42ac-b646-24e726691df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1407fa-3a4f-4a52-9199-6e64084a3c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a34f4d-2da6-491a-84df-6f292194860b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1981b2dd-2350-486c-8848-924e98a3814a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123084c8-5d49-447e-939b-d84e80281a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0f90f0-bf7c-4d1e-b1de-99c46bf01dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89804674-0734-4308-84a1-c1760f36e894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d768eae-0957-43ca-896c-c999629a7904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058a07b7-2c68-4c35-8950-09e7715dc1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece18687-51d1-4cb4-b6d7-474b1cbb9182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9458292c-4b63-4b37-9ffa-7375f8e2256e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09b4e01-7ba2-49cb-91f8-67a0aa783e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f1a844-df7c-4b32-a49e-108835ee89a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04767174-f20a-475a-981d-8fcd5a793a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07087522-a904-4df8-8269-c76d9849b6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd242ec7-1c74-4e1e-b43c-f842d5582ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ac0f6f-958f-48f3-b854-5edde14c33e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccb5ce6-251e-4827-9213-985f823e2e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df3172e-b583-40b3-ae4a-81570b11b32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f12eab-f731-48dd-a0aa-0a7e7b6461ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22305550-e49b-4864-b230-988dabaaf7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339a2c0b-8f14-4123-aeff-bad32310c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b1282c-9913-4f3b-a70a-52b265158a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ae32af-246c-4efb-bcb0-9a032d646400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90da6a43-4879-41b5-9615-0afbf20dde79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6429f34-8b18-4be6-9156-13b98adc405e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbc1675-7ac8-4e88-b560-d2fde2a66ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e154488f-f72c-4c86-a822-cc7cf18e376e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04707cca-35ea-4345-9663-b9cb0416e053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca57a3db-1e19-4b56-b49f-4de07f69f693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e1f7b4-a19c-4fc4-a2aa-397f4bc0b5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0df7e1-e615-434a-9481-391decb42dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de9a4b2-d974-47ae-a0f9-bda8a4d90f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99857cb-6380-4996-a0db-f068afa77ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eef027f-8725-43bc-b2b7-c39c647e1798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06b7ab0-b789-422d-8e3f-7add84d51915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de3ae24-acc6-449a-a220-86032e7f9af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d734701b-ce74-4420-9f2b-6e6f66896ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b8b518-e172-44fd-89ac-e7e9c3350427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2104fc88-115b-4528-9366-c106114dea31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9a918c-be7a-46b2-9c72-f03c64314049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa981eac-f975-449c-8f78-66b9640072dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08c2c31-767d-422d-a4b5-7bca4bbb554a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ab308e-4d78-4a9e-9e81-14775190d824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64151327-2b43-4eb2-acdb-0ba3dfe37def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21297606-16e2-4857-9127-9f028becb419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7d25de-cb1f-4b42-b421-6ffc8db193a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0345e1-eb90-4634-b941-3c52a88d5340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268c1fb8-f9a3-4dee-8fb0-3291270ea958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03f6805-1f41-403f-917e-33e20e38aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109aeec9-25f8-4d8e-9a5c-f8236a378b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7829f79e-4dca-4091-997f-2f061c2bf62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44280dc-f85c-4061-abd5-a71f4dedf0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72463c18-7132-459b-adaf-a57df39e0e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19f71c-7d77-456e-92be-11da9927468d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af60ddf-f751-4855-a500-2b81b4be31c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f84d8c5-eb11-4b5a-b71d-6fd501afa9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d83286-5b88-45b1-a2da-540f0bd41fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcdb73d-3b10-4cad-97ba-eeec212c7bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104602d9-cbd8-44c2-9979-25d30cd92733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc33bab-a40c-48ae-ae97-331ef6f231a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c082b205-d1b7-426a-8e9b-1685b1593a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73be95c8-ddf8-4906-a2aa-4145df43a6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2455acf-8626-4ec3-bced-baa560e03a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13211bb4-5fc6-4425-bbc0-060a35650006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7a20e3-7a82-401e-bf99-392c9ff3559c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45efecbd-fcf5-4118-bfcb-57478a2f32b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34e8587-f87c-45a4-9977-d7cc951284ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39befacc-f404-415e-abd8-727c502e01c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a352b8-50ec-47b4-a9ab-ad3343782481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e53e284-493a-4cf1-9795-4b521a1f28f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c669c507-a451-4338-9f5b-0233bef5518a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0bb960-3813-4f51-890e-c6ca87461f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f62578-5910-4645-a89c-676f823136f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d05758-e797-4784-b831-2bfc77cb76cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a99d36-4b11-49a1-baa5-1d38778177ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f988fc1d-2a4e-48c1-9c10-78f53b401c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd8ca2-eaaf-4075-8334-b210d3c38e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ed4c2b-d770-4aad-aa21-105ab51eaf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f227343-68b7-4590-8aa5-3c8ffe5f83de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a69e68-9423-4912-8830-4539734ed9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433e78de-545c-458d-a4b8-7a2830dcd6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a3ebfc-60ec-484b-98ef-09a1c0e69945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceb58ca-3a24-4c5f-aa0d-1da91cf7276d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958adf64-378c-4011-ae7a-5a89b5c4742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0324a8e6-82fc-417b-afff-628a06e51f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808b9732-b02b-4b06-9110-0e9afedd903a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9590d828-857b-49b8-8df5-cd58e603a590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3852ff7-131c-44d4-9f32-1f884b46b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe14b16-c2c6-4997-8812-549c7a8198d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc73d23-4329-4441-b800-6f8b3cbb3b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474b4f56-1a5e-4a4a-a7ea-489d56368755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561f0ae7-7e61-4962-bdaa-28a734a4d110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7f76e8-935b-40ab-96de-f04b83272735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20adb51d-bd64-44dc-8af0-86c87a246600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b3ccb3-0058-4617-8119-ff3774891501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fef3037-2cf2-497f-b37e-dd658e35df89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14048e3e-25f2-4f46-a4db-8ed1ed35180e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa2a14f-652c-4f0f-ae5f-d103b4bffb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351e379f-1af0-4a16-9f9a-d662f8059d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3952bb6-371c-4fd0-b8a5-ee3f0cda1530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c81b006-c8a7-4ef5-8f75-520078b715a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbf9f8b-e3f4-4c7d-8560-128467d860cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eb0ab6-1365-4f01-9dc4-b95676b480bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14831ed-94db-4a22-89b4-23d094f4193d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3ddda0-f18f-4162-9bcc-7b6c1ef22ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1059c42d-3661-4372-bdfa-1ca370c4f8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91b8c4b-2d1e-4a40-9cdc-e556e4dbf0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829feb68-0a07-4a57-b35f-a4103b8d918b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7515c8-f3fc-4cad-a1d3-fd17c644c051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb28aae-b5f3-436c-8883-1acad0db0ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b7b2ea-ce3a-4635-bd6d-f15999b16c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d58804-850a-462f-83e0-681c640683fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbaf1e1-ba08-4a06-b33e-3af1429e121f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95a3736-b762-4afd-b5f8-0ca8484097ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769ff602-47fd-47f3-8868-c7aa51a2e33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dd5b17-981f-48da-9465-4fa1f4a222a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84d682d-08b0-4f0c-8e19-bdec39f142d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96711c50-9322-43b4-bd48-6d673849dd70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd2f15a-dd79-4f42-91e4-edae4eb0998a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30db6b30-084c-4fbf-ac05-a5b3893c9290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ff4983-d5b6-4107-94c8-f357ffc3d553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e18b9f-8c18-4e94-97fc-266b0998bc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1acff74-c890-44f1-8cbc-5d9c66ed4338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f43193-c1c3-4748-9f30-4bff18db64ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4af8684-ee81-4ff8-a51e-7c68e4b90583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467bf831-0649-48a8-97eb-9a3f4d97e2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ddd412-bf75-4844-8242-55df3af82868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a968555-ae54-4954-986b-492ee0ba4809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445b5250-a344-430d-900d-22cdd812ba0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073b85ef-f711-42b4-a8b4-f1bd5362d7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018f630a-527d-4e4c-8f06-52b4b50741a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a698e03-71fa-460e-af37-bfe6d39e9fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74867a7a-c804-4583-a8a6-e358695257b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.137.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54136c24-81fe-4d92-a6d0-905b88c7a6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af0f76a-041c-4644-92de-aeef97b08139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9878c8e-bf0f-4fc0-8ea2-98a8f042d9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63625fc6-2a95-4c47-be00-5c8476942d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f17fff1-af4d-43e8-b098-78ec14897ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47eaab10-14b6-4727-a89a-d18bd1b03268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2d1512-f56b-440b-b6ab-5b13f3b876fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e993d-9b3b-429e-bcce-7d67e10f396e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2352fb08-7b6b-4671-84be-794f94cc1a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a18348-47aa-42e4-9cb0-cff28f48fa07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.75.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f82522-8856-4a0a-bf3a-66c461947933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.76.238']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4876d8fe-0cf0-47d4-b354-ba039f2be198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.79.172']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7426af34-8fa0-4cf6-9c1e-db039b8a707f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115cf2e-9045-4ed3-91ad-ae3183ef5c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.94.100.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917cd624-0ee3-45a3-ba1c-18b61a593556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.165.247.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d61f1f-2efe-46ea-a937-1ba64dad8d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.144.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c1f42d-1fca-4e16-8dc4-b41072ed8e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.152.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b60164-52f8-4473-a067-81c019303a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.171.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99176ac2-9651-46f3-b53a-12f0ac078d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.175.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2aa935-8509-4114-a0a5-5e1557f00a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.178.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa55ce-2788-4fc2-ab86-576941579cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.190.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab00b8e-c452-42e7-843c-9443340070d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.93.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd0a127-31f4-4fc1-9c49-63defd3d75a5", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.210.97.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede8c5b7-23d7-4b76-a0cd-41408dc22fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.82.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc21902-fb89-4242-b3a9-dd714e0f37ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e16387-a15d-4089-b217-66f6860e1762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.171.22.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb59d89-2962-4538-90d6-c25e5c15a99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.104.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2ab067-a675-4004-a2c1-4badb5b36dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.109.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6701364f-121a-4e5f-b928-ac1c87595b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.110.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5908ab8d-84dc-4172-a321-bb2df45c863f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c8b822-939e-4a61-9c36-6c3a45059434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.122.143']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0410ca-e629-4c9c-9715-3e6cb34edee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.124.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a958647-c052-40b3-86cc-826c6fbdf67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.128.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce683f8-96c2-476c-ae83-4e6c79b49b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.142.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80c794d-d06a-44a8-bc8c-08f1ea733a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.142.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff99e09-687f-40e0-9d13-257dba78c60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.17.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3b1746-6bf8-481c-9da8-0076d447180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bea7c51-e2bc-4b31-8de2-39699165b5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.195.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551d6c06-9638-4785-b341-9c59b768e081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.2.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6557816a-5b51-4fac-b30c-711ea6bad7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.20.240']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c5b244-a58f-4bc7-943a-6a72a297f553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.21.88']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aecff4-26e0-4647-bbd1-97aefc3c63b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85c41e3-03b3-437e-8b23-af581feb5d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.50.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11949fb-301f-4cb8-973c-69385dff00fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.82.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f947c63e-c446-4cab-8a9e-bb0136c302de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.82.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5b300d-b91d-4819-b46c-5bd3851520ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.87.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b57bcb-8813-4044-b088-324688fd2ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecd84e1-0680-4cd3-a81d-10e923f60076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb7b81d-d02a-4a99-b00d-988a71531a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33051bec-3780-4e62-95fd-1bb6a19c6bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.57.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd196c80-b8b0-4122-9b7c-1fdfb7012a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08abf6b-1209-4976-91f3-b1999f8e9c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff20c93-4650-4b19-9daf-5507a8bfe93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f3a2f9-3108-4fc3-b386-22d8483efc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.207.70']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b85da9-0d08-405a-b716-1a8bbe3f07a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2a87de-3ebd-4248-a74a-1a55e2034369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd11c8d5-e0d7-4e50-a660-d4809a107211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7805abb0-fdb6-4968-aeea-9cf653479af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615db115-8083-406b-a6c7-5f4433bec836", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.167.32.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb7ce46-548b-443c-8ae0-ed223d804252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574e1195-fb8a-457a-8801-0e8f49c3699b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.57.172.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36322346-361f-4bfc-b198-b9780de7fc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.221.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff6e35c-bb41-4b86-9cf4-116576f121cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.25.52.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a2efcd-682c-4a0b-8ef2-b03ec70aa483", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.32.113.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee93f1cc-b9c8-49c0-9a3e-d53db5fd6468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.49.0.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5a2953-682c-43b5-9357-662901cbc309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.125.3.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912f39ca-c9a5-4457-83b9-42be4a4ce238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.217.113.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5803dfd-fdbf-494b-aa15-81027b6ea721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c19ddd-a758-496c-adbe-75fa9441d186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d456b9f-b165-419d-bf71-6431e299579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838d61d7-2c0d-4fde-8542-c8c45a3de4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e41c9-3105-48c2-97f9-8640d65ca617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88877d6e-0591-4250-b1b1-2e0ad484b625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd69850-000b-46f3-b423-687c08c635e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d691b1-da18-4bc6-93e3-eecc433422e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac3d8fa-22eb-48cc-a22c-ab41b77817b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e62712-c940-4234-a3ed-e2f327627558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb4292e-0275-460e-8222-14a3fc39a6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444c17a5-a0db-4be5-97ae-19495315570a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.182.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4487528-3427-47a0-851b-a6abd0b1fd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cf5e1f-9c87-4f66-afc4-86d7a1f27c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.51.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ec0fa-b951-471a-a574-de1b32934f08", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.55.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e378f0-efa5-4bee-95d4-b29c733437cd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.186.202.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681d022b-30d8-49d8-a85a-1695110e0e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.240.125.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c893d288-9cb8-426d-90d0-75a88e6487ab", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.8.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc35fe-6cb2-402f-afdf-0f68e13b782a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.141']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25000fd5-be4b-4854-86e6-73a0a6cd71a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.47.208.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806da8a0-d01e-4c9a-8dd2-f90d59ca91e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.158.65.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866d03a8-59b4-4035-8756-239e4928208a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.235.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107dc008-8c9b-4df7-b1b4-b12b7dba50b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.235.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bfacad-da9e-4cca-84d4-0ea1547336c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c52b11d-6a68-4428-9423-6ed0669bf144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4b5879-0873-47cd-98a4-47c0639719ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0d59c7-721c-4563-9b9f-fd283b0beca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c49aa76-5975-4ba2-9b10-10ff290d29ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e01540-d3e8-448a-9803-e996e890a319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.164.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4a4679-08d6-4823-befd-e04783c225cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4741873d-01b4-40fb-a1a1-1846519280ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855ba953-04f3-4acf-b33c-cad882927270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.248']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb81d1d-08d1-48b0-ae35-5a36c79a56b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac9bb04-9a78-4486-9182-4179707412eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502a9b32-def5-425f-924a-e42660af2ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daea3665-74aa-4b44-aa16-d68b505ff6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6842c99d-91ba-4b0a-866d-3d24c04de72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.100.96']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9624c81-5736-4c81-8d87-6b8598aeb474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.165.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84305855-edd2-4380-a577-d241a79d25a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.174.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d10f18f-677e-4cff-8088-01d851da795b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.5.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc27f52e-a22c-4fe7-80e3-273c96f07ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.69.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2803fba-907d-499c-92f5-09eb6f9ada46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.72.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8085f3-4d7b-4c8a-b915-4128c4cf714b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e26b6d-9230-41e7-8f95-f5e410d9add6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17ab817-6efc-4f73-90d5-0854b854638d", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7795a979-3b86-4ead-873f-0a30c84c7937", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751ab5ee-2c8e-4598-b325-26e5eb237561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb483e64-aa59-4dce-9b16-47f661b2de47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89474e59-bd58-4690-9251-80aa3789e7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3685f8d8-407f-4c3a-8696-370459ce27d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b19df9e-9485-4940-9f0e-c6e671163ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0555584f-6ce9-4efe-8d48-46d5b3687c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290f0864-8ee4-48df-b5db-a184cb83a171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d7f3ec-df9a-4a3a-86bf-98d74d657ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65a5134-b593-4937-a11b-296c87e3b832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84717c1-d147-4f41-a026-239fe603d3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cba1910-2cae-4964-8f80-18ffce51b6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b3e1c2-b947-4e8c-90bd-d38d1cd41e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d54bbb1-e9d3-4392-9405-bd061a0f607f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156bcb7d-8223-4f02-8a39-27d0c602cd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ebaf32-4003-43ac-b437-9d8990ed6b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea5b5ee-cd82-42dd-9baa-34011fb37ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f2c6bc-6e6f-4c24-9959-a8a7d2c97c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5169636-f76b-410e-a76a-fa270279e888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c4f610-b826-4282-ba8f-87855a909715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727afe9e-92e4-4923-9770-b937a27d738c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34945ef-5647-48ca-93ec-af08fca30ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea774f7-8198-4aac-8cc0-b30fd01813a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b219408a-ff4a-4010-8610-a7e21d7d17f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629d6bae-d2d7-4f26-a29f-bfd19addcd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99192778-e22f-4375-81e6-497f2f11e237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9f1daa-6b4a-41d3-85b9-8bd6f5a90a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ee89fa-38d2-41d5-a441-ce8904d1ad6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbae1f39-665e-466f-b484-cb246c0961b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.84.32.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8de9ec-941c-4ea6-81c6-551944133c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.105.29.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04414432-ce93-4bdc-a63f-0665d80ea84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.110.126.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f20d4d-87cf-4ca1-9aa3-473ce5515546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.68.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fce238-959c-4294-97f9-8ee62c1ff47c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.71.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd739734-66f5-4743-9ed7-088df1500cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.223.18.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb11387-71fb-4630-8249-7b51e138eacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.27.140.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a88897b-4100-48d8-ba3c-60b456b4f879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca38d0c-61a0-43d6-9627-fbcfd1fa70be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa6f6f2-fede-431f-abd7-71436dfab86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032845e4-3ffe-46e8-8b38-1594ba96ac91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b359ac-e40b-48e8-a3f3-93ed5a97f1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc74d0d5-54fd-46a3-a341-b412ed832974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.87.40.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45718b3-bca2-4cb8-976d-9b71b1ce3fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cbd71a-e1bb-4e4f-bb00-b3fed2b6eeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cc2fac-8132-4f26-a8e8-d9eaca838fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef233de-7de5-4a7f-b5a0-1ceec95b5161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15453a2-123a-4f7c-a03d-603e3b168055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01bb67d-f82f-4e29-94b7-8f6cdcff9f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bff21e-f6ba-4fa6-a289-f70d6f6f0f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9562ae-1f37-41a7-89d4-556f2b151b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.101.195.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e3ecf9-ea6d-4c50-bd3a-53d65427c8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.105.154.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd45c9c-1c86-4a5a-a75e-418ddf22fdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.108.218.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafea509-f330-4b12-9e3d-202802d71784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1208e3e-7a84-4ba6-8b1e-e660ff903096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e68360-42fb-4b91-b0d0-0333b5ed11dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f575c896-e67a-40eb-95db-2f07cb7af3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e37c402-7c72-4e4c-a848-4b65c5458619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8215535e-7353-4369-9969-fc4612b649b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075fa8d2-9428-4210-9455-8a27bbcbb74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6deaedd8-b91e-4d36-845c-2273be3fe278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e935b186-8b60-4d9d-8210-2d13cb060cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04f7317-76d0-48a5-af76-d0dbde96d15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa508cec-c74e-4157-9e18-c32d9cfe2f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347309ae-60db-4f59-a9ce-703fae0f1206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b02f3a6-d19a-4889-a72c-1b9cab39b014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf658c1-3a5a-4ecd-9519-6917e16b1abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d604023-c543-4b0e-87ff-e32e4d7ded3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc43c3f-ce47-4765-90bf-d6ecff426957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.141.202.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5cbc0a-1239-404d-a8b9-85e2cd8794bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.111.167.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9238c68d-e013-4d57-84c7-cd38838d0490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26697e8-c387-46b0-9240-87d2f95d57f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d68848-b51b-4605-a0e0-d32633c4fe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc21250-c0a4-431d-b289-fb546b17d14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a25bae9-4711-4031-8d78-33c9273aca4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3abc2e-2237-4a73-9d15-cdfe33461406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39d4df3f-5de6-409d-969e-35029e37795a", "relationship_type": "indicates", "source_ref": "indicator--1b3abc2e-2237-4a73-9d15-cdfe33461406", "target_ref": "vulnerability--16be0500-8592-4e4b-b961-d895c98911bc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fce715c-1223-42f5-a3d7-61e5b31028ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf40df7-6a40-45bb-be71-0e84732c2464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a5ec97-f588-40a1-8830-93040d9b80ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2a7348-4078-4b44-8202-b931393844ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5c45a6-71e7-45ca-bad9-09db854564cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98758591-716a-4959-a3be-9a67013504a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7627ff7-9d9c-418e-b579-bf3d33501141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca277b2-6057-4299-94c3-b20edaa53878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa381245-2097-4827-b871-96118482b417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196cc367-fa91-41fa-a03d-0484f3cba4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3950fd-6410-4fbd-baf9-3e69e954b9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd29083-4909-4ddd-a344-44c4c4718dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798b591c-cdd5-4c9e-98e4-b3e5644a6f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628c6870-d588-470c-ab76-2184c1097926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4db2277-6a00-446b-b639-98e78f342acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.186.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ed0fb-5718-4a27-8660-30f310d947a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.183.243.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddbf373-5e3a-44f5-b583-63f80643ec2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.189.47.121']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f118751-b1fe-4cea-b173-0dd7dbcd7f71", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.249.91.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cd7f58-0714-4f92-8d26-2f2715d18541", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.26.57.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a87cc0-93bf-4323-9209-ea12868f2000", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.150.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7ba6fe-6788-418c-9b4a-a3eddd023588", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.130.160']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb3a513-5a48-47dd-b6a2-9b5e10bbd192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.154.4.151']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e4ce1d-8817-42f4-bf4a-91684a48b285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.121.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3622f6-56b2-446a-9360-49fd642ccce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d47f237-a370-4eb3-ac7d-1e03f21ab73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.105.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a46d73-c7d7-44df-9b4c-366092b39e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77feff6b-418b-48b0-b447-34b049ed16ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea08717-ce2f-4ab6-9bfa-504656476f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a742ad-1f9d-456e-81d3-5f13e6936a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d783dd-13c1-4659-a7ae-bd8f240cb158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e0508e-cc2f-4f36-9343-08df69a21722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57074cb-34e4-49c2-a7c3-f5a0c47fedca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef37c13-ee04-4034-9124-47c7954fe14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a277685-630c-4b8f-a6fe-f98ce66c48c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.212.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658f98de-2ca9-46fe-85cd-b4a473e1eda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.224']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb683e2-ed24-4a84-a3d8-b05cce3e9a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db265a3-0576-485b-9993-f001810b868b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997697b7-64dc-4ca3-8cb0-18d53189e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8309f0b7-ba6e-4713-a784-fa3f0c99f81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637a9042-38f9-47a3-88e4-baa4a6094fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d0cb82-a65e-4134-96cf-2f51bbd5e9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.71.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3636b0-4613-4e61-9858-aa1e0ed7a938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.74.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca17750-a2b4-453c-9952-b2f157adbd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06f1a8e-71b5-4005-9215-b0f462a8e688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1fec1f-3cd0-4bb9-b8aa-7b02b3cc408b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbb7fba-6a6f-40d0-a1e6-9143f0237e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40a164d-8470-4af0-8289-37cf796c3c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed911867-adbb-4167-ba1f-6e33f1e209d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4209c32f-f7aa-4861-9ab6-7add3c3671ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e713be-e6d5-435b-afdf-cf936523b03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.129.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b3e519-d2c3-4be1-9e70-2e3e9966844e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e751b41e-0d7f-4742-bc70-bfe1659f31cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6aefef2-b2b7-42e1-9c48-d8b88a46c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d117a34-b3f0-48f8-995d-5c217c07eda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9432279c-9d92-4e3d-afd7-e10c3a4a2979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f12ecb-02bf-4b86-a5af-a3c6fd40e2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d15787b-d7de-40dd-9987-f5a0fd30d8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.166.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944c2720-4af8-47a1-af40-9a9b02a9f567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e8e4c5-c598-4864-a6a8-678f5641974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba4438-1c89-4e20-83c3-96c7174b8ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.35.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e678c6a-ac2c-46b2-a85c-5349ed9a3cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c26a82-6f5a-497d-997a-a36ac08b7ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19a3883-2bbb-4881-b5f5-846f5c769f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.229']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1fb006-fb4e-4149-962c-7c3448eeed15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360265af-8766-40ed-87ed-192b1ac60872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.86']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc641448-699d-435a-9f01-5ae8b8d70ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.239']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8d5e2e-75aa-4adf-a341-6fa401ef1048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d16dce6-94fc-434c-bfc1-59997d871540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.188']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b865800-593a-44df-8741-9f0ed9a6ec2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8855ee79-d1d3-48b8-9257-24e273c60994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066e26f6-7147-48d5-909e-40923345e69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d877b66e-c44d-446e-961e-20da938fada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.100']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3761a57f-6829-4c36-9eb3-4649656fd15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af7ee8b-ab7a-446f-9db6-5cc3f26923ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc146cf4-ebbc-4c33-a56c-d3020a5ba0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60e52cb-219b-4471-82a8-f51c2aca09e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0e25e3-3c5b-4169-8475-1ee50f4c66c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9986ace-13d3-4d09-b791-bb2404f2abbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f224c3-9b71-4695-a2c3-f5f392999e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e77362-c42d-4e29-b47a-a9c0d308538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bbd88d-57b5-4401-9370-2ea865046eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0228c87-18ae-47c9-9600-c22b814dc8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.176']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b1e558-146c-4a18-a369-0ad18a7683ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acf1e4b-f867-41c6-86e7-9612179091fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3c355e-ef6f-404c-b677-85daf38dee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736a0671-db43-4db1-9fa5-495d0f5f8e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.109']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faadadb8-bd72-44d9-8b10-77c2e04cf694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e037d9-8efb-4490-be9a-2f8fd6b68844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2ee498-03f8-4920-86f8-52c3a1617ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f880374-f9af-48ad-9c66-989faca7a5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783ccb8e-bf49-4d4f-80a1-3a012ec02c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0677b9f8-5b3c-4ed8-bb40-04201d122ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b020f1-e6de-405b-8d5b-e81eb2e012e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e425c1-b32b-4bcf-b113-d07697e2682a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b786d5-348b-4308-8b93-d920fb1d2f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514d7486-a0b2-49b9-a096-900135db5798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3337e6a-ff2a-4556-bbc2-43c95406d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b10c9fa-09f9-4061-97cb-5585d63b131b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e3127-e6a7-4477-8e6a-c8db2375dca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f40fd9-912e-47b0-8663-843f86b45ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94613c3-71dc-410f-8335-06e2bbb4a3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c74358f-08f0-43d8-b482-c020bc3b8ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.99']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fd6452-58e3-4810-aa80-3fbe364dea7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.0']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058c2b51-c3dc-4d74-8f0f-6d230e89d7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b396ac1-9e3c-4d64-b3c2-a91c46ecabf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04966743-d1e8-448f-a315-1c242997c792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dea615a-961d-422c-bcfe-12076f3cf89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b5fec4-e64d-4b57-8950-b92e5373331c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35654d71-d831-4237-9130-092a95495fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abd54d3-c8f8-48b0-a330-71a7fd09d914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2343c3-c1b7-44a0-8049-3d3bb3b40296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b455a7-3936-4670-9233-a070a143480b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21696a9-905c-4c7c-900d-80cf63a632b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdd882b-85ad-45ef-811d-b5702c0f1c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df80f1a-d060-4ddf-9ad0-9dbc17770501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76d87f4-0b7d-4aca-a44b-41da04929568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca00722-39be-47fc-885f-91b858937117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.117']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b7473-77b9-461c-9a57-90b882a29f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfe07bd-c9ed-46e6-9f6d-eb7a98a5d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513ec6f9-6ff3-423c-8ee7-c7d6abfc23bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f7bb9-93cf-441b-8b5c-53f99847f20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425db70a-f077-494d-bbaf-2f7b211e9088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aea4650-4796-4e39-acb0-ed9e15746856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be450444-e7f8-448b-89f4-4f9bff2bd8c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.234.87']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289d4b06-b49c-4c95-a588-36f503681926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0bb619-0445-436d-a3fc-804cfc3f0d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.2.243']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607dabea-0fba-45aa-9d49-aa1f4e269589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.219.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72de6ba7-ba8d-480f-8c4a-7bccc490470d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71218af3-14c2-4ac1-895c-a35e6bc89592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.233.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f1b2ef-52aa-4f57-8334-7ee05f88df2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3cf01f-6da4-4dc5-9a43-122d78b67fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.96.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de76fa4d-edb6-493e-97d7-336296b448e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ae937a-fd63-40c5-8a52-1ec88f59566b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.18.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcafebc-1558-4141-8a32-7074fd6b7d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.187.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79695b2e-1b94-445f-be19-9cddcff27969", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.210.129']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b9dc2c-c427-4e5d-9b88-9e1cbf28b8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.107.185.21']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebb8998-6663-49fc-b4de-bb79c631c2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.13.153.140']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3544b22d-dc8a-4367-ae02-69f112301de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.158.109.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed79d8d-b261-4574-bb19-48e3bfc81440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.201.83.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa2f166-58c6-4b51-bcc3-a17d5c37ef17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.230.133.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5341151-46d9-4a3d-abba-41d25f13b9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.49.241.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e30d45-4b1f-4f6d-96b6-80dc18046530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cff3dd6-a8bb-4771-9f0a-50b54b9834cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11da5a36-9702-4b0d-b45b-d19a1ecb7d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.77.146.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469b5a6a-7735-41d4-8504-559a35847e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac98f27-c3a6-4df7-95e1-133e19c3bc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12645b3f-1f8d-442b-ad86-8a0d4e258f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea2f7a8-8cfe-4d05-a9ef-237f469721f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa54c9e-1826-45e2-9b98-1cf475d28cca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.81']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850b0958-f89c-4883-b0a8-098f4eb94863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5feae99-32b1-4b06-92a1-e6c70874c3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbff8ee6-bdca-43ab-b562-7b5ea3fbfe66", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d184df-84f2-48e4-bc63-384c426ea408", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0357f9-b542-4665-9a14-e965368b0c00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909a7dd7-0ee6-4691-900b-a3758f578310", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757b8238-1866-4373-a7fd-680479c3afa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d072f5d8-c950-4c85-bb79-b9a65fec3c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8c8972-8847-4f73-9c87-60736528a4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d2ec0c-662c-4a30-b308-7a0e0782b1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b04b2bf-21e5-496d-8b8f-9c15c4efe4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3f2d6e-3bc6-4f14-b77f-d97530e44937", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6640d856-fc6a-453a-ab75-2622a58190da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3632d366-0664-4e5f-82f2-fa31b6331754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.105']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8965641-eee4-4d0c-9563-dd4ee4b30e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4c7cbf-becf-489a-b510-285b0827b115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491f6ff0-60d9-421c-91ba-d17b4c2b458d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6610f50-0f8a-4118-9d13-40b460ccd11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d38682-9617-4b59-a27a-d846e718d1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeecef5a-9aeb-4d88-af3d-8ad7dd0802d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.143.6.60']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edc0f3c-0c28-4caa-b5db-c1cffad5069f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.10.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34be881e-3cca-4e57-bfbd-6f24ba0adddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce562d78-f182-420f-ae8a-51e29890bc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.234']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c49d97f-4b87-435d-9b33-cbebb3c3dd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.242.137.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bae346-bf72-48c6-b994-17060d80d3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.69.97.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a19ae6f-7844-4559-9846-bf732f76de1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.117.87.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fd8a74-24a7-45a7-a152-2b8b4f11f678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.115.216']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9321524b-904f-4b43-8f0b-e65be0e6e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.200.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2d2bb3-8dd9-49f2-8735-6dd42da5f581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.7.185.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9c0c8b-dac6-4ca2-a2c4-1cdba79077c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.118.88.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ee32ed-5c5b-4ee7-a075-a2f6b6df7b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.150.215.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd3781f-bb0a-412f-b0a7-713cf3b16f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.151.251.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d5986a-18f3-4b3b-837c-14b66823eda3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.152.211.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfca342-ef73-4566-9d01-652dcb12b6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.216.247']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65084e7-ffd5-4735-94f9-5fba44a8f88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.242.61.85']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5ddc5c-d8a3-469e-8760-9e52de2c913f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.161.132']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c947213d-b429-4eba-9480-e08e249023c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.187.161']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20e184a-e9f2-441c-92e0-f825b4fbef47", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.3.159.223']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d181e969-8da7-43d7-a42f-1ddf5ca57f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.3.57.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3629f8a3-58da-4535-9b42-c8eb641e9f16", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.72.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73af40ad-14cb-43b5-bdad-72e5c97504fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.158.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb06822-9914-4ade-a51e-5fef4f598a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.248.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca5ae82-e339-4a34-a77e-7eedeb2db8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed6d231-668b-4e3c-86e7-b53d6e9109d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a94010-deaa-44e3-9b13-a1cc7bf42111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f429aa-e387-4d85-8e53-5ce47f5fca70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21457eee-9a3b-4e58-869e-75dfb2f8f6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.187.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f75b14-cfc0-4288-9e16-5739988e63d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.81.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90dc3ee-78e0-47b8-955e-d90e9c9aa12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.182.184']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7727b570-be58-459e-a536-eefa95daf8aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf122e81-8430-4c98-a9a6-47752585762d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405977f7-0eeb-4106-b57f-d6e393518532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ac386-abc4-41d7-8319-c77c927bc55f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8b6f11-1632-4561-aeee-5e13155d69eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807f663c-aa7c-409a-b2fe-24cdc29d5eb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4e16f8-bbfa-4baa-8601-e861e44d36aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941975fb-39ef-4d38-9c4c-985ff92f0521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e7f0cf-4995-496e-86d6-770c0d9f5c04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93592b9-7362-4094-8c08-fd3af9c8427d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3552d77-b04c-4120-9656-dc14610b080f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b660b3d-8e42-400f-9a62-2ea651a9f2c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a6ddca-810f-4395-914e-d072f3cab6e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb7c5f-8145-46cb-ba98-03c99d7e9219", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4806f27-8e30-40cb-9b1b-aae5d2de2c6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef80cd-512d-4af0-af79-5c945fa43011", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5772a3-0813-4305-9ad9-e73df6ff4039", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9419d5-13d2-44fe-bfe2-974d18f4c469", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469e3a4d-1648-471f-b09f-29d471c65af0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe661fc-5342-4815-8017-11398f87ffdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab729eaf-c33c-46df-9b24-43f6a1cec9be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042c7da0-7e42-4498-88ed-a539b31636c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3c6eb8-3d8e-4f5b-bd3d-0127e111b5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4d43cc-e2f5-4b55-a842-0b6e24b504ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a499e7-e448-4d08-b35d-267e399c2955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b3608f-173a-417c-8bfb-d0615913d33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35707ada-10f1-4acd-bd74-253ae6a9d0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cfacb2-edbb-42e0-aa4d-b4ddb685af76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d9d50-3c93-4e60-adc0-311f86a4ee7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2b9aaa-12fc-41e7-954a-a3e2e6eee239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad9ef04-cea2-4f5b-97d8-b85a0019cbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5f0331-5313-42f1-8513-f7fa0566ff77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a6a37c-9c75-4bac-a24c-ec6f824b88d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9947810-1757-46ba-a1e9-4cbad4e07187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4a6cfc-16e1-431b-95b5-81f2911ffcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247284f1-0ae2-451c-9423-368d1db3b68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493ab959-fa73-4cc3-a51e-f819a8709cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00c7312-297b-4907-a342-2a6757b3b25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a40ee4-802b-4c3d-90e6-0056e2962ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0215e59e-30f5-4c49-a45e-d012b657592f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce83caf4-a5b0-4a84-b903-5cacc299bca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d12b01-e66e-445d-978b-841c6e191131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d56fd6-f4f2-43a8-a862-c0166ad214e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285e4c45-3771-4544-8df7-49d2ce4294d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd00bb38-e165-4fb9-b0a7-b65ae0299e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb8b9bd-11bf-4893-bd43-851d7bf80880", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd6354e-206c-40f2-b474-c33f60b131b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd35522-8fbf-4d85-9afd-44c3a189868e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0c8122-8a3b-47a1-b15d-8f85550f74e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e727f85b-5152-4348-8097-9b0db8a2a9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b326c77-93f9-4f61-839d-6d60b3fe4c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb65fb5-7a21-46f7-beba-9d47afc550e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417a28c8-0174-4694-ad04-14c5b8d6c592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd29989-63f5-4e72-aa37-40d51aaf12e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3131981-cdec-4e97-ac9b-b1b63f11d706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0b9431-4244-4732-9a8e-9abaae6c93b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997a710d-2381-4970-afe1-58b488b6c36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e66897-211d-41b4-aac8-5d92d8928f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65ca4cc-ab66-4145-ae34-a6be576a8fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ebf837-cc02-4c67-9ceb-3b6dcc10da5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96146ce4-d967-4436-9702-6f0d75973ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58728ed-f239-40a9-9a26-1245a210f4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb3a3d-a484-48fa-8543-b9b0a67ce1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300365c4-8608-47b7-bb44-37e8a272818f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d89edea-9d93-475a-ac1b-e32ca2dbfd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dd12fa-dca1-41e6-9d6f-45023a58268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66366617-42fc-4ac9-bb60-4c0fe67efb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce89aac4-73fb-4027-a4d2-d71a92e9bd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc31b4e4-bb2a-4689-8314-ab8b89f799c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c30452-41d9-475f-aab0-ab9ea76fad19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1510a0e4-2c12-482e-8733-451e5c92397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fadb86-ca48-44c0-99c9-c103ebe78669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255ddf79-5ca0-45c0-bce1-bb08bbfa9a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3173df81-cf73-4a6b-b023-9ff1ed0e28b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79d2090-d1c6-4cac-ab28-42ad93424921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c5f40e-6552-4657-bd29-dffa865fce5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749b860a-7400-4e63-82f3-8189284a3136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef2962b-58c7-417c-966f-56c8ef24c39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58c77ac-0b6a-4963-9c67-e91d778f5d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e382a49e-c4fc-4fee-9f08-541de3e096a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6a42e6-cf18-4216-9574-3605537bcb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b0303c-5ca2-401a-aa9b-16d0d32a1750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e784aa27-a7d8-4675-b338-854e43ecf866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfd63ec-35e8-4cb8-a50d-289412772ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7605fd-f926-4e5a-9900-65be78b7450a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30031877-8165-4a91-a109-e4ff5b186f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1486c81b-c2ee-494b-bd21-86c7b9182b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48498602-d690-41d8-b125-cf84f0c5bcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098a4cf9-22c3-4604-a558-e1f0596f3d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460093a1-2c52-4839-85c0-cb1c93e740e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebe7c2b-09d6-4702-bd35-47d84f93552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a474b0bd-b8b8-4ca0-9bc0-09691cff9e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cf028d-3881-4e66-8fe7-b9f970465a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8da964-3c92-4dc5-b76f-46016492f117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556ac46d-2cd0-48b0-a591-6a87c5d8271b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2462a0bf-3aaf-4a02-83a1-8cccd2915cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f6ddf5-f4ec-471a-aecc-e4ea41e8adc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc65225-3920-412d-a1e7-a2643552a60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7462773f-086a-4462-8f72-fb50f73755c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a33603f-a421-43b8-b9c9-c822ea6cc7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f992d1a3-1b66-4550-aab5-f3c140544e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72009a1-14bc-415d-8bef-7b033b9d5b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d8caf0-f99e-4f64-a651-f1e18fd1fb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6a2af0-9608-43fc-a110-494bdb097c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.25.211.108']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a2a39e-cebb-47e0-ab39-3f68a48f7fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.107.77.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29173189-5691-42f1-a9df-f4f1bfcc75ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.108.22.220']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff03f51-244b-480a-ad1e-e21ba975e401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388305f9-3eec-48b7-aeb5-50fabde2dffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737d636b-e643-4604-8592-0f437974772e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.41.211.249']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aba00c4-5ff1-4222-b313-fc855b05838c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4ccf86-70f8-48e9-8d58-01993dd6b051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c1762d-94e2-4abd-904e-42e9db9bec6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3107597-f302-4409-a887-b2c02853827a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e92ec0-b5ba-49a7-8d0c-c3e968ace7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45420797-0005-45a7-bc2b-df561db63be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0b25f0-76be-4369-90b9-18b533e12a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.117.59.39']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68261403-14f5-4330-8c90-71b5266e418d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d599193-6c36-4fd1-9649-4fe094644312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d7b191-4684-4772-925f-accbd0be5b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.10.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6219a561-26da-468d-9c4c-3eec0b6ae09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40136b67-323d-4b25-89ab-d37389e16152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.18']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4634db3-b4b4-4123-ace7-ea8ca65697f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.27']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8d5b3d-35f8-4791-a020-074177bd3bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.4']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e426a2cc-16c8-4cb6-a3af-b6375e225315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.40']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af6012e-539e-4155-9f4a-a5451ddfd58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b523a8da-6775-4080-a2a9-f7ac608bff5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.56']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3157ab-db36-4768-8f34-d4c3a87456eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b32aa14-6b43-4f9b-b001-393458c12317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.67']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a4bcb4-e89b-4071-87b0-d142c4b1e62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.77']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2978632-5786-47c0-ace8-b4b785d1a022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97675c7-267f-4623-8ae2-7b49a36fb55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.93']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447cafe1-09e8-488c-bab9-ae6e988f0130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.17.196.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4aff6d-ff2c-4d33-aa52-bae18dfa8ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.128']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87acb628-acfa-4055-913c-bde792ef18cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.15']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754fd9d7-a70c-4eee-b679-5f55a818058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f578aed-d022-4f14-ba0d-78d9891f9550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5384bc-eb41-411b-8d83-9640e862910f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9de56c-70f1-4dfa-8429-62b21c39e174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.241.172.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb03f2c-ad89-4763-b459-f278a2917ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323d591e-11a5-42ad-83ce-c758527d7555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62535e45-d974-44ac-b063-a03eee65e5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77844f37-01f2-454a-a17b-13f962d8e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db98f7-786f-4452-b84f-c21883832638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.135.73.205']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e02ae8-431c-4a88-9d23-651cd3a55fa6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.162.18.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6623ab38-8797-4155-b821-9b23b17a37b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.11.43']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8460d4-1c14-4032-9a99-325f8be9106e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.190']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a40164-9510-4185-b269-1457ec739c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.191']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef96288-19dc-4f4c-bc7e-ab5c6a45dc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.192']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b059c3bd-cf6f-4e3a-886f-e4eb432d2a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9738cd-93f4-4184-b87e-4000e7ff3faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab07680e-0171-4d2e-a781-4b357a3e8acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.150.48.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478f13bb-7df6-4c67-ba28-00703f32b272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.187.80.32']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097be3c3-69ce-43e9-8fce-dfeb811ee399", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901570a7-4b67-4397-bd85-6d1391b8f674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41846318-18ea-4ab9-9876-a567de9ba059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.28']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c79512-43e0-4cd5-bd06-5040e17530fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc50328-a694-466e-b664-ca9ccf02977a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2443427-09b4-4adf-a283-9869628f5ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b00f5b-c442-4e15-82dd-92b0c72b31f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.48']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffc793a-17fb-4645-85af-0eb7f4af5a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.61']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4186bdb3-dc70-4d09-b288-26f6aa020423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41108f6a-63c0-4684-b2a2-0004a5be11a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.227']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ca9bcc-225d-42ce-9cea-a4e88a9d97e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cae1118-6e08-4423-ad82-0de77e00eae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.116.208']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e16b8-cc6e-4f58-a6aa-1a910a560f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.103']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a75177-70b3-422f-b263-868d59a12136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96081199-63df-4240-a770-c687f2715bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.157']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370cc9f2-c150-4679-8f79-193d82ca49fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.39.105.65']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50fae11-8ba8-4c63-9493-daeaf48d9b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.110']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fe01e2-3205-472c-b266-d2e23d61144f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.136']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7e3577-8459-4d45-a8e0-d4e72372914f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.201.189']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60439f57-dd05-4f22-86e7-cad810473237", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.46.200.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771aca70-9972-47fd-b444-aa471aba9862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.106.45.102']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede3a6ff-b3d9-4a3e-ae0a-ab26de12c346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5e4202-d9c4-41b1-9135-212298af2c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.151.83.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369e0aba-4b5c-4156-883e-e6e70759ddb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708f7762-c705-4edb-8967-939d7bf03d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88e2299-8ac2-4812-b5eb-af385477fe7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11625537-62d6-4936-8fed-5de71d9a0ec7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.232.68']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708f8392-0d76-4aab-a9d8-e63b2a975dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47df6390-8ca3-44a4-b6c8-98b24f706749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca3c57c-6c9a-488f-ac6a-8b42e6f1250a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.162']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbd7769-b7fc-4fef-8b8a-1d19ca1294e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674f7d2a-3765-49de-98e5-94190a4a68a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42f8aab-08b7-430e-ad84-a0cb934b8584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1afafc-a656-4f08-b54e-c04230735833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.66']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a857c033-a050-4bb9-9e5a-965a80f39556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.74']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bbd2ff-a95d-4a4e-bc48-0610875dc3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.82']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091fe84d-54a1-48e3-ac26-cd4c59b04c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f7d4c7-9158-4a28-bfea-f7ae11ac89f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bca3ee7-20bd-46e9-bafa-bbff320caf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0c0fd5-36f2-4aa5-9c3c-fe9afc10cd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7310fac0-7762-4305-88c9-b619a8a40f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.122']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a94376a-7f13-4aef-8602-ad8a46ff9697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d5d053-1dcb-4172-b7bb-539f82e0ed13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.206.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c0b607-d2a7-4e25-a64e-31f52375b662", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.248.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc42d664-7ae1-4699-a2dc-46c9569d2706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faae2c2-aed9-45ff-8793-76805ae4db5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.62.79']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b915ce-7edc-4dde-98be-749f27cdb7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.63.36']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621da1a5-2d8b-4cb2-bee3-34687a1f71dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c30885b-bcc8-4dd3-8b25-bd8bd5f2478a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f07e95-ca67-4534-abf3-eb1ee4d89a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.130']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e815eef2-d5e2-496a-8752-cfb37cceaa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b01c1a-5eb1-448f-abdc-9156391e7b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a10163-527a-4718-865c-1057065de17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f275ab-adea-45ca-9e68-529bf822059d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1133710-ad50-4ada-b257-1bf76e4b9516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635c3965-de1c-4dca-8bf6-dc0f86c460da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3c4ec4-ee21-4057-af1d-a1219ee2ebda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b41ee9-7793-478c-b722-c0b8a32af0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1f134f-2228-40b8-8574-4d599bd9cf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a09faa8-c29a-4afa-a879-32897a05c983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0621fa9c-4b5f-4aba-baf5-4be3b2b92bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac7688-8400-41ca-8b92-51c2a3846aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25eee85-9bf7-4587-914d-1382ef8913c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68843d6-9e00-4d3b-8dd4-b10d6bcf5acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf271a3-12ca-48e0-beaf-a0bf14734e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24ae6f5-6560-4533-a851-7221bfcdd927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.47']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6838fd7f-40f3-4e9d-adf9-5ab30f72e222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.49']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47884ddb-42ac-42c1-8b55-db22e23af9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2d9189-83bc-486b-b0ba-7528ed0dbd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.24.1.201']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ab6f01-c5a4-43ce-ba5e-3188c70546a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.244.58.63']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9e3bd6-c238-48b4-8813-5bbf16fd0306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7589f8c-21fb-4862-8592-1771945c2261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23968b67-1a17-4ae7-988f-d6539a1fb945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.235.104']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.195']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9eacf6-9aa0-4a58-bd18-85c2da1e0431", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.196']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cc57f4-e31b-49b7-8640-dc84cac9d7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac220dd5-10c1-4f90-8669-ff261fece2af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.23']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15d8372-ab1c-4828-9cfa-7ce00390b1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.235']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb8efda-3422-4d38-a20d-9eaee6dc2240", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d7756a-ddd2-40d8-8160-19377b39c09a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.119.36.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3876994f-88c1-40f8-9870-c3b16ef8cb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.154.95.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74fdd7a-ba81-4e3c-acef-17f978f195a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.246.87.54']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d6428f-d711-4ae8-b2d7-e0f578f0dbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.145']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6686ab0b-0537-4068-81a8-030dbadab9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.180']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034f8ad6-bfde-4cc8-90cb-d1c41c83f24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.181']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b1d166-9b33-48b8-89ec-f026128626ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.182']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c22a425-fcda-4a4e-9fea-59ce212ab732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872a1af7-71df-45cd-8ce9-cf67e2c397b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642483a3-1759-41ed-aa5d-9f60bd4a2f26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.99.212.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f00c812-aef6-42ab-af97-76a3a775a900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.109.110.221']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15831968-059e-4828-967e-338ac2cf8e6e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.10.194']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c4ce19-9bfe-4a2d-8111-1ae5d9fea8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.25']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dbf3f1-dbe1-4578-b5e7-94db15eb72c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42f9604-757e-4cff-b4b8-fac0b233c459", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c4b721-13d6-4c95-8cee-c0a7c572375f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.14']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3cd585-c2cb-4e33-88f1-b87c3fd90e5e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.2']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af70fdd-a9b8-4a2e-9d12-bf7077251d85", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.22']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e9a654-0e6d-47a6-932f-1c96780f6417", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8659953f-692e-4a50-b023-9073237fab8b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efb4358-5784-4fc4-a38d-171149e944a5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.38']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945c57f5-f262-4013-8f34-ce896b798437", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.42']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29187de-a667-42c0-b683-91e3d457de9c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.46']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec8482f-9499-4bf8-b958-c0bfca9e8414", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.50']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90355be9-55b8-4523-b2d7-243256a81ee1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.6']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9debb46c-147c-4bbc-afc7-eaf59aa454fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.173.113.246']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808f8746-c74f-4067-991c-3382a8413833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf7db4c-1a23-4d14-93c3-7473bdd43229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c23d9e9-07c8-4d44-bb3e-dcc74aab7d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.185.167.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e3e898-4e15-4a1b-a2b4-0a4a24ff4045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.191.74.134']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f29d320-1c1e-4d21-a6c3-58578669c994", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.225.161.199']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0753582d-c6b0-42ad-932b-4a0f98adb3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394243ca-2c14-4e40-8715-beeb7ae46285", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaece80-130c-4e40-a600-ca370aece489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a49de61-45d5-4088-894d-cddd1d4c6583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.73']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd358099-e6e5-457c-9660-a50f4d31b679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.155.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd933e6-3e56-4f45-81b0-d1ca4fa87277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.205.145.111']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dde5aff-52a5-406b-a908-b79badb5bb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e3ac47-ea06-4723-874f-39c6e57eb07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee409a4-1227-4141-8839-777fc019ff1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdf806c-ac6e-4eee-aa2d-3066864edc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.251']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca4096-78b5-4b40-891a-c524d54e9b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.232.27.171']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48afc73f-4baa-4518-b2ec-1bf1175f3afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.232.40.89']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ebb86d-3164-42dc-8364-b401853d55ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.242.168.80']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f450e4-0521-446e-bd5d-1401386f0011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aced865a-8301-4f32-8156-a67ef40e3976", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.148']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8a1aa7-2aaa-4ba4-8d0d-e5ac4da8f16a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c783a970-8439-4dea-86d9-ddeb2faf44f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494b0aa8-e63d-4fda-84e8-02f939126325", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3762ec3-9159-4362-a043-2b9bbe68a192", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.64.99.120']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac63dc2-aff3-4b90-85f5-2a4ee657ab04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.234.139']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a8873-8c7f-459d-8989-03dd533d33f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.140.19.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ae477a-889e-4700-9a2e-95554f37ad2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590ec17d-65b1-43a9-b4c1-c7a8450acae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.167.225.76']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba27a01-5a80-4d9a-9ea7-2b25c6d4c78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.168.164.241']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144d6bab-69f5-4c3e-8845-a881401c5162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.174.71.152']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7c6a5b-7f1b-4558-b8c9-585738a6acae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4f5cb8-d25c-4f95-934b-2eecf754c95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.9.217']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07b9cd6-8423-4fbd-a4a8-13d76319fdc5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3e5c49-91c3-4574-96fa-e7dddf305d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d15e94b-e629-4dea-9bab-17f6f1cb99e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.32.13']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96796de9-1ca2-4d2d-a2c0-b5d33e93e3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.217.88.101']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43672c7e-28ed-463d-9b8f-3647b8899a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.244.163']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e93e1a-2ab7-46e3-897d-cf86194432a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.244.164']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccb32c4-3c12-446b-ba1a-31eb7f3425f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.9.181.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa43cda-3924-47e5-90a2-bed2f913c2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.90.13.168']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049dc8b1-cb6c-472c-acd0-9660a8368582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.104.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be62cac8-b7da-4f3d-a069-bfea1f55d45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.177']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1006019f-12ed-43ae-af9f-5518ab84eb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.152.236']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7b6864-9cda-4add-b8cc-c80a341d347f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.153.174']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f746c8-3679-4461-bf40-a4352119dd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2758fd-a745-4070-83db-13f977b2f129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.175.154']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76319c67-8299-4b23-bf23-5b53a741cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.26']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a6ad37-320f-4f39-8261-dc70cbe6a0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.34']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb93f8b-aba3-4fe7-bcd7-bb54e45b5a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb4794e-fe66-424f-bad9-bfdf030ab28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.139.94']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087ef718-fea3-4cf8-af09-5bbe980cbaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e5959e-7f99-4dee-839c-6d64791c053e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac1b314-f380-483b-a2ea-5aded07bc53c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.155.23.253']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faccab2f-322a-461a-8f3e-2a69fd1c4ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.175.89.72']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81456a3-ec5d-4fb2-b38e-bbde2d36688d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.186.187.167']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2292507-c1f8-4041-841b-0bbe89359cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.24.190.20']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdcc09f-afb3-47dd-a757-9d96d785822d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.26.150']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87136a9-1787-4b8b-af4d-6b7e1938abe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.84.188.17']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a069ee22-ac26-4771-a0e2-348235c60f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af96ed2c-6e41-4d83-8efc-8757a0b80a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317fbc55-d9cc-41aa-8dcf-39533a14e908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.245.202']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f432322b-38ba-406e-bc21-7e66151e9264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.192.162.179']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab081e88-91d8-4771-8536-6d5889571f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.239.70.204']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259df56b-6d3f-4239-8972-2ca40bff38c4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<!doctype']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2489b4b6-a8e7-4be1-94ee-8b9c81bc25d6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</body>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853f74c7-275a-4214-a2ec-1620ed1f3931", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</head>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f48cfc2-46e9-4d10-9b40-3c007e7d6004", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</html>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb2588a-cde3-4c84-878a-429122ad79aa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<body>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef57579-ab01-4937-a0cd-065b7dc2fb15", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<head>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc73fcb-b25a-406f-a5f3-7c785d717405", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<html']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bebcce-3829-4a7e-8f1a-bf3891a5413e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<link']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2677965-7d31-4d50-9ff8-af6f7179aefc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<meta']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0d38ca-a1ae-4747-bd48-9692b3f4be77", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<openclaw-app></openclaw-app>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f11642-2e23-4ea9-b52a-41d90eba6573", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<script']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446b73bd-04cf-410c-808b-8b08785c6361", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<title>OpenClaw']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6433b388-31e1-4d7d-aca3-7000f7b1d0db", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Control</title>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d48db0-f3c1-4387-aa0d-e496d8629bfa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'charset=\"UTF-8\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553bb461-d2c0-402a-afe8-9d4022f9a4c3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"dark']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40919543-878a-4e66-86a6-e90fcbc86b11", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"width=device-width,']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa6a37f-0e8b-44f6-9976-97b3552ffb2c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'crossorigin']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c187576-ddb4-4b20-b906-45fbf4340bb6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./apple-touch-icon.png\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0218ed3d-0c7e-4579-aac9-ee3aaba947c6", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/format-DeRVtGzv.js\">']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47882954-7e33-4bb4-82bc-29236d7f323d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/index-DmrclaY-.css\">']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f1ebef-281b-42d7-baab-525bec8f79b4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/lit-BZwq2xLD.js\">']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda4bf30-f9df-4fec-95c2-5df84e73442a", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon-32.png\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8c34da-1016-4198-abcb-b21ad23bd012", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon.svg\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6532f8-a648-4255-8517-e20556f7c949", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'html>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2633bf-67a8-405a-9d52-d93bf3282531", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'initial-scale=1.0\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318b7f72-acaa-4d03-a90e-ad40b878df6c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'lang=\"en\">']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888a829f-c813-43e0-808b-1e7e653fb3ea", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'light\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379423c7-0a4c-4a05-ac89-c90a1badf589", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"color-scheme\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989a5928-e501-4446-95c1-55ffafffec59", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"viewport\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b90a4e3-4e30-4f3f-ace7-2f84c115bf99", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"apple-touch-icon\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2968348f-71a9-4039-9f90-2aa06326ca6d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"icon\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11f0038-d4e2-4727-8263-f388cfbc32f4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"modulepreload\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a264578-78f4-4e4e-8bfd-5e8da39ac567", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"stylesheet\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6152720f-60a2-4527-b9ae-feba4707f055", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"180x180\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c2fb6a-775c-435a-a4ba-a2b6b820f2b3", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"32x32\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8330d3-75ae-4625-b0b1-9b6f7ef1d510", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'src=\"./assets/index-UvgeZ3yV.js\"></script>']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f345c156-c7a4-4c1f-8c98-1163b4e39269", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/png\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0d0275-6dc5-4ba2-8c31-0a0cc06e10a5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/svg+xml\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d868ecc-d1ed-4777-b523-b89032f42c2b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"module\"']", "pattern_type": "stix", "valid_from": "2026-05-10T00:00:00.000Z", "valid_until": "2026-06-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-10-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce52ddbf-5427-4c43-ac5d-7b5b04cd7b08", "sighting_of_ref": "indicator--21a69bb2-681c-43bd-b9f8-0cf2019b0d39", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c641fd7-f870-41ed-ba41-8325b77a91fb", "sighting_of_ref": "indicator--c42ec558-62fe-4eb7-bf10-8efe9f21b6ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4752dc8-17e3-4905-84f3-cc418c79c510", "sighting_of_ref": "indicator--f25862df-8959-4500-b82b-1a576aa0cc76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57a2cf8-9bc4-456e-b93c-587503676bf9", "sighting_of_ref": "indicator--f146828a-6efe-44ef-9e2d-e75b922c5b44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e235d59-ee70-4b26-98fd-64689f84aed9", "sighting_of_ref": "indicator--009f7ce5-67bc-445e-ad8f-43b9d01ffebf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a095fed0-15d8-4191-a1ca-0fbf3d0b8430", "sighting_of_ref": "indicator--18458a7a-25f8-4d55-929d-a40da743b6b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5ab554-d725-404c-bad0-7de5a31b0368", "sighting_of_ref": "indicator--62ae8b55-dd66-40f8-9e44-4ff748eea32a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49980bb3-a82f-4a32-8652-b6bce9386781", "sighting_of_ref": "indicator--62ae8b55-dd66-40f8-9e44-4ff748eea32a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e797cc1-284b-4e23-9563-df566822cef3", "sighting_of_ref": "indicator--cff37653-8402-4b0e-bad4-ebd96a8d0cc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dc16c3-e1de-4fd0-a8ba-20b4b54411b1", "sighting_of_ref": "indicator--cff37653-8402-4b0e-bad4-ebd96a8d0cc0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb16165c-c773-4fe0-9da1-6b5b13fc0ab6", "sighting_of_ref": "indicator--127b0c98-262b-485a-92b8-2bc6ff1dea02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987a453-fbf9-4c69-b80d-b583ddb76157", "sighting_of_ref": "indicator--7735d806-02f5-4a7a-8650-dc015b8f8571", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e179e81-5788-411f-976f-679091c764d3", "sighting_of_ref": "indicator--e52f5629-98d9-4ece-a140-3ed950160fea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b9bc12-36db-4544-a304-09c615866423", "sighting_of_ref": "indicator--83bcdf7b-460f-4f9f-b63a-3a40147e73ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38da8131-5221-4f87-bb02-9f6801455b93", "sighting_of_ref": "indicator--80c2edde-b3dd-411b-bd12-78c4b6afadff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c65960f-ea30-446e-b184-d79d6a3c4304", "sighting_of_ref": "indicator--80c2edde-b3dd-411b-bd12-78c4b6afadff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212f9f89-7ba2-4253-bdf0-105719bf3d34", "sighting_of_ref": "indicator--37040528-e289-4b96-aaf5-325f2bd91453", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1559d33c-0d55-4ad6-8a3c-c12a46b8f772", "sighting_of_ref": "indicator--ee4881d5-f99f-4a97-9262-4194931263d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad1b705-ec44-47a5-b241-9579da4fb21c", "sighting_of_ref": "indicator--970a1281-428c-4286-a359-95f7d3e8a109", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac46e01f-c4bb-44be-b493-f034e8be3505", "sighting_of_ref": "indicator--bf792ace-fac8-4f7e-b6d6-8e5692470a6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db3d0b0-0607-4d47-9349-42ae3d076a10", "sighting_of_ref": "indicator--270e2b26-bdb8-4d6f-8191-2604dc4ba394", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a85cd-dc85-49c7-b2e4-b2c56acc226c", "sighting_of_ref": "indicator--80575832-3e23-450f-81ab-79f391a75f4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ff1c66-785d-48b7-bc7b-9e7e35d602d7", "sighting_of_ref": "indicator--2206ba88-b7b3-4eb8-88dd-aafeef1982bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52516a91-7f0c-4c49-bb35-7c0bd198b0fd", "sighting_of_ref": "indicator--95020ec7-f873-4bdb-abb7-1c66e42dfb6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bd68c6-2f32-4ea1-8067-e16f86b7079d", "sighting_of_ref": "indicator--95020ec7-f873-4bdb-abb7-1c66e42dfb6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e025a68-25cf-4e94-afa6-220d471165a4", "sighting_of_ref": "indicator--128e8f06-f1c0-463d-a262-618ed4816443", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590035a3-5163-4a77-89a7-f4a5a9b74916", "sighting_of_ref": "indicator--46c3aaa1-9de2-45b1-8322-028738c7e20f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a692894d-3809-40e0-a8ab-7bbc83b1594b", "sighting_of_ref": "indicator--0bcc1f85-e8f9-48d7-9bbd-2393e8a28ad5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e56b916-21ce-4dc7-aef8-7236922cf205", "sighting_of_ref": "indicator--620f5c35-861c-4104-a365-a95141cc7b8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fc619d-7061-421f-9825-623776249e2b", "sighting_of_ref": "indicator--d3b2348c-e7ef-4604-99df-c8e6ffba7c61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaaafc1-a6cd-4618-8e8e-df6d4936190b", "sighting_of_ref": "indicator--ba70b536-ceb5-435b-b806-f26678bf9b5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2fdb2f-c8d3-49b7-8140-788a08237591", "sighting_of_ref": "indicator--c04ff51f-fab1-4902-9996-c20edca85c98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9dda95-a100-4a88-9128-e30313faf3db", "sighting_of_ref": "indicator--97393947-0f1b-4247-8d6f-1ba4c0e09027", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab4fe7-4f7b-4386-a2d3-2ad4e1f623b2", "sighting_of_ref": "indicator--dbe03cce-b1c3-483b-a040-2a14e3c46c4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad9de7-62d4-4932-853d-8b656422f2b1", "sighting_of_ref": "indicator--dbe03cce-b1c3-483b-a040-2a14e3c46c4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d7df14-8ece-4092-b282-ff7360e52f4f", "sighting_of_ref": "indicator--c243bd0a-cbbc-49bc-bd6f-c178bd945b47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409133ea-bdd7-4361-8217-420a83314d60", "sighting_of_ref": "indicator--50c218a8-09cc-4cde-9398-2717aae8a46f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c70703c-4919-497c-8fb1-84aa00889e8a", "sighting_of_ref": "indicator--cfef2dc9-64d9-4f5e-a91a-9e26173d560d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4287db34-1756-42b6-8d9f-32bea6cab5e1", "sighting_of_ref": "indicator--cefb1cde-881c-447f-b552-7ac1744c9d7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f55ad9-2326-4aab-9492-488f17fcfd75", "sighting_of_ref": "indicator--2f114e0f-1158-42ff-b08e-d68259c67cae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79565caf-c94d-4c83-abc5-65bd49976a3d", "sighting_of_ref": "indicator--1a43faea-e531-48d7-9cc9-6b1f0284631b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba642f-adbf-4824-a07d-a734fc40ee92", "sighting_of_ref": "indicator--333133fc-bbf1-462c-81e7-468d42b019b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3284d39-694d-47e8-913f-a352f203472e", "sighting_of_ref": "indicator--69364c31-c06c-4070-bb92-c371b475a074", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a81ff55-7ea1-4534-8278-5e30fc654423", "sighting_of_ref": "indicator--69364c31-c06c-4070-bb92-c371b475a074", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0679330b-4201-40d3-86d4-d2a6353c28a7", "sighting_of_ref": "indicator--0d757b69-3c1b-421d-b05a-8aa484b550a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92270df1-d530-4308-84d8-7ad41dc95701", "sighting_of_ref": "indicator--0d757b69-3c1b-421d-b05a-8aa484b550a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f210356b-209d-456a-b70d-b4a8cf52dcf0", "sighting_of_ref": "indicator--22153d74-df42-49f8-8792-b514a811a7de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa3b74e-6fd5-4273-a54a-b8643cd48225", "sighting_of_ref": "indicator--22153d74-df42-49f8-8792-b514a811a7de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10ba0e8-2dbc-4fcc-9039-a597bb908230", "sighting_of_ref": "indicator--262d6af0-d508-4f9b-ab2e-0923292c36b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e040dfaf-d265-4110-ab23-dfc699ff1bc9", "sighting_of_ref": "indicator--be6c6e2e-bdcb-42cb-a23f-32687bfabbcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba18026-e0ba-47ae-8386-77638b4340f2", "sighting_of_ref": "indicator--c4203aaf-5489-447a-b357-3ba7010ab7c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f017a632-ad7d-4ee6-a315-01ed72243e0c", "sighting_of_ref": "indicator--f9f6ac87-a703-4f99-9751-860082a61278", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2b2260-e61b-4f9e-99bf-1b327a021580", "sighting_of_ref": "indicator--a3acefda-4cf3-4852-abaa-75cdbafc1014", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d844832c-e494-4809-80a0-15ceea07381c", "sighting_of_ref": "indicator--41fda89c-eaa1-4e24-a286-5974692740df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8716f40-e7cd-4558-adb5-82a926242a92", "sighting_of_ref": "indicator--41fda89c-eaa1-4e24-a286-5974692740df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40588c86-f35a-4f3e-ac27-8cc7a62041ce", "sighting_of_ref": "indicator--20fec6be-ce74-46aa-99d1-8736bcb8d93f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f65f8a-954a-4971-8e53-d31bd9d95284", "sighting_of_ref": "indicator--b8a9d1ee-f363-437d-a6c7-fec5ca91850c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a56a7a-bc5f-46d4-9586-3bb6d57855e2", "sighting_of_ref": "indicator--a678f5ce-c4a1-4f9c-bf0c-7272b1cccc03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f7837c-6375-4695-91ce-4055ff3327f0", "sighting_of_ref": "indicator--eba63077-deec-463c-8c0d-baf34511db88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e559df9-6dfd-4122-962e-8d87fe9bd718", "sighting_of_ref": "indicator--cb1e3df7-3bdb-44d5-b453-58aee79471b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b300d61b-d2a0-4698-b350-abf2e38c0bb7", "sighting_of_ref": "indicator--b41b68e4-7ef5-4190-827b-e26eb34faa44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9eef55-c679-4a3b-93a1-87c8da0ccb27", "sighting_of_ref": "indicator--df3b5cf3-6843-440c-a49c-c4cb96ad6437", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a97954-886a-48c6-9b6b-c7c106004f0a", "sighting_of_ref": "indicator--3d5a76fb-4a67-4183-8b50-d4f60becc6dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a370b6f-adbd-4b04-8d96-190afc25fb1c", "sighting_of_ref": "indicator--27eba9d6-5fc5-4f3b-bd91-1fc5614017fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88c46e9-f91a-412c-b998-5b9b2b5711b1", "sighting_of_ref": "indicator--8980391d-cb16-42fc-8356-37bbf4f84d33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90fc8bb-bbcd-438c-a164-e3fbc81744fe", "sighting_of_ref": "indicator--8980391d-cb16-42fc-8356-37bbf4f84d33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23290e9a-dca3-4c1d-855c-7fb0b783f5bf", "sighting_of_ref": "indicator--74414113-5330-49f7-9f5a-0f77027ffd42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42323ced-a78c-40c1-b39e-62aec02346b7", "sighting_of_ref": "indicator--955f90d4-e128-42ed-a737-bfa6592479d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bb6807-bb9a-4552-a5ec-83447e810e69", "sighting_of_ref": "indicator--b957a644-8e49-4ed7-9224-512b7887d4ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d58c02e-9771-4035-9596-95840b88db27", "sighting_of_ref": "indicator--0f2d05de-6fb9-48d2-acbf-d8558378d29e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564e4066-1342-4ebf-885b-fb90019ace96", "sighting_of_ref": "indicator--3faefd97-81e8-40b3-9601-3474f9da8347", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d28829f-0cb0-47ef-939b-bbff471c9099", "sighting_of_ref": "indicator--9748eb00-462a-4e5e-9b4a-5f51c31b4be3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fec2aa-1639-41a2-bd94-dd9867509f23", "sighting_of_ref": "indicator--846c226b-738e-4477-b123-a25655c47458", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a68a51-2cd1-4865-97d4-071c8c119d65", "sighting_of_ref": "indicator--846c226b-738e-4477-b123-a25655c47458", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149222cb-1b8c-42ed-9f49-3517a0d5d8d9", "sighting_of_ref": "indicator--3eb14d73-10cb-4723-9f7c-c7a222df8155", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee3150-3360-455c-b3ea-0227546141a7", "sighting_of_ref": "indicator--3eb14d73-10cb-4723-9f7c-c7a222df8155", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26c9e2d-974e-4324-9f63-795e8d74f68c", "sighting_of_ref": "indicator--0510d603-100f-4b6f-8be8-62ef0d3def7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0551b86-3ac1-45a5-ad6c-099f8acece63", "sighting_of_ref": "indicator--4ad8d013-1657-491c-930d-726738f4dc97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7519f0c9-1de8-447c-94c7-02117b7f8ec6", "sighting_of_ref": "indicator--4ad8d013-1657-491c-930d-726738f4dc97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a77f82f-9d92-41bc-8454-552bd8174db0", "sighting_of_ref": "indicator--b76affde-a9d0-42ad-bea4-120318fe7074", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d224ee4-5ef2-4266-b6c5-43de0c657de0", "sighting_of_ref": "indicator--dba64bf2-67e2-4329-82ab-45710a78064d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b1a5bb-8d8c-4ce6-808c-bcc5f9400ce6", "sighting_of_ref": "indicator--5b198408-0e0a-44e6-9ffc-37ad87f56ae5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeb97b5-ede8-4a42-8863-c3f7e264328f", "sighting_of_ref": "indicator--5b198408-0e0a-44e6-9ffc-37ad87f56ae5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ea8f07-05b2-4f6d-8255-7abd82fac9e1", "sighting_of_ref": "indicator--402d087b-134c-4096-8de5-9641d45679f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecd04ba-0ad3-4b60-b964-6387093ff3fe", "sighting_of_ref": "indicator--23cd27d0-abcb-42bb-9c9c-a78504ee0e45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6b2240-7930-4f1f-b80c-9408afe74d8b", "sighting_of_ref": "indicator--23cd27d0-abcb-42bb-9c9c-a78504ee0e45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50360b6c-bad6-4321-b3b7-308466fc6e50", "sighting_of_ref": "indicator--2d70f5d8-5dc2-408c-af90-fb4324be0aba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf4284a-a587-4e69-b62a-27cf6ef73170", "sighting_of_ref": "indicator--2d70f5d8-5dc2-408c-af90-fb4324be0aba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0fde49-1fca-41d7-a704-d3505e73d9cc", "sighting_of_ref": "indicator--ad5ad948-6542-4282-af3e-bc7eb52408df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee1d6b2-e8cf-41e9-a1f0-a15690c55bbb", "sighting_of_ref": "indicator--cf3265fb-cc11-4c32-8e31-1cf65a7d90bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7567405-5ac1-4b19-8043-528a8f3d0969", "sighting_of_ref": "indicator--90a40d1c-08da-4a5e-bdb9-ab25e03bbb3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0b04be-086d-45dc-ac5d-d233fd6be4c4", "sighting_of_ref": "indicator--90a40d1c-08da-4a5e-bdb9-ab25e03bbb3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33105e24-5374-44b8-85b6-c2e472652ac4", "sighting_of_ref": "indicator--f4673639-7867-4898-acc6-bdfb0ea45d33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eb5640-4604-4324-8476-fce09b4de1f5", "sighting_of_ref": "indicator--f4673639-7867-4898-acc6-bdfb0ea45d33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0de3bfb-7cb0-42fc-bd37-7f0e855842ba", "sighting_of_ref": "indicator--5936f5de-d9ff-4a15-8e81-d49b18851110", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec85c91-78c8-4634-a432-518fa6be873d", "sighting_of_ref": "indicator--9af13430-6fcc-4cca-8001-775bcd248989", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0d539d-7f22-43f6-b30d-9eed292ac6ca", "sighting_of_ref": "indicator--cdffad20-c48d-498d-87be-8c9b6d347a8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995e26a7-b3a9-4658-a656-7140d0927e68", "sighting_of_ref": "indicator--77bf19ae-b350-43de-8586-5d8db88d0b28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d57da-d465-434a-b4e2-16a16fce46d1", "sighting_of_ref": "indicator--8b9561a1-906b-4ff4-9bfa-2f49c34b2fcf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccba4dd8-3286-41ae-92ac-dc09246bb1e6", "sighting_of_ref": "indicator--94c81a2e-3d7b-452d-b8d1-de3a5de339fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6470373f-e89f-47af-af1b-30e961338e56", "sighting_of_ref": "indicator--82f07ade-d6af-4387-8969-9e0c685670ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28641ff8-99aa-4e16-8dce-151ba7a3052d", "sighting_of_ref": "indicator--8589d2ca-0963-4764-b079-72d37cd79dd1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba7ed21-d3a7-47d8-ad37-063e628bdf67", "sighting_of_ref": "indicator--ed002b65-405e-47d2-9d32-f716f77d50f0", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa456a4-43a3-46b5-8deb-035ed960a6b2", "sighting_of_ref": "indicator--cf724e2a-d1f1-4843-bd35-9b5efe81a5ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeb9108-d22e-402c-b634-0c40dd7203e0", "sighting_of_ref": "indicator--239ec9a5-bbee-42b9-88ff-5d9f917064d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9235cc52-1d5e-4808-9016-8575a9d2cf8c", "sighting_of_ref": "indicator--52650233-7444-4f91-bc2e-cd89574ed98c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b07370-4c1b-4f73-a4af-cddb0b166d38", "sighting_of_ref": "indicator--3214a3d6-2575-4004-8002-5354d3193ec6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763b9da3-3732-4e99-905e-f6942f11ac2d", "sighting_of_ref": "indicator--467c5e6a-97d9-4afd-8498-aff6b7c11646", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74576408-d959-4a9e-8608-396cfcd3f32b", "sighting_of_ref": "indicator--b14b4a2f-0383-43a0-a114-aebc8ce7fc4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6417b3a-bfe5-4c94-b3c2-fb8d0ae31211", "sighting_of_ref": "indicator--693328cb-1553-4cdc-a2ef-85de459fd1b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd82a7a-3cb3-4d65-bdef-6c2510fdc5cb", "sighting_of_ref": "indicator--7c192ad6-c0d8-4b90-9043-79f89751a7b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd348a-22d3-4175-b765-1d88bac81f27", "sighting_of_ref": "indicator--71f4144f-5a14-4dba-9f6f-139dbfae8891", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c073262-a974-4b37-b744-85808c253673", "sighting_of_ref": "indicator--5a97828e-067d-497f-9e10-0b29f0cac691", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4493c-75b8-4c1a-90fe-e13c8b7468f0", "sighting_of_ref": "indicator--5a97828e-067d-497f-9e10-0b29f0cac691", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453aed77-95ff-44e1-9340-47b129ba8a73", "sighting_of_ref": "indicator--2407dc3c-154a-445e-bed6-528851b71b55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d672ba09-1379-497a-a443-a9252b1ce582", "sighting_of_ref": "indicator--abf6423c-80f5-46f5-9e52-4b52c4b1b8a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe74bee5-76da-4ead-877c-93c5ba35c3aa", "sighting_of_ref": "indicator--08927b53-c3ca-4d81-a645-8c2394912049", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3b983b-6074-4005-a7eb-452bb92a9078", "sighting_of_ref": "indicator--7b535193-7f0b-4c86-9273-087957fed3ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efedc787-206d-4c8a-8543-188bed9f62dd", "sighting_of_ref": "indicator--5dad0fd6-0382-402b-82d1-6e48b037ea1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d7987e-e40f-4317-bcc9-f37dd0a4a17a", "sighting_of_ref": "indicator--45673f84-120c-470a-b7e0-f8a71d8b553f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ccc8b4-0f92-4bad-a3d1-b347718e831f", "sighting_of_ref": "indicator--37551a63-72e8-48c4-853f-748b16617546", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40695062-c344-4bca-ad9e-1fc5f0edc6a1", "sighting_of_ref": "indicator--5701f3e4-bd95-464a-a369-55d65631d53e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6eda7-0f73-4a73-ac79-2a65504ab848", "sighting_of_ref": "indicator--f4642e2b-92c3-41fa-aa2e-44d0cb4a073e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfb9c6a-1946-4729-9723-b6dff54950e1", "sighting_of_ref": "indicator--a9ff5ed0-c25c-469a-9159-5c99fbc69081", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd01493-0150-4ee6-bccc-d5933d48d69d", "sighting_of_ref": "indicator--dfd162fe-8f28-41c5-b618-c70ea602cc0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eada061e-ffab-4a99-851b-5b5c6584bc44", "sighting_of_ref": "indicator--9a478ab4-81e8-4fe3-b667-2bd6b4625b7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d540bc4-9c37-4c04-a5e2-1291504cbe53", "sighting_of_ref": "indicator--fc8877d3-85b9-41bf-b402-917de32d71ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd94a2-9773-4e67-8c63-6355ee741b0e", "sighting_of_ref": "indicator--abca7fea-6b10-4b2b-bb43-be265acc9d25", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e89683-4f1d-4ae3-8cd0-571073892828", "sighting_of_ref": "indicator--89d6c323-a763-4df1-b2b1-5a71af1be197", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1d164b-6d89-4844-9c41-659ff4cf1430", "sighting_of_ref": "indicator--89d6c323-a763-4df1-b2b1-5a71af1be197", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5a1fcd-6866-4f8d-94e3-ca221f20ba58", "sighting_of_ref": "indicator--1f60a6e6-f639-4005-b136-a0555218520c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed660c7-ee64-4a3e-849d-dd7b41129f9e", "sighting_of_ref": "indicator--b36b4332-6ca9-4334-b864-b9c18054386a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2691e30c-1ab1-4cca-a0ad-2c35c4378308", "sighting_of_ref": "indicator--7add58ea-788a-41a3-a68a-9619f1c8b35d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54254efe-b82e-4b25-aaa1-7a68669973ac", "sighting_of_ref": "indicator--3ff82f82-bfbc-468b-80a8-6cb6f3274c03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229176e9-682c-4260-a353-cb9116809956", "sighting_of_ref": "indicator--e484ea10-409b-4980-8f4e-f0efd17ba931", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e534d0-f06b-4b4c-8f23-90f706d1539e", "sighting_of_ref": "indicator--60fe9f5c-dcf3-4fd3-bbec-d62ac19e2444", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6ec815-5762-4a3b-a248-98ef96621d0b", "sighting_of_ref": "indicator--56fe2d4b-b4c7-4f10-aa00-22b1cff61062", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb5dd97-13e0-4431-9f74-9c155bba7476", "sighting_of_ref": "indicator--56fe2d4b-b4c7-4f10-aa00-22b1cff61062", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9e067d-4a86-41d4-8c0d-0a7675c02042", "sighting_of_ref": "indicator--5256a849-4573-4090-9519-41aa55209c62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ad3680-61b6-486d-927a-4b837524da8a", "sighting_of_ref": "indicator--5256a849-4573-4090-9519-41aa55209c62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558e8694-0d2d-45a8-978b-a585374c0dd4", "sighting_of_ref": "indicator--bbe3effb-a17f-47dc-9024-70062d861385", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26da28e-6926-4373-aca4-9472476779ea", "sighting_of_ref": "indicator--ee05ee1d-af21-46b0-9d67-b99cc2a0719d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f3faa2-70b7-4b79-925d-6a8fd63daa93", "sighting_of_ref": "indicator--ee05ee1d-af21-46b0-9d67-b99cc2a0719d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c866ac-bbaa-4c6b-8666-75283f7efb07", "sighting_of_ref": "indicator--fa217f49-0951-4d52-9c8c-96eecbd9ddc2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983b6f00-669b-4baa-b43b-519e70fb1080", "sighting_of_ref": "indicator--3f864035-749d-47a2-8dd0-16a02ef9672e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0979126f-cb28-4769-bc56-d4ba9e1c3cbc", "sighting_of_ref": "indicator--687c32aa-3fcd-45a1-a4d1-172c237d53da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4356fa8-1c6b-4837-ab83-318317a16e0e", "sighting_of_ref": "indicator--2d11eea7-8364-427a-8087-bd1a91426d55", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07e02c5-fb4d-4340-9521-8a9a36b93c33", "sighting_of_ref": "indicator--605ecbed-e4fb-4360-9b4a-90f958300498", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eefa79-e214-43a6-b855-52b192cbda6e", "sighting_of_ref": "indicator--1f38af7c-6aee-480b-805e-779cec3a1b2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eba18b5-f28f-4e69-b5aa-0e7c9472dab6", "sighting_of_ref": "indicator--b802e98c-9f0e-4322-960c-c35424bf2ea5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9993d79-9e68-4a9a-88a8-d12309b560e0", "sighting_of_ref": "indicator--68faf4f0-2a3b-4c2b-82e8-0d5253702e6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108e6f6d-da79-4fb6-81f6-b157d427dcb8", "sighting_of_ref": "indicator--eedb954b-5808-4653-88f0-0dd13e85c1ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350efce9-f3df-4db4-8b7c-30acbafbc332", "sighting_of_ref": "indicator--9ded384f-834d-4427-aeb4-52f7634e222c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f1b470-1737-4d34-9fde-e5c5defcb469", "sighting_of_ref": "indicator--bf3bac5c-9e44-45d8-bfb8-251fd65f4f35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ca4034-0972-46cc-bcc7-3ebd8566744e", "sighting_of_ref": "indicator--19b10293-0c04-461d-82af-039052c1e736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedea9bb-960f-4556-8a33-b5f3bb0cbc3e", "sighting_of_ref": "indicator--688250b7-2aed-47f5-90e9-621a73e769f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48723c18-dc76-4929-aa0c-a248515da40f", "sighting_of_ref": "indicator--fcebae04-5a5f-4251-aaa9-651545c168fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cae015-0ce3-4ef9-a4d7-ce206fbb5294", "sighting_of_ref": "indicator--3eb76a4d-2e46-4a42-972b-271a92e2218c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3844e5-6a80-4898-b3aa-a65182289de3", "sighting_of_ref": "indicator--e919884c-91ff-40b9-bef5-010a120db69d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c961d0-4071-481e-8c41-9202a8b1412f", "sighting_of_ref": "indicator--1532bcd9-08b0-4ee5-acbb-7ee95223e4bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b32a0b-315b-4425-b5a6-c33b5c22dd15", "sighting_of_ref": "indicator--5d2aa3be-9262-446b-9a49-7dd2780959c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b52dead-f22b-428e-8801-55a9aa328cd8", "sighting_of_ref": "indicator--5d2aa3be-9262-446b-9a49-7dd2780959c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161d2e31-5bf8-4dee-86f1-a39059f7d345", "sighting_of_ref": "indicator--a2f20906-ebf6-4dc5-9fef-b310a5bc7d2f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc3c1b-42a2-4b44-93a4-b146afbcc1f4", "sighting_of_ref": "indicator--23e5e77b-9bc8-4006-a3ae-27b8f3a076c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65129376-1c99-4284-be60-a448c066f4b3", "sighting_of_ref": "indicator--b843e3fe-af20-47a5-ab8c-f89609ce63f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576b0a3-e23f-4b27-b3cd-de789b42d796", "sighting_of_ref": "indicator--acd631b1-9e76-4461-be82-287dfa46199c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abd00aa-336f-4c5d-b8b8-88a3ad507d03", "sighting_of_ref": "indicator--7963c967-baba-4406-bbb4-f7cd7a053d7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157104c-6160-4980-b3cb-561f12369808", "sighting_of_ref": "indicator--5af3182a-0923-46ee-811a-2fc218249ce5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7e4469-52ff-4601-add6-7b5c98ed6a07", "sighting_of_ref": "indicator--a6582a46-0ea8-4b18-82d5-867f7beb70ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2bd66c-01b9-4ecd-b999-1d466f810ffd", "sighting_of_ref": "indicator--9068f67f-9066-4eb2-af9a-7b79f19691e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5530bb8a-7387-4d63-8e58-f18b68710a52", "sighting_of_ref": "indicator--b47ab53c-7a64-4657-a5d2-c37e4c11cd07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d02ee37-6e50-493f-a24a-d38cf7d103d6", "sighting_of_ref": "indicator--5204f33a-0b71-462b-ae63-ad32adf50ca1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee38adc-aeb7-48a7-9cb4-0f1a1c94954e", "sighting_of_ref": "indicator--232220a6-1e01-43f4-9d1d-041727c5141a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948d2c26-fa6f-495b-8497-89e660e9867e", "sighting_of_ref": "indicator--232220a6-1e01-43f4-9d1d-041727c5141a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767344ea-0999-49b4-b7ba-da6dcc0493c6", "sighting_of_ref": "indicator--ade95768-8d11-4a83-84a2-8465b651bbcc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cebe84-a02f-4698-a353-206ee587eccb", "sighting_of_ref": "indicator--a6dfce03-7ca5-4f6d-acca-26b295e14802", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bce98f9-b1f2-4c60-93b1-67327f947cff", "sighting_of_ref": "indicator--56abe4a3-9e0a-431b-b9b7-4eb2b078a3e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83db8e12-4635-4296-afb1-c1bde2b3e841", "sighting_of_ref": "indicator--56abe4a3-9e0a-431b-b9b7-4eb2b078a3e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8a9ee6-faff-49fb-879f-c31a494b8789", "sighting_of_ref": "indicator--3e650c4d-0616-4532-82c9-a366d5ed48dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a704ac-bbd2-4d9a-b1ee-fb67cd12ac42", "sighting_of_ref": "indicator--6084b94e-a9b6-487b-b7ef-31151b8f8f70", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a85ba7a-60a1-498c-8285-226062f6589f", "sighting_of_ref": "indicator--a44daa11-6a75-43f4-be0d-1addc4f24567", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7811d5-f1c8-4610-abf2-33aec950436d", "sighting_of_ref": "indicator--49d8f745-a571-47ff-9be2-80e184df280e", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba972293-bcd4-40b3-b94e-dbf98bd42354", "sighting_of_ref": "indicator--bad2b138-478c-45c1-8eca-ed7faa270eb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfcab71-d118-430f-a444-9f004e56ad08", "sighting_of_ref": "indicator--791a77df-a7fc-4ffa-bcdc-a794011ac3d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ec55f7-a0cd-4a6b-8993-76fbe3be7b5d", "sighting_of_ref": "indicator--1473d46c-9094-4e53-9fb5-51842f5222f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288b7fce-7f77-4742-9b05-63d0ad6cc1c1", "sighting_of_ref": "indicator--437b4746-ac2f-4074-9b18-186db7a9d996", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af41b65-f90d-4107-b3f8-fac03b904345", "sighting_of_ref": "indicator--59dd9f96-e970-4390-b58f-439032a866f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c465e24f-fbd1-4bce-a664-aa2502b1f527", "sighting_of_ref": "indicator--4d3be0a7-4efa-4bd4-8549-4f920099aaae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053d5611-c32d-4954-8a39-a35d5bf80670", "sighting_of_ref": "indicator--ffde97bd-9e7d-4618-a54f-f040611cafce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845de638-9739-438a-93b8-39d1ea90f94c", "sighting_of_ref": "indicator--1c49f1ef-6807-4d9b-b038-0355f284483c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3247f661-68ab-471a-8f9a-e8eff4e5421c", "sighting_of_ref": "indicator--6325a5f3-92f3-4da4-b1e3-f3332230d1a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3d68af-87e8-4837-a42a-ef1ee1adea0b", "sighting_of_ref": "indicator--4f0b266a-3e72-460d-8147-fc13592c164a", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c118955-5042-4dfe-a832-003068b1755e", "sighting_of_ref": "indicator--5b9b0bd7-2c30-490e-b0a0-ba7be0efcecd", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38ea236-fdc3-42d8-9045-dd616d9d3687", "sighting_of_ref": "indicator--97d9746a-3817-4518-8026-9f905dca3783", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14950078-fe28-432b-b70f-1805512532e3", "sighting_of_ref": "indicator--018fd1fe-285f-43de-a6c5-11b32a0dce64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b8c026-5e48-43ac-a893-7f50ca1dcb3e", "sighting_of_ref": "indicator--018fd1fe-285f-43de-a6c5-11b32a0dce64", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29125af7-2c8b-4337-b4db-7fd1d52baf1e", "sighting_of_ref": "indicator--3dd9ad9f-bf38-41c0-90ce-f023776564bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac25566-ba0c-45e3-88e2-e717e7f991e2", "sighting_of_ref": "indicator--554b1f86-1935-4014-856e-608d10d2c928", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6f80f2-5306-4fd1-9b62-dc888416b764", "sighting_of_ref": "indicator--2cb146dc-d82a-4e43-b9c9-b698e85ebffa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032e5028-9791-40b6-a9e9-cd0dacea9b88", "sighting_of_ref": "indicator--8907131a-38f5-40f5-895e-5fa82565f977", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a79b4c0-118b-4261-9b0f-36c079c497da", "sighting_of_ref": "indicator--8907131a-38f5-40f5-895e-5fa82565f977", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b66623f-ccf0-4cb0-92e9-60ce408aceb0", "sighting_of_ref": "indicator--745a0c43-050d-42cd-804f-4bee34cf59ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cbca01-53ce-4552-a0f7-a667bd6614a2", "sighting_of_ref": "indicator--2dece0aa-820b-418c-8273-ba1e564ba6c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e3aa9e-69e5-4216-8775-041b234d3e0f", "sighting_of_ref": "indicator--7e50af8e-f466-4d89-a49a-ff0ee824bcc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f1a5bf-0d3d-4846-98a8-afd06ed15768", "sighting_of_ref": "indicator--d132f111-5955-4992-971e-bb3280d7b5b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458169bc-4a04-40f8-92b6-86a3f3e29009", "sighting_of_ref": "indicator--d132f111-5955-4992-971e-bb3280d7b5b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39246d8b-4d52-482e-8a5a-4f3683b66c57", "sighting_of_ref": "indicator--c6704646-f252-4fad-9978-b18fb993aea4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5906c9-a766-4b6e-b6e9-df2631ce9b67", "sighting_of_ref": "indicator--c3f133cf-4a5b-485e-8077-777db8641391", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0742d217-3740-4102-8211-2bf9e9247f65", "sighting_of_ref": "indicator--ef53eddc-499b-4952-b5cf-d9a7a05b365e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f62a1dd-e485-4766-9c3a-f3c85a76306d", "sighting_of_ref": "indicator--66f2cb50-d5ab-472c-ac32-666102a7692a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85303d9-e537-40d6-8ff5-14dd7649f188", "sighting_of_ref": "indicator--ef65fcf1-86d8-4494-b477-372c82346dec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5091da1d-2662-41ed-9224-c5052c27bfc7", "sighting_of_ref": "indicator--59c742ba-2782-4069-8871-89705f9ae4c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6876c60-63c4-4377-9988-f20bf7db0053", "sighting_of_ref": "indicator--9721e7cf-dfe5-4c97-a921-f148c2b168cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f476e1ec-8e09-44f7-8289-3296ebb99aca", "sighting_of_ref": "indicator--9721e7cf-dfe5-4c97-a921-f148c2b168cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb88db8-926a-48c9-9915-576f709122d9", "sighting_of_ref": "indicator--f71b67fc-d29e-4a77-abb9-968be0197376", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f7b620-a48a-4ac8-9656-6c68ef52ae66", "sighting_of_ref": "indicator--e875e278-562d-4b8a-815f-3110b425c726", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ee18f3-6024-4552-a109-b162eedf219e", "sighting_of_ref": "indicator--e875e278-562d-4b8a-815f-3110b425c726", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f73144-23d0-4bb7-8dc5-58098b24024a", "sighting_of_ref": "indicator--ca91b07c-c3d0-473e-a009-96ff0cd7d4a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea896b8-adc9-4868-94ec-a98ade668ed2", "sighting_of_ref": "indicator--ca91b07c-c3d0-473e-a009-96ff0cd7d4a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55be1da-fe35-4da5-b0a6-6c41b041c910", "sighting_of_ref": "indicator--6ae4fd63-0480-47e5-ac0d-249677c506ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ddccc1-0c72-40d6-8397-6fc49be98e94", "sighting_of_ref": "indicator--6ae4fd63-0480-47e5-ac0d-249677c506ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3c0480-9881-4489-a455-0daa3de92978", "sighting_of_ref": "indicator--fc2b0401-1a3a-4cae-82c8-70fe74b59e99", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaf1feb-ccc0-449d-abb6-314fe02ec74b", "sighting_of_ref": "indicator--f7c48345-d941-4e09-8508-008db4e35bbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0eed8e-e0a8-42ad-8315-e913f8e7a6b0", "sighting_of_ref": "indicator--9b8130f5-2913-43bf-9aa3-611ad9ddf4b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d795cc-adeb-43f6-a882-d38c532a55ac", "sighting_of_ref": "indicator--742e1fa6-05e6-4064-8385-be89f4ba6e29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660e8abc-4d4f-4e57-b709-0dff06a658b7", "sighting_of_ref": "indicator--fba04e4c-c7df-469f-b572-d3bbc6158494", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedc42ca-e001-4ace-8b86-c67d75d5fddb", "sighting_of_ref": "indicator--7486f277-f819-47c9-ae3f-0ba1fd3c6ade", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d36b21-fc2e-45b3-b6f9-2a80736c0286", "sighting_of_ref": "indicator--46ad37d7-3f00-4cbd-8992-dac5e1535521", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62e8a3e-4329-4cd9-8cb6-54742085bfb4", "sighting_of_ref": "indicator--f29077ac-5993-4d6c-b804-a1ea30d67692", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806ff3bf-1f7b-4874-92dc-d98b44a384a5", "sighting_of_ref": "indicator--a0513ad6-65bc-40e8-b5a5-7175210d73c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a2bc82-5773-4a08-8c44-597b6ce1dc3b", "sighting_of_ref": "indicator--f9569eeb-0d4f-4735-bf6c-2777b4532d7e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40f3d45-5595-4c67-9069-d77bbfa56708", "sighting_of_ref": "indicator--f9569eeb-0d4f-4735-bf6c-2777b4532d7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278446ac-f13b-4e57-87b8-fb4dcb5f6381", "sighting_of_ref": "indicator--b69c891f-6649-4446-ae61-29edaf844aac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e51f446-30c2-4236-914c-6895886e2dfb", "sighting_of_ref": "indicator--fd315e49-f652-490b-bd46-430a4fdd8bdb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706e1d2-2bc0-4020-b7dd-85c4c036139b", "sighting_of_ref": "indicator--fd315e49-f652-490b-bd46-430a4fdd8bdb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8aa9e-b968-4e86-bad2-e3a612abd77d", "sighting_of_ref": "indicator--9deb7c93-9238-4e48-b951-908694fb8e3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29795e3e-d6ad-499f-9e56-e94f79e2cbc2", "sighting_of_ref": "indicator--90fbbdcc-ac66-46fc-a8bc-e7756afb5794", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936c3365-d5f1-404d-9ecf-64ebfd6e6f12", "sighting_of_ref": "indicator--ce6b68e9-01c6-4c5d-bb44-1269846afba3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b591a017-a48e-4ac3-96c3-42f1b4f739db", "sighting_of_ref": "indicator--cb02e91c-59b5-41b8-b0c5-6536ce139355", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5c92f2-8974-4b4d-aa08-bf1d15cfa74c", "sighting_of_ref": "indicator--7f5793cc-6623-47f5-b390-660ab2df72d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a5434-e35c-44a6-874a-7fd98cf2ed9c", "sighting_of_ref": "indicator--5bc7a4e8-1f22-4165-a82b-5ccf100dd54a", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0af4ed-d296-44d9-88bb-1c87deb05efa", "sighting_of_ref": "indicator--ca2c0d79-f68f-4c50-a1dd-2a483a63fbcc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488ee894-2d20-45ce-af09-06caea69b633", "sighting_of_ref": "indicator--ca2c0d79-f68f-4c50-a1dd-2a483a63fbcc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc3d355-36f4-4afa-b4a4-9d95503ca0b5", "sighting_of_ref": "indicator--8a1c8341-cf33-4767-8020-6d11b10e43b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2d73ea-ae9a-47f7-b493-67252d18699f", "sighting_of_ref": "indicator--01b69dcf-67af-4810-bb82-fa67e4d224d2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67003175-9663-46ac-aaca-86d019e8d73c", "sighting_of_ref": "indicator--20662a99-8ff0-4f58-ab6c-b4e15161324e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3fae6d-f79f-45be-8b54-b157fa194827", "sighting_of_ref": "indicator--de1d532b-741b-425f-8d11-7384ffea2206", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20d454c-86d9-44a3-b670-692040c497fb", "sighting_of_ref": "indicator--e039a78a-c9fb-473b-b9f3-e169b27e134b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a68dc4-b4b1-4519-bf57-b1c6927ea319", "sighting_of_ref": "indicator--9e91c2d6-bcca-4c29-9e02-8495c4e40314", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d96cf-c6f4-4042-9394-7ee48592de83", "sighting_of_ref": "indicator--a8b78fcc-b051-4aac-89f4-73bda201dbe7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20da415c-5301-4a52-b6e6-d5c4f0dcd71b", "sighting_of_ref": "indicator--b9e4eb02-ffdd-4e16-92b3-ebc773974dd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73c20b0-4aa1-4e6c-a7b1-8b1a0b8f0537", "sighting_of_ref": "indicator--0a9ab300-08f3-4011-a007-706efcb7ce2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33adfee5-1430-452d-a9d6-225e25c1b284", "sighting_of_ref": "indicator--6d9e4f87-663a-460c-92cf-6b3f96b1c481", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a55d94d-bc3a-457d-ade8-6a6c14420446", "sighting_of_ref": "indicator--5244d599-2368-4afa-a51d-cb12a3071ae8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0200b8-3799-47a6-89df-1b7bf36dbaeb", "sighting_of_ref": "indicator--c749252c-179d-4d75-8973-08d4677e8fd8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9942b7cb-f9c9-4379-a02e-44b06b09e5de", "sighting_of_ref": "indicator--0edfd85b-aafd-4bf1-8998-de1adba288d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c955469f-d5e6-4627-9dbf-ebbdd2d98bfe", "sighting_of_ref": "indicator--2883cce6-016c-429c-bc01-55bc6479b4df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43793aff-2418-460e-bf0f-059b8b9e4742", "sighting_of_ref": "indicator--c64f15ef-3cde-4720-9a05-caf9ba6641ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9437602f-e506-4d66-8a9e-f74c9c4e1c41", "sighting_of_ref": "indicator--670711b8-4f37-419e-acb3-fc009a26d0de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d7aa6b-a15e-4fce-a5ea-d5ca7c42f737", "sighting_of_ref": "indicator--b29a52b1-0709-490d-bfc9-656a12e04e9f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618f5d49-23a2-482a-aae8-259365e06d9b", "sighting_of_ref": "indicator--b29a52b1-0709-490d-bfc9-656a12e04e9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836d5288-05da-4740-ba11-1db3a8f168a2", "sighting_of_ref": "indicator--ce45e418-cb7c-4179-8267-39e8d2b705a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062635f0-f327-4d2c-9630-6d6dd1f4f278", "sighting_of_ref": "indicator--2dd9c2a2-f255-4473-80ff-01e4b45d17cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e437c1d-05b9-4e68-95bd-f86145c61496", "sighting_of_ref": "indicator--61cef907-0003-44f8-a49d-7d694cdbf2c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a827e5ee-4413-4be5-bd94-4ea6d18c0957", "sighting_of_ref": "indicator--efeba8b0-7e87-48a6-ab10-1bbe3becfa8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e0e44-5da4-4129-9e76-2ed28703deba", "sighting_of_ref": "indicator--efeba8b0-7e87-48a6-ab10-1bbe3becfa8a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169ce074-833b-47d6-863c-d409c4244087", "sighting_of_ref": "indicator--c54a5377-48c4-4cee-82c5-3707e56fa34e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a1133f-1316-464a-be14-fe2b3b1dc5cc", "sighting_of_ref": "indicator--8f6b134a-8507-49e5-99a4-40e9800feaab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d36582-4b5f-4f40-acd3-acd4d5f4a6b6", "sighting_of_ref": "indicator--36bde910-5728-46e5-8285-b894d346192b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ce6d22-d043-422c-943b-dd537b2825fb", "sighting_of_ref": "indicator--cfc1ebda-2d30-4cc2-8687-e586043454c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4213c9c8-f5a8-4f55-86ca-accccdbad328", "sighting_of_ref": "indicator--de8ba7d1-c46f-4d31-a732-433b62f76c8a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e36b5e1-eabd-4c71-afb6-7a3acefccb79", "sighting_of_ref": "indicator--d11a5ad0-169a-4773-9980-6c360b75a2a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ce3cf2-855c-49a1-ad03-31af4a36a56f", "sighting_of_ref": "indicator--9854e1cd-8d99-416e-883d-313905725429", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d5d7b8-51a4-4b41-bb9a-b6c00c404ae5", "sighting_of_ref": "indicator--8eacb61a-1c5f-4edd-933d-3ea84f06e498", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d548b1-a108-490a-a344-9770b8301a44", "sighting_of_ref": "indicator--1a70149f-4569-4f69-9782-3157e721d1ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f13ed86-61a1-462c-a95f-d77781dd6e0d", "sighting_of_ref": "indicator--1a70149f-4569-4f69-9782-3157e721d1ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78e0e70-5034-40c6-baa8-33ad7a381842", "sighting_of_ref": "indicator--861b748d-217a-4850-a1bd-a5a53b688365", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c162e2-8297-4dbc-ae7a-d821cc1f8969", "sighting_of_ref": "indicator--eedfaea5-f71c-460a-a90a-a095ba694afe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f460f698-eb39-4af7-bdd7-f681102d1e89", "sighting_of_ref": "indicator--eedfaea5-f71c-460a-a90a-a095ba694afe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cfcefe-8739-4c1a-a151-eb0948253077", "sighting_of_ref": "indicator--24ec2fa2-8bed-4f32-b158-2f72874dc49c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defcb0ff-c9c2-42bc-8a0c-1df7cdeb5c58", "sighting_of_ref": "indicator--d8c3f3ab-4897-4de7-843f-5fc34d8235e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b425ed7-c7b7-4b04-a133-c146e07c3339", "sighting_of_ref": "indicator--98db4262-4f78-4fc4-9f4b-1073e365e4a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d9bbe6-fb3b-41f1-a40e-f431cfa5de32", "sighting_of_ref": "indicator--7a2642a8-ddb6-47c1-a3f2-300a183085eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fd1ad4-060f-4c44-b6f1-6e48dbeb7911", "sighting_of_ref": "indicator--d7c9db17-da0c-470d-9b42-7a2a01c88fb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56669a2c-b687-4c95-ba0e-3f9f7f506b20", "sighting_of_ref": "indicator--5929113e-e9e2-4ce3-a3c2-ed2384e00b68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9655ed0-0d06-49a8-a9cd-09268e461641", "sighting_of_ref": "indicator--ce235bce-6654-41c9-ac59-48a66dad44c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474ad465-148f-4e6b-988a-7f37df8da634", "sighting_of_ref": "indicator--779731c5-d965-4d22-b204-a431684e7227", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8ff1f7-5c00-4c46-a394-289b54e595e8", "sighting_of_ref": "indicator--3c15021f-6afc-465a-937d-953295d743fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cb5064-e8ea-4784-9d7d-61e9341b5290", "sighting_of_ref": "indicator--4f9f439b-9b79-4344-81f5-dd3af05a263f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f087d92-d848-4374-ac0f-888c803c33c0", "sighting_of_ref": "indicator--d8cd902e-c652-4882-b065-3764cf063697", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420f4a68-b3dc-44f3-8a8a-bf31b5dcebc3", "sighting_of_ref": "indicator--d8cd902e-c652-4882-b065-3764cf063697", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324310b2-cc78-41d3-9b43-ec448193da4e", "sighting_of_ref": "indicator--76c00e2b-0125-41a7-8b83-9262fe71552c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d344d492-1253-4ee8-b8f7-6760eae8a35a", "sighting_of_ref": "indicator--0a339534-ee6b-4cb8-8597-1131090fd73c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520eadee-8946-4cf2-8b16-9960bc232166", "sighting_of_ref": "indicator--f05e17aa-7bc8-4aaf-b616-8bad790e4ff1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8ffbf0-fef1-407a-8d8e-980516ccfed2", "sighting_of_ref": "indicator--da17707b-777c-49d9-9bf0-582e168883c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2402b8bf-56fd-4ee1-bd1f-d91349e9806d", "sighting_of_ref": "indicator--28043e10-c1b0-4394-b54f-4c2ec1bf454b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6b9add-013e-4557-aac8-15ffd0cf4e6a", "sighting_of_ref": "indicator--74bb888c-0634-420c-85e7-f32ac578ff2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a97916-673e-41f2-84da-c5ac69dd3eaa", "sighting_of_ref": "indicator--b43f70b2-a165-4d1f-b3f0-2aadf5423344", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc11d15-ee04-4ebc-9e1f-451990406690", "sighting_of_ref": "indicator--70ad2a3b-d5a2-45ae-a5bb-17ea41fe4859", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d942148-56d7-4971-9842-d98e747e555a", "sighting_of_ref": "indicator--0476787a-0a65-472d-9436-97db413054da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b7f2d-a7e6-4f6a-a43f-90c1d7a65bf9", "sighting_of_ref": "indicator--0476787a-0a65-472d-9436-97db413054da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8af4d1-03e2-44b4-9b5a-546ec0b75ce6", "sighting_of_ref": "indicator--2515ee0e-2b10-4903-bd98-3816fdddeaa9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0f29c9-2180-4f1d-be97-e5eaa42265dc", "sighting_of_ref": "indicator--4097a6c5-e3ad-4f0d-b000-9a18899ba819", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21391aa3-3865-470a-9865-70121ca5214f", "sighting_of_ref": "indicator--f637d9cf-ff96-4bd4-b4e0-8d8ee50da49c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8806cee6-a7d6-438a-bbc6-592a41e823b9", "sighting_of_ref": "indicator--82b5cc8c-8d78-4983-afaa-0c458843ede8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee37063-7af9-4906-a08e-1f5770e305a9", "sighting_of_ref": "indicator--32ed412f-52fb-45f0-835d-65317d443ef0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d777ab2-2b88-4728-a906-03140f2ba3cd", "sighting_of_ref": "indicator--a1cc0b7a-cf7f-402a-a234-19e927a8e5f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d6f022-4e6f-43d2-9f3f-959c3bdc5441", "sighting_of_ref": "indicator--0c0266dc-16fc-4507-a484-380b5fa45f09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5fd884-4427-4f21-af7b-ccdc7a452286", "sighting_of_ref": "indicator--528979ea-1fd9-41fe-87e2-d8606b7b6ce2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e566d16-02d8-4878-8eeb-525015addcfb", "sighting_of_ref": "indicator--528979ea-1fd9-41fe-87e2-d8606b7b6ce2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab274d0-e3e9-4675-b984-bf3b4c233e2b", "sighting_of_ref": "indicator--522c91fb-420c-4599-9c0e-20c42f2e2671", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99149bf-2051-4e3e-aa63-03691ce08acb", "sighting_of_ref": "indicator--522c91fb-420c-4599-9c0e-20c42f2e2671", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc156472-f860-45fc-9b7b-471511bcbc84", "sighting_of_ref": "indicator--1c29a693-0c1a-427a-8b26-424847493ad6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a9065a-5971-4cad-a27a-e03e51bbec79", "sighting_of_ref": "indicator--eb026bbc-e32c-4c4a-b713-1da22474072d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed1b85-0633-4ffe-bf85-b0f52b44f593", "sighting_of_ref": "indicator--dfbc14c5-2178-4161-a21e-a91e6df6934a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dd5c03-7510-440f-892f-7afdf576089b", "sighting_of_ref": "indicator--daceaae9-8aba-4921-9702-beb0a287ea2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fe9f4c-3ff2-4672-818a-cfe2051cc7cd", "sighting_of_ref": "indicator--0109fc53-b646-44dc-82e8-b0f6c17fb7de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7880a73-50a7-4fc1-bf01-f88a63f6a5dc", "sighting_of_ref": "indicator--0109fc53-b646-44dc-82e8-b0f6c17fb7de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5cfab4-fbf3-479a-a5d1-31f3e7ac6980", "sighting_of_ref": "indicator--03b21a2b-89ba-43db-83ec-0bdb3707530a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbaf5a2-d676-4c4a-900c-c0900f2ec370", "sighting_of_ref": "indicator--a0546161-2cd7-459a-b992-94a7b6816fb1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90320755-8627-4afd-8616-2a832f638d6a", "sighting_of_ref": "indicator--a0546161-2cd7-459a-b992-94a7b6816fb1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602e28c7-bab8-40b9-ac7f-690b3e36e243", "sighting_of_ref": "indicator--55a1331f-f457-42ab-bf64-90736b28444d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f26d219-9db8-45f8-b680-ad52c6b16048", "sighting_of_ref": "indicator--2caadc02-7b88-4715-869c-75735f9f8885", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dcd5ba-b2a3-416c-8337-fee0c630ccb4", "sighting_of_ref": "indicator--d6d91ee1-3c6a-4af5-864e-80831e8a65c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683c3260-608c-4dcd-a2da-90d50d577cb2", "sighting_of_ref": "indicator--d6d91ee1-3c6a-4af5-864e-80831e8a65c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f191dbf-fe8e-4a41-b9d7-e474a9a62aa9", "sighting_of_ref": "indicator--0d86bd29-e185-43bc-b964-96842e1eeecd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bef455f-0acb-4de4-ae1e-d20bd44593ea", "sighting_of_ref": "indicator--15887823-2f15-44b5-bf37-7cc48a9f3490", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a747782-ce1d-4bcc-b370-e3b3adf39ee5", "sighting_of_ref": "indicator--2f377c18-da89-4535-a0d1-8f3b84c5afeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69e100e-4dc7-4e5a-b08a-de30a5c02aa9", "sighting_of_ref": "indicator--a390c364-bd7b-4964-a913-ed61aa7374f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce99dba-22fd-4e79-ab05-f1799f6b2757", "sighting_of_ref": "indicator--a390c364-bd7b-4964-a913-ed61aa7374f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06441291-ec35-4547-a2e3-9b4753854d5e", "sighting_of_ref": "indicator--41308fb2-8d31-415f-bc2e-2e3f9feb9485", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d22116-67ca-4f67-bd89-a4fa5ea4ecad", "sighting_of_ref": "indicator--41308fb2-8d31-415f-bc2e-2e3f9feb9485", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756a6c53-31ea-419b-b982-9349177a6751", "sighting_of_ref": "indicator--1435c0fd-c5eb-4751-8e94-18588c6fb361", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43950212-8320-453a-b30b-03dbf74cf133", "sighting_of_ref": "indicator--13909554-297f-4fd7-b611-e571be968299", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6d2998-0a56-450e-b608-5f91ada8564b", "sighting_of_ref": "indicator--7bbc1a4c-6f4b-47fd-8b9a-bde125145f45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4ba3e-806a-41b3-a7d1-128012f82fde", "sighting_of_ref": "indicator--34e09af5-a66e-4d51-acc8-a93c93bed10a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75def180-b5a6-458e-b126-ac22a245eb12", "sighting_of_ref": "indicator--34e09af5-a66e-4d51-acc8-a93c93bed10a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd77524-2b4e-4637-aaba-20cbd34c35e0", "sighting_of_ref": "indicator--779ed000-530d-42c4-b122-ec7cbc76a3a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a71687d-c02e-49ca-a1a1-001f0d7215ce", "sighting_of_ref": "indicator--779ed000-530d-42c4-b122-ec7cbc76a3a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac2b61e-ff9a-4538-9dc4-6ba2d9a7e00e", "sighting_of_ref": "indicator--05f61ee4-db98-41f8-9fcf-195118992bd1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c647d44a-4dd1-4dff-8e80-4da4b661e373", "sighting_of_ref": "indicator--f172e6b0-6623-4519-ad47-656c7196f4ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4709e000-a101-4695-8fc1-3f28c74d9e6a", "sighting_of_ref": "indicator--93894271-5eed-435b-9149-836747ae7219", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86632da-f968-492e-9fe3-2a5cba3db390", "sighting_of_ref": "indicator--03334faa-3625-433c-8af0-ce71e07d8ae8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8c5ea-25a6-40b1-b714-61ccccf77631", "sighting_of_ref": "indicator--03334faa-3625-433c-8af0-ce71e07d8ae8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108b6656-cc9d-4344-a765-ed9b5c1344c2", "sighting_of_ref": "indicator--87cf9586-c0fd-45c0-9f0d-148be82b0639", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37e61ec-d6aa-4a1d-aff7-70db2309c5fe", "sighting_of_ref": "indicator--988adcf8-c33f-4313-b1b5-ee9b95c568af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863c1d18-2543-441c-a805-f7c1e76742f6", "sighting_of_ref": "indicator--2ff68656-00be-4362-9f30-301b019b4407", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e889e9-1126-45e1-9f73-4ff7f5199ad1", "sighting_of_ref": "indicator--35529cce-29f2-44ee-a1db-7ea78eaca6b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e7ea68-aef3-42d2-b20f-35a405e735be", "sighting_of_ref": "indicator--88631143-7264-42c0-8be8-9dc683906d94", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe94d52-a45e-4a88-9219-226b8e506018", "sighting_of_ref": "indicator--04848a77-e740-40c0-9dcd-b3ddd748cef0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b72bb7-cbaf-4646-b65b-7fbf27ded1e2", "sighting_of_ref": "indicator--1ca072c4-ee5d-404d-bd1c-f2e6959f1988", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef76cc-34f7-461b-bde4-0f2ba4e9437f", "sighting_of_ref": "indicator--874a94da-49f3-409a-ab6c-c18ed8c97cb8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79df9c8-b4fe-4723-a283-53ab39e7bf07", "sighting_of_ref": "indicator--53134598-ddac-47b9-bcf5-8dfcd5328959", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d620235-13ef-4192-a820-54d2e50e9627", "sighting_of_ref": "indicator--8f735017-cf34-438b-bd25-ccc9412c3ff7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf87004-aba2-4380-bd55-b1ed541510b1", "sighting_of_ref": "indicator--57cd7b13-a79c-4cff-ab5e-8f13364ae0f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2383a893-de6b-4ff2-851a-f17c77ec7e12", "sighting_of_ref": "indicator--57cd7b13-a79c-4cff-ab5e-8f13364ae0f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090a05b-ecb4-436a-b691-2bbbcd991b79", "sighting_of_ref": "indicator--51b2ed62-0014-4a0c-823e-c646f7cd36af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7d635d-76e3-4a88-85cc-25127e62e021", "sighting_of_ref": "indicator--51b2ed62-0014-4a0c-823e-c646f7cd36af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a810db0f-0c39-4efc-877b-b8c09a1709c9", "sighting_of_ref": "indicator--e1a62cc4-7576-4db1-a5e8-72aabfbee0b6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a32f2d-5a0b-42c8-badb-61490271312f", "sighting_of_ref": "indicator--1778ee24-88dd-41cd-83dd-d9b0306d6f53", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024bda8d-d67c-423b-97af-1f5bab7f184f", "sighting_of_ref": "indicator--7ce13f1d-851a-4bd7-bb3f-0c976c53bf17", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d561aa-f831-40d7-a4ce-07d823f31b5f", "sighting_of_ref": "indicator--52099bcb-16b9-4681-9476-5f4227db5388", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20f04ae-3fbc-4717-85a2-d5a07cbeb7da", "sighting_of_ref": "indicator--7fc11208-1e05-493d-a613-8359dc46e428", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1cbc96-b10c-4c8b-9758-7fac0ae1e19b", "sighting_of_ref": "indicator--a23f3b64-eb38-44dc-bd1c-a0b185594d1b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32bf802-9ec5-4b65-9914-990ca7498c37", "sighting_of_ref": "indicator--5767eb6b-4e2b-4d54-9e4a-85907079571b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21db60-1111-402c-8bab-51b2c4e1b178", "sighting_of_ref": "indicator--93b46934-ff31-45aa-977d-9691ae096357", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b51dd79-13b4-4217-8e0d-da6532035283", "sighting_of_ref": "indicator--af765f0a-84d6-44cf-9351-079278ff4b08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1bb0f4-50e7-4097-a877-a58fb50754fc", "sighting_of_ref": "indicator--3af98de6-7837-4ac3-94ab-407dba9627ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0480d99-0f78-46ad-886c-bbf58219e850", "sighting_of_ref": "indicator--7967d14c-9ac1-41e5-8b0e-bed30ed845b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c833bec6-c6dc-4641-ad0b-2109519ac047", "sighting_of_ref": "indicator--9a05632f-6936-4476-ac2b-a3465f2a16d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b427b128-b1ec-4be2-8890-2a0aa9097cc1", "sighting_of_ref": "indicator--4af9689d-3033-42ae-a9ae-c8912a21cb2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dca2c6-ecbd-4a73-9756-dfc5bbe37c4a", "sighting_of_ref": "indicator--34c31b73-7c36-4697-9888-88381ccf526d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39e1691-8d73-4bfb-886f-eb71cf9750c1", "sighting_of_ref": "indicator--df5544ec-d77c-447a-b8f2-d15b3e79ac94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d4ea72-2ee9-4597-951c-7acdd301b423", "sighting_of_ref": "indicator--4d973459-f9d6-4e5e-858e-1827254958dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e78794b-2186-4579-80b0-998e88c85fe6", "sighting_of_ref": "indicator--65c326b9-589d-4a23-ae05-dd49a6a922a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceadd55-e495-46be-a756-2e960f2b98ce", "sighting_of_ref": "indicator--0a21a92b-6f44-48e4-be05-1f8ee3c72abe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae960934-67c6-4d51-b052-d7b36716d589", "sighting_of_ref": "indicator--18c5bbf6-5b16-4009-bf60-5c7088538ca3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b735fd30-f78a-451d-9498-3147af5bf4f9", "sighting_of_ref": "indicator--98e01b50-fcda-42ab-befb-ca0824e20cf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374560fe-8220-40e0-9ef7-9596040e41c9", "sighting_of_ref": "indicator--dd2ed449-3b03-4429-bfb7-49bca105a734", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18635fe-c9b0-4ab0-85e7-5f569164a67b", "sighting_of_ref": "indicator--5ceca090-595d-4f9f-93b2-fa180be0cab5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9d67c2-ab08-4474-a013-93fe49133db7", "sighting_of_ref": "indicator--1cf0b717-af58-4310-af73-6a49346faa04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c528ca0f-a5c6-401e-a029-b0add2c8546f", "sighting_of_ref": "indicator--0abd3ef0-7274-402c-94e7-ca7c9ea757ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1095ea-4d05-4372-bf17-cee189012864", "sighting_of_ref": "indicator--67d6f4d7-c9a4-472f-a1c9-31371e557603", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6c0a9f-bb6d-4bcb-835a-09ff231f94ad", "sighting_of_ref": "indicator--31f8dab9-93cf-4795-b14b-e251c5280682", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11989a9b-166c-4c77-8208-9fe8d2e4d8a0", "sighting_of_ref": "indicator--38675f2b-3f66-486a-9c65-f035f9d2c743", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aacfb36-e602-47e7-9ed6-b6165df88734", "sighting_of_ref": "indicator--d1ff7c2f-c6ca-48bd-84d0-e9633c83fd06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77521b5f-c394-4fee-8319-348747b6e76a", "sighting_of_ref": "indicator--2a9de701-1139-406c-9665-5a69c56a179b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555fffff-8171-47ca-999b-2cbc06b350b8", "sighting_of_ref": "indicator--e2e291de-7185-4387-8ce7-8cd80293349c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2029ac0-a108-45fb-a176-a2b86e09864c", "sighting_of_ref": "indicator--f4c7ef8d-8d4b-4c0b-86f4-0df7b3a71905", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e85af7-0209-475c-a77a-3e3283e99038", "sighting_of_ref": "indicator--5c6ff3b2-38e5-4f04-b075-f2681b7463b2", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823c840d-11c8-453a-98aa-187ab2983170", "sighting_of_ref": "indicator--8536c9be-b5aa-4580-97c3-02be9b619ecd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314f7e34-a840-46c4-986c-63f2d0621e6a", "sighting_of_ref": "indicator--cf2858ed-2f8d-4375-9181-da81e1c09104", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df027345-6144-45fe-ae35-61583c138f54", "sighting_of_ref": "indicator--8935d025-adce-4fc3-ad5b-cfa0bd23df75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f8d082-ffc2-4a44-a4d5-4e3ac756a027", "sighting_of_ref": "indicator--db610065-f0c4-4040-be45-a69a45729660", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfbbb28-6fc9-4097-ba81-9c68f1e081c3", "sighting_of_ref": "indicator--91be11c4-6032-4585-854c-e61ef3273a6a", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225cebc4-68e2-470f-be2e-507840086c70", "sighting_of_ref": "indicator--cce1e43b-dd7f-417f-9f29-37ad6b2bf165", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf1adfc-80ae-4cc7-bb4e-0a03e6e08df7", "sighting_of_ref": "indicator--e691436c-11c9-4345-9877-595ce7c704d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48793bc3-8acc-4f2a-8038-79612db27af6", "sighting_of_ref": "indicator--a677b496-49c1-4ebc-a6bb-af0527ed7132", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479fa5e2-bb66-451a-b9e2-fcd319c007d3", "sighting_of_ref": "indicator--a5d16663-911a-47f6-80c6-36e2dcd4954a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26c6346-01c5-4303-9e2a-342ca9736923", "sighting_of_ref": "indicator--1ce61f41-9be3-49a9-9c14-bbc28afbd76e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b28a82-c116-458f-b9ea-21499108aabc", "sighting_of_ref": "indicator--6be15842-f29a-4d98-9786-1533c2af33f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dad492-f4f0-4b22-b319-627fb6c391f7", "sighting_of_ref": "indicator--30bc8ab6-4ac8-4998-b721-ef3e5f83395b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a1e55c-a6b6-433b-8c84-5bbda990f1f6", "sighting_of_ref": "indicator--356114b6-9e2a-4453-b85d-cb2bb71fd1f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532b9e18-d153-4065-8621-f1d93d88b7a1", "sighting_of_ref": "indicator--d2f2bb39-048a-4c2f-8683-730a14c5c713", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbd9ad6-6c6f-414a-acee-cc0e3d75ef6c", "sighting_of_ref": "indicator--bc57b0f7-f45b-4271-b54d-abb2e7fbc427", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c321f028-8f9f-469e-aa58-6c20076114b6", "sighting_of_ref": "indicator--df36964d-9d4f-420f-8300-f8cb2fbb5e82", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2755ca2-5f69-4151-a249-cf03bfbfde95", "sighting_of_ref": "indicator--5d4488c2-f926-45f9-bf51-18bd7da114dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15af6da7-0c3b-472c-be39-d3113b59320e", "sighting_of_ref": "indicator--3e49c60d-450b-41e5-8ca3-ac4c60d03b6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8497796-3a1a-4968-bb91-e0fde731b786", "sighting_of_ref": "indicator--fd75353c-bc89-4773-84fb-fc0ac6b057b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179083a4-688c-4eb7-a26c-9b236fc6400d", "sighting_of_ref": "indicator--9537ddfb-fcaa-471a-a7e8-74cd70444386", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8bc2d-569e-4ef0-ac9b-bb1a47866c53", "sighting_of_ref": "indicator--19d77de6-9bbd-4972-aca3-2424ab08de55", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cb0b19-a7d3-470f-b1a9-a1e5c0caab0e", "sighting_of_ref": "indicator--19d77de6-9bbd-4972-aca3-2424ab08de55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5b5db3-79df-4eee-8717-096aee8269b9", "sighting_of_ref": "indicator--052d08dd-2edc-46a1-afd4-555ba51d269c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501e2824-c356-42a8-83ba-05f2d4be6a54", "sighting_of_ref": "indicator--6dafc19c-5210-4ecf-bdd6-9b1323959b40", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e04ae-fe5c-4d2c-9f9a-7a600a58582a", "sighting_of_ref": "indicator--9cd28b36-8e68-4775-8e2c-739012d06f11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2cc7b2-187d-46a8-a667-bb914c61c89f", "sighting_of_ref": "indicator--73897ccc-6f69-48aa-a778-be7e78815e89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325e3a7d-3132-4afb-960a-bcde95f2c132", "sighting_of_ref": "indicator--42d32704-6772-4da9-9360-e084b5964ee0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ae1d4b-0ff2-4c3c-8956-2c2c10a79cfb", "sighting_of_ref": "indicator--9d94de76-190a-4edf-b01c-e38917920707", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbb8caa-c068-4c89-8b4b-aaed690054bc", "sighting_of_ref": "indicator--f5003aa1-ae3b-4c01-b5d2-a6a67b572f05", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927c753c-32ee-4c38-9880-c6573e4206bf", "sighting_of_ref": "indicator--3949ab3a-6365-4017-b13a-f8f1f829b3d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f3838a-f1de-4668-a9f1-21741b7befb7", "sighting_of_ref": "indicator--c22edc40-490e-4392-8e8a-727e76d3dbeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114e5cb0-04dd-4060-a48e-444d5e08ed7f", "sighting_of_ref": "indicator--6b6176ad-b9d2-40f8-b0d4-8350b071a22d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7835c109-dbf4-4b76-b026-44f414a7a84e", "sighting_of_ref": "indicator--268840e6-8589-402e-9cac-0f55cccd2b94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acff9a65-e9a7-46fc-bd0c-3595515c9b13", "sighting_of_ref": "indicator--b0945194-6826-4b26-aa95-0759a76c905c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b6fc0f-fc16-4111-b0e3-7418b1982deb", "sighting_of_ref": "indicator--3212027e-f634-4f40-a59c-1c631e7887c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac8c5c9-39f2-4b6e-84f4-14e773ed1f87", "sighting_of_ref": "indicator--1c69f13f-70de-48ee-b9c3-b6014f0adf24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bce8ef-ecaa-4b0f-a5aa-ba048cde8d9f", "sighting_of_ref": "indicator--1c69f13f-70de-48ee-b9c3-b6014f0adf24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf2d3a8-162a-4efc-a063-c9a9650ff854", "sighting_of_ref": "indicator--1d133934-392b-47f6-a44a-dd7a9243b95d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52be10b-09f1-4dbc-9d53-889d617366ef", "sighting_of_ref": "indicator--1e144f7a-1a4e-40c5-90ed-3c087f66ec9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2748f127-00e2-4a88-80c2-a12272accd0c", "sighting_of_ref": "indicator--d2406b9d-b155-491c-9d5a-36dd18ce3fd6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc8bbbe-55c4-47e8-ac91-bb70e8038ba1", "sighting_of_ref": "indicator--67ca9715-0dfd-4e41-ae76-55a7d45fb570", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd45533-4022-41c4-b2dd-16ab8859f3f8", "sighting_of_ref": "indicator--70ba290f-e6f9-40a3-a091-aaf2bedbcfb3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaad9e78-1a4e-491b-b935-e8d7e1975bd5", "sighting_of_ref": "indicator--4c42f997-8686-422b-8aa1-ffc6e3e0a075", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddd95b4-b349-4928-a519-2a1883b4697f", "sighting_of_ref": "indicator--d5238cb3-20d7-46b9-a08a-f7891a81944c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daab07a-5a87-47dc-a108-7a33d12791f6", "sighting_of_ref": "indicator--57a82646-6b7b-42ae-b33c-2a9f62fa04cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d770d83-1eef-42e0-a98c-98944055a958", "sighting_of_ref": "indicator--d5151ac9-d1e6-4baf-856f-dea6dd124985", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af78fb5-0bb6-4a86-83d3-187b1db7fc56", "sighting_of_ref": "indicator--332080a4-9b7f-404e-b3cc-267bd87fa0cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6f32d3-7b83-4919-9458-2d6826d3b7fc", "sighting_of_ref": "indicator--930f291d-0161-4846-b18b-3c94277af2d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c22e38a-7394-42e5-80d8-ac02c2a38ee6", "sighting_of_ref": "indicator--323bd645-4dfb-48e1-9074-21b9a57652c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeb2b31-28b6-49b8-aedd-31a28315b757", "sighting_of_ref": "indicator--c6bedd16-2132-45ab-9b37-f0f84880e94b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3742fd-220c-4864-b434-40374a8932d4", "sighting_of_ref": "indicator--0c3028b8-dd9a-4442-9ae5-9cd4770d3172", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6983ab-e831-4a27-945e-c822b1030e65", "sighting_of_ref": "indicator--db241dfe-d2f8-4e3c-8fb9-232e42e9516d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0641ab37-4e5a-44f2-a207-fd469c5e5625", "sighting_of_ref": "indicator--b0db3b63-a537-4a70-8684-bbe1271bc5d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283b4b9c-cbf2-4037-bd0f-43d63b932475", "sighting_of_ref": "indicator--9b99211d-5aac-46f5-9d33-fceb56f3f9b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5762393e-2e3a-4231-9af1-85c79ff048ce", "sighting_of_ref": "indicator--a06805d2-8c13-4f60-bb5c-23444eee41fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13118701-24e2-460f-9444-595f084538aa", "sighting_of_ref": "indicator--5bf9e92a-aeb6-4e3b-93f6-89ebf50d7ff6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700c7924-219d-4345-96e1-0dd60ddcda19", "sighting_of_ref": "indicator--5bf9e92a-aeb6-4e3b-93f6-89ebf50d7ff6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bb19b0-9d79-4597-b198-571e0cd102e9", "sighting_of_ref": "indicator--bb7033f1-f230-4e0e-8bd0-ea55320f3b40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdb52c6-0cbf-4d3c-9fc3-9a213e7376d3", "sighting_of_ref": "indicator--bb7033f1-f230-4e0e-8bd0-ea55320f3b40", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17d1fac-4398-49d9-abf9-2a474a146b5d", "sighting_of_ref": "indicator--34a91653-1164-42ef-9fe4-ac6a7c616f47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bc8d8e-ac9d-43f1-b1f0-e292b58c5d15", "sighting_of_ref": "indicator--caf938f6-c393-4801-b820-990544fc2fe0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6445b363-f59d-4700-ac3a-d86e5006b84e", "sighting_of_ref": "indicator--c8563f42-ba40-4a4a-8535-6fefc129371a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6dedab-699c-420b-94ab-5fbcadcbfdc0", "sighting_of_ref": "indicator--c8563f42-ba40-4a4a-8535-6fefc129371a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73b655f-7277-45be-a71f-de822bfb3086", "sighting_of_ref": "indicator--7af11340-0c8c-4e33-9da5-e795c71e0d46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab9d887-2501-422c-9fde-f05ac625b345", "sighting_of_ref": "indicator--7af11340-0c8c-4e33-9da5-e795c71e0d46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f663fdc4-d977-4946-8d28-6d962ee7ec7a", "sighting_of_ref": "indicator--90ea5270-f73a-4087-acc2-85a8da2bc8d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989bf50d-6439-4846-badc-1af6e3eb9e62", "sighting_of_ref": "indicator--90ea5270-f73a-4087-acc2-85a8da2bc8d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee90796-cbba-4838-8c95-e836a86abffa", "sighting_of_ref": "indicator--0b1d03aa-64ce-40e9-bb91-fe60ee47addd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c9faea-8609-4766-a3ad-54433068a6a3", "sighting_of_ref": "indicator--22b058bc-fbb6-48c8-ac4b-b42658263a19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71243b30-f88a-4b57-8f33-f621ac2774a4", "sighting_of_ref": "indicator--c854ffc7-f285-4dda-848c-1c5423b54496", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8349464a-712f-4fef-a105-182ba126d4b9", "sighting_of_ref": "indicator--c38b227d-a2df-4ca9-ae83-ee223039329f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ce2e0c-4798-4e27-8047-92da3da90fd1", "sighting_of_ref": "indicator--c38b227d-a2df-4ca9-ae83-ee223039329f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a40cf1-c00f-4beb-a4b2-c7e805752d1d", "sighting_of_ref": "indicator--4a81158f-4894-4abe-a131-879d692abdff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb6a41c-46e7-402d-843e-f677f903e649", "sighting_of_ref": "indicator--691ddad0-c8c3-4071-ab26-5961d317adda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a786985-16f9-4976-b82a-8fa71bbace13", "sighting_of_ref": "indicator--691ddad0-c8c3-4071-ab26-5961d317adda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90668684-3ec6-47e8-9437-7e7211d71d2c", "sighting_of_ref": "indicator--789626c5-9305-4afb-8ca2-7f6c7fe055e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0300b313-2c5c-4ea6-97a5-30b697d21382", "sighting_of_ref": "indicator--789626c5-9305-4afb-8ca2-7f6c7fe055e7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8118c308-9a33-4630-ae45-018a599645eb", "sighting_of_ref": "indicator--20c13c0a-2153-4453-8d1c-14de49b2fbf7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbc91c4-b709-46b8-92d6-b588205839f5", "sighting_of_ref": "indicator--20c13c0a-2153-4453-8d1c-14de49b2fbf7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccca41f-dfed-4292-b24c-02dd8ed1a77e", "sighting_of_ref": "indicator--b2b5df86-3910-479a-bf8a-b41b029ca17f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ed7bf9-cb6a-488e-bf73-23ad5274a07a", "sighting_of_ref": "indicator--dbd814f3-591c-4358-97ef-3cc513b183af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129e4afd-107d-4311-bf76-23d2bd8f1065", "sighting_of_ref": "indicator--dbd814f3-591c-4358-97ef-3cc513b183af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afc8435-f7a1-45ec-ac2c-603474f6f0cc", "sighting_of_ref": "indicator--a297e824-8d5c-4f77-9e42-87e128c6e0ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c08f06-40df-4792-b3bf-50391f8e80d9", "sighting_of_ref": "indicator--a297e824-8d5c-4f77-9e42-87e128c6e0ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b65e99-d76e-439d-a495-f5216ceb8bad", "sighting_of_ref": "indicator--fe9e6234-18e3-45ba-991f-3545ec61f3b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64875e14-38a3-4008-8c11-26e40b8a2744", "sighting_of_ref": "indicator--7df6f609-97ab-452b-bf3b-52499fe79b13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30924ce6-08a4-4421-a9e9-c46a9a623609", "sighting_of_ref": "indicator--2f8ed297-f5e2-4dac-acdf-56ceacd60bd9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd9d2d9-6919-4fc3-bf7e-47c1347b1087", "sighting_of_ref": "indicator--2f8ed297-f5e2-4dac-acdf-56ceacd60bd9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864e3b15-51ff-4443-8f62-25c6c7cd0185", "sighting_of_ref": "indicator--090010ec-5977-4a80-81f8-2f10121a2563", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefcb4f7-408a-46d3-92b9-096eae3ee4e5", "sighting_of_ref": "indicator--0db96382-1534-4db8-ae6b-1ea6dd222281", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c67ba93-0d67-459a-8fe7-751f5d171960", "sighting_of_ref": "indicator--0db96382-1534-4db8-ae6b-1ea6dd222281", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978d465b-aeab-4d94-bcd7-1abd58622fee", "sighting_of_ref": "indicator--4836856e-7358-42ae-8ac2-d5b8cac2137f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7729352-1d88-4aaa-bbe8-4575073ed32d", "sighting_of_ref": "indicator--4836856e-7358-42ae-8ac2-d5b8cac2137f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709a8589-052c-4e37-a6c5-205e98e66013", "sighting_of_ref": "indicator--8a966169-1a0b-4f53-99f1-279f35028405", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea51818-aae3-4317-b2fd-a2140a457d95", "sighting_of_ref": "indicator--d3e8e947-5f68-4ca4-9092-72b0cb38bb78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510e0f75-6f76-4728-9044-51f4634a7c97", "sighting_of_ref": "indicator--fd2085b6-bf80-4cbb-8d6d-c06390559c5b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eb0027-469e-447d-963b-d2561fc9d38c", "sighting_of_ref": "indicator--1dd899f9-d4e2-4de0-a9dd-9c1f2f74a6b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ff1b1-3fd8-42fa-9db8-8fe4c0084167", "sighting_of_ref": "indicator--0289be94-9e1e-4cfb-b99a-f08257beb83b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1128211-2ea4-43fb-8c94-023144c0fc67", "sighting_of_ref": "indicator--a52a22ad-e8a7-4eb3-abc3-ee168367ece1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d41079c-9a94-44ac-aff3-5d12480a3491", "sighting_of_ref": "indicator--a52a22ad-e8a7-4eb3-abc3-ee168367ece1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b90229-90ae-49c5-987d-6b706119df4f", "sighting_of_ref": "indicator--f02c763b-0ff0-4dd8-b421-1b867b6eee70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f30f1e-bcae-416d-a7b6-ec82a7655885", "sighting_of_ref": "indicator--f02c763b-0ff0-4dd8-b421-1b867b6eee70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bb3bed-0619-43b5-9e97-421fd2a98e16", "sighting_of_ref": "indicator--f4092493-5dcf-4911-b130-d870cc1eb3fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5e0ed2-6b87-4823-8f9d-6be54eaf7fca", "sighting_of_ref": "indicator--f4092493-5dcf-4911-b130-d870cc1eb3fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97364cc0-3121-4ad2-9e33-3e0b84218043", "sighting_of_ref": "indicator--759e7fc6-5741-4274-a774-e673e9f5d3ea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0366aa1c-d37a-49ab-b847-442a41ad1dce", "sighting_of_ref": "indicator--32e98313-252e-4d5c-8ca1-e13c537c39e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7400267f-37f1-495a-85aa-b0ad5396dc34", "sighting_of_ref": "indicator--35a75e01-75a2-4eac-b7f9-f641e0ca3e3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78291f5c-4d63-4655-9675-8fc086285a25", "sighting_of_ref": "indicator--35a75e01-75a2-4eac-b7f9-f641e0ca3e3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8ec3fe-6050-49c4-8392-e27412039996", "sighting_of_ref": "indicator--386e733d-35e4-4326-88b4-2d7fdaa13a58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c667e5d2-4a9e-410f-93b0-c94747b6d57c", "sighting_of_ref": "indicator--55fb348b-0561-44af-a37d-4e8436ed3b8a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f08185c-020f-43ef-a713-537b0515eea8", "sighting_of_ref": "indicator--bb2115e1-0e6b-4d49-b748-905c560f4555", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da2de5f-aa32-43ca-ad79-519cfede26df", "sighting_of_ref": "indicator--bb2115e1-0e6b-4d49-b748-905c560f4555", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d79a6a-d07b-4a75-af80-1a46d6f030a9", "sighting_of_ref": "indicator--119b888e-f64e-4f81-8689-55a9c7674b7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e8610c-616b-4fcb-9e63-8c1657aa0b7c", "sighting_of_ref": "indicator--f148e86f-1eab-4f7a-822d-cadf621f4fea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7bfed7-11e8-4cce-b18e-202d7d46e27c", "sighting_of_ref": "indicator--e076f44a-deea-476d-9362-d37b986f3785", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c81fb1a-9028-4020-9e78-230754c4906c", "sighting_of_ref": "indicator--02b72fef-621d-444b-9ac3-8ccfa67142db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf30e39e-cd47-4698-91e2-4d00b8e173bd", "sighting_of_ref": "indicator--80d8632a-a633-4355-8060-99aa12b32fec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f8c8f3-3dbd-46ca-be4a-f439ebafeeb8", "sighting_of_ref": "indicator--b572b27f-05db-452e-bdc4-67cc34746c16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e7acac-4409-463f-9d33-259054147782", "sighting_of_ref": "indicator--b572b27f-05db-452e-bdc4-67cc34746c16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd4a6f-c2f6-4a07-9a73-93f5c835b08a", "sighting_of_ref": "indicator--4e25998a-c6ac-43cd-9f7e-0cdefb6b5300", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522e6e4e-d983-4a67-b108-fdc79c53e140", "sighting_of_ref": "indicator--4540a612-bc0e-4c82-9fa3-d176b53767bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedc9ebb-0c14-4e81-a000-01d526f9893d", "sighting_of_ref": "indicator--fbe052b0-70ca-4d05-a95c-ad5eebecbeb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa2d97a-aac0-4b35-ada1-f8b7cf086a12", "sighting_of_ref": "indicator--1c5a94ee-44ca-455b-b6d0-7bcf13445307", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eddd44-81f4-4067-924d-0624c1804744", "sighting_of_ref": "indicator--673989ef-af70-4447-a5d8-81ff3850bb5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4342e9a-2c41-483e-958f-1c9ef5c8b243", "sighting_of_ref": "indicator--5d6b14a0-6753-4e2a-a0d0-97b0b0ec3411", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a52460-6b89-4d38-9b3b-dd35209ce838", "sighting_of_ref": "indicator--c4d0f6c3-203a-4463-8297-c384acae1073", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc9def7-5bd4-442f-a49e-0cf231d354df", "sighting_of_ref": "indicator--dbf73a31-8a52-44d7-a82d-f1c748594b1d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc196ea-4ef6-42c6-8f20-13d8d84ca472", "sighting_of_ref": "indicator--d2f96807-f5a5-4372-aee0-855efceb32ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbcd3fc-8589-43dd-aeca-f65689daeb10", "sighting_of_ref": "indicator--798ccf45-713d-4757-85d8-c7dbd8b8ded3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c0c5a-e922-47e7-8cac-aa5e6db7a186", "sighting_of_ref": "indicator--20332bae-78ea-4cbe-8fee-3760f3c3c409", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ef150-1802-456d-a246-6a5eb0b55290", "sighting_of_ref": "indicator--e9bb714f-88ba-4f84-877d-5f0b7a3e7b58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b0ee79-f97b-401d-9382-41671d135ead", "sighting_of_ref": "indicator--baf44b23-e344-4ef2-a7f1-708672714217", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5d9130-e8ed-46e5-880b-13b201924789", "sighting_of_ref": "indicator--1a8f68ba-73ff-445b-ac3d-22b29115b77e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6940fc-fde0-4b04-951e-5854313c75e7", "sighting_of_ref": "indicator--abccec29-72c2-4938-b519-9d463301a615", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff56de9f-d86f-40e7-ab5d-f09f127cb82f", "sighting_of_ref": "indicator--cd876628-b0f9-46cb-8c71-d5a6535200d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84b40ac-2aba-484c-8b1d-07b92d53871d", "sighting_of_ref": "indicator--dd87e6ce-5f19-4968-a734-c02f4bc65d6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f252647c-5af4-4faf-9cd6-7d1c0056a90b", "sighting_of_ref": "indicator--bde7d12e-6514-48c8-a3f9-82001a4f0abe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d349548-2044-49c2-a42b-81769be66b64", "sighting_of_ref": "indicator--690de7c9-0aba-4d7a-a116-c7fd58d28794", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172dd5b1-0d45-41c6-b1a0-7c472a016abf", "sighting_of_ref": "indicator--2429378f-3627-4f9c-bae4-71cec77245fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63e7cd3-625a-42aa-84a7-b3642b7c0a22", "sighting_of_ref": "indicator--50f67c78-b0ab-4958-ac1e-b8027fec6521", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1f7d15-1f9c-455e-8e89-be492e92e783", "sighting_of_ref": "indicator--84690ada-a98d-46cb-b9e9-ca3bd56e2263", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b35a216-6313-4897-9a02-6f043f5a3f10", "sighting_of_ref": "indicator--37aa2907-6b2a-4a5e-8148-44da2e894876", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4899afa6-d8fb-4bc5-9a96-e51f5973efb0", "sighting_of_ref": "indicator--f4d74f64-a1ec-4eea-a60e-3e63a049e67e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba42951d-f003-4b7b-829d-84be5fe0ad50", "sighting_of_ref": "indicator--3b5a9258-d5eb-417b-b42a-c1881421d3b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dc71bf-26d9-4545-a9bd-c435b6633eed", "sighting_of_ref": "indicator--f9e316ac-9847-4523-b4b7-be8559d858a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fcc464-f358-492f-9347-e855e70f870f", "sighting_of_ref": "indicator--e9df1d67-7aea-4db2-a4e8-9de8f7072992", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49251c99-7e97-4fec-9f4a-cbfb562d75b9", "sighting_of_ref": "indicator--f4ae9318-6e37-40f7-b13b-cf1053fca6a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300de24e-a8b2-4c72-847b-8c18379c2cd9", "sighting_of_ref": "indicator--21ea9a5b-c925-401c-a26c-51c2a73285de", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a8104c-ff0e-4364-9e5f-359735ebf4f1", "sighting_of_ref": "indicator--e104d4a2-8eec-441b-a2b9-8c7aa8cb0f40", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec75244-fb53-4ea5-bb46-4aae779e15a8", "sighting_of_ref": "indicator--a56de627-4191-4193-8bed-0237b433ad36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f2aa76-024a-497d-8d4b-5d5684c81f7f", "sighting_of_ref": "indicator--845974c1-9442-4b3f-b18e-9067252d7613", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55d4fbd-f0f7-4ce7-9f15-67799f7b5643", "sighting_of_ref": "indicator--2480d305-fe7b-418a-a9bb-4dc6e6aa2fa0", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aec977c-63be-4cad-8053-c156a06ffddc", "sighting_of_ref": "indicator--9515129f-b40d-44e0-9c8e-3100eecd2718", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e225d8-a704-4fcd-acb8-b878141fcdfa", "sighting_of_ref": "indicator--eaa1eca8-1f08-4f7a-bd53-c4e0ce44b6ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cf0630-38e0-49e4-942d-d4f702f85892", "sighting_of_ref": "indicator--8f75434a-dcc8-4a61-8d27-939983ee8dcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e63d2d8-9b9c-4101-baf2-f7b2acc07501", "sighting_of_ref": "indicator--f062bd0a-0f02-4cbe-88b6-1a68d3c2701e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449bb951-4d39-4fb7-80c5-ecb0113b8cb4", "sighting_of_ref": "indicator--f20fc198-5f50-4de7-ac8b-169ac63f7970", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c022dbb5-403b-4d60-ac1f-c217c44e0018", "sighting_of_ref": "indicator--0b481da3-b6df-442a-9dc0-31f60c0a1a08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79bf15f-4989-4b80-bfcb-e22414b2ff0f", "sighting_of_ref": "indicator--34310793-7898-43b8-9c4b-01ea4eddda7d", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456d10cc-87e8-40b1-978f-ec9d36017770", "sighting_of_ref": "indicator--4f5f969a-5309-4ef4-9e80-8003a09add00", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd49fb54-7d9e-411f-a342-60e3cfb0b84f", "sighting_of_ref": "indicator--c246cf84-b389-4b98-882e-9038183b3953", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac78d55-a00a-4b6c-a94b-9b8f3150f077", "sighting_of_ref": "indicator--5138a69e-b925-432e-81e2-831ec0f0bc4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d1647c-72a7-4b4f-9b78-af61836323eb", "sighting_of_ref": "indicator--d6ef0a23-7fe7-4a48-a2a1-f678fb026511", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af40557f-f891-4cb5-b49b-e11671b6a1db", "sighting_of_ref": "indicator--7b81cdd9-43fc-467b-bbf5-89e486bbce3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920494e6-1f73-4cbd-99d0-e184aff11608", "sighting_of_ref": "indicator--62a9247d-8765-4193-9993-a060569d5406", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ff3aa1-a89c-4dea-88d3-df3da6fdf49d", "sighting_of_ref": "indicator--6c2d06ce-70be-45a9-bd84-ec6d2ed7509e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1030ac21-aa81-401a-b4c0-c70921861724", "sighting_of_ref": "indicator--29a2c3b0-e66f-4194-859c-35484ac1c0c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f77295f-51f5-4f7d-9833-6e34b3eb365c", "sighting_of_ref": "indicator--baaf6117-f7dc-4fb6-bf42-a45cd6f331ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc393937-67a3-4a78-91cb-8a68ba21c393", "sighting_of_ref": "indicator--95f49c87-e74a-4424-b222-900d8ca3c374", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd1d3ba-32a9-4fb7-bfd2-28536978501c", "sighting_of_ref": "indicator--a9aa2e64-b55c-49a1-9be2-3040697624f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9e4c91-7de8-482f-849a-a29290910be5", "sighting_of_ref": "indicator--cfe8c9e7-87fa-4248-b494-85b94915fd80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6255b6-997b-4930-a9c9-4d309ec06277", "sighting_of_ref": "indicator--02c313f0-f475-42f4-9e39-69ba30591fba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74d423-1f94-4ca1-8bc3-3da066c2f5df", "sighting_of_ref": "indicator--a7f69351-2a42-4276-8390-ec4cf5597d4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f297470-be7d-4faa-afcf-e1cc8ebd0ea1", "sighting_of_ref": "indicator--ee0c1853-6111-4bbd-915e-e55d1ca30b49", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8978de-dffb-43f4-ace5-329b3dd31a9e", "sighting_of_ref": "indicator--2cca5a7a-f03e-4961-b04c-30d36e06aa3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d3dac3-02f4-422d-a440-bb8ebf1874f7", "sighting_of_ref": "indicator--e984fc5f-d8a9-445c-8cbe-3f39eeb1cc7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23520912-e1a3-4b76-9e5b-4d530886dde6", "sighting_of_ref": "indicator--e984fc5f-d8a9-445c-8cbe-3f39eeb1cc7d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608a228-688e-40f7-811d-70df1257cc2f", "sighting_of_ref": "indicator--3e46e9d7-8797-4195-a97c-fc725f1a2d56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de6219e-aa0b-453b-93aa-574074ea20c7", "sighting_of_ref": "indicator--3e46e9d7-8797-4195-a97c-fc725f1a2d56", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecf4a80-069f-4d21-843a-a9b3bb67a672", "sighting_of_ref": "indicator--fc2ce4a8-d29f-4d0b-b01b-2988ddb8f5fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9cac35-3b06-43bf-9cf6-527ae59d647c", "sighting_of_ref": "indicator--ce6986c3-d798-4011-9b61-d673e70d63d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81455ce8-ff76-4d7b-95a0-4a186ca2a1c4", "sighting_of_ref": "indicator--a5a10d2c-d6ba-4a37-9ebe-051ca6d5bc73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76478c7c-b1bf-4d14-9b04-68a1f5a064fd", "sighting_of_ref": "indicator--a5a10d2c-d6ba-4a37-9ebe-051ca6d5bc73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0403189-b60d-4a67-88fb-9ab4d31400f6", "sighting_of_ref": "indicator--e5c73e3d-b714-4c5e-9992-34bd7c50e58b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f57d23c-f816-4534-a09f-bdc6a829a67c", "sighting_of_ref": "indicator--e5c73e3d-b714-4c5e-9992-34bd7c50e58b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44e5d3f-2bbe-43f3-8471-a3da556660dd", "sighting_of_ref": "indicator--842743d5-7066-4b76-bfde-376a463812a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc588a69-04b5-4e7f-9fc3-c6b08440a7ed", "sighting_of_ref": "indicator--dbc3e2e2-5f4a-4bb8-a72d-efffd0133246", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e381643-d186-4adb-8137-6463d7eff8ed", "sighting_of_ref": "indicator--a422ca00-8c45-4b24-b00f-12f0304f3cfa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89fff52-99ba-4671-9848-03678d06de99", "sighting_of_ref": "indicator--4261cac0-9ece-4f81-8ac1-f20b47913408", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95dae46-80fa-4f8f-91d8-a77abdc62570", "sighting_of_ref": "indicator--992f6849-513f-415b-81ac-e40a831a0cbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf1208b-72b7-45c8-a627-c02170d3a741", "sighting_of_ref": "indicator--f626b36c-81fd-4ee3-84b1-b048da2e2ecf", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad0d83f-75f5-40a2-af17-f8076a57b64d", "sighting_of_ref": "indicator--ba25e564-3c41-445f-95c2-c9192344029d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c06bc10-9f35-425a-a120-729760e26423", "sighting_of_ref": "indicator--6318daeb-9a87-4163-ac5e-0563aec1d73e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50411dda-05b2-40b5-8293-1959f015b697", "sighting_of_ref": "indicator--46f27445-233e-4db2-bf9a-2b605660d615", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fea8e7-7a12-4d81-830b-4742f2179e3c", "sighting_of_ref": "indicator--c780c434-d13a-49e7-b420-640737783271", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e692d80e-5953-43ff-9e8a-590146e5675c", "sighting_of_ref": "indicator--c780c434-d13a-49e7-b420-640737783271", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84bfc74-e345-4939-86bc-844b6d0b1082", "sighting_of_ref": "indicator--c780c434-d13a-49e7-b420-640737783271", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cb3e0a-fc78-43cd-b0a2-fc1b34729d59", "sighting_of_ref": "indicator--c9cb0617-a119-4d1f-854e-0d87748d9998", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7313f954-59b8-4000-8948-d62ea93e6115", "sighting_of_ref": "indicator--fb567c44-9040-4511-beeb-99b606903b6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3631dbdf-ef92-4e4d-bca7-a01b9a171f16", "sighting_of_ref": "indicator--0132f5ec-92ef-4621-8ad0-a8d6c99148aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f3f914-7e84-47b5-9c28-83d212b6e5e8", "sighting_of_ref": "indicator--a304333e-4534-4a25-aee7-872e41891165", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e739336-6d2a-4da2-89cb-c2daf26e4f99", "sighting_of_ref": "indicator--f39cf63e-b279-4a89-b779-96f4d7640b1d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368cc2c2-2b38-463f-b63a-2415c6dcdc0e", "sighting_of_ref": "indicator--25c604ca-901e-437a-a1dd-445fb980c363", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7650af1-6a84-42f2-a508-978579d5696a", "sighting_of_ref": "indicator--d2a07030-2ff8-4b07-88e9-03be2a77c36e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1703329-79de-4c77-acf0-daed92f17b35", "sighting_of_ref": "indicator--2d786a66-5399-4c37-9b22-abb81f2c7681", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3992ce2c-2db6-4c0e-9af4-d23ce0d21811", "sighting_of_ref": "indicator--2d786a66-5399-4c37-9b22-abb81f2c7681", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039e4682-f147-463b-8cb1-23d1539fb77f", "sighting_of_ref": "indicator--32ee2a09-f4ee-4495-b629-2db95c87df26", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8b1084-07f7-4c53-8f4c-15eac7c13d3f", "sighting_of_ref": "indicator--ac3fed2b-9491-482f-be8d-ad47fa4f2f35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5ec5df-550c-4f4e-87c4-4c940d9564f3", "sighting_of_ref": "indicator--79716792-ab02-41a9-8c2a-825fadb62dc3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2305a92-af24-4886-a6e2-14b7263c4e57", "sighting_of_ref": "indicator--c0472b3c-746c-4e6c-a2ac-eceab44aeed0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5655c04b-7e68-495e-9398-72f4f022cdaa", "sighting_of_ref": "indicator--c0472b3c-746c-4e6c-a2ac-eceab44aeed0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40bef99-3a1b-4b2c-894d-03b8ef9d6cb9", "sighting_of_ref": "indicator--a62d5d5b-8915-47ad-b3c2-2d0d30f86d5a", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bea2608-856c-484a-864e-fcf10e16a24a", "sighting_of_ref": "indicator--d4a09dd6-3b58-424b-930d-f6ffb699ff9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d562d585-1004-4035-850b-56767d8cfdaa", "sighting_of_ref": "indicator--94bd0d83-8fec-471e-886e-19324e55f36c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c5f850-f7f2-4b92-b4a4-f5dc06dbfcb2", "sighting_of_ref": "indicator--439535e9-9c7b-4b94-a71a-decdcc743149", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3320cb74-573b-405e-96b9-5d22327cb205", "sighting_of_ref": "indicator--086e69bc-2f93-494d-a48b-c8ec726c39be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0b157d-136c-45ae-8deb-aa6b731ec499", "sighting_of_ref": "indicator--a9f4723f-2090-4516-88c3-4c1de9ab9165", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb79726-f873-4111-a320-c206e6811652", "sighting_of_ref": "indicator--4467d58f-4ca3-4870-afe4-3d96e04e33b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64cca7e-4c35-408d-8740-effcab97a7a3", "sighting_of_ref": "indicator--aaf15da9-b1d4-4815-871c-6b2e386400ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27632f1f-9b94-440d-9fc5-46537f99ac36", "sighting_of_ref": "indicator--aaf15da9-b1d4-4815-871c-6b2e386400ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e8c99a-e9a0-4612-be6c-da42f622b8c8", "sighting_of_ref": "indicator--cbcfc5ba-3620-4eb2-b565-469ae4dd5f46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27649fc0-9ceb-4528-afb9-29c3450f4751", "sighting_of_ref": "indicator--f31a03c1-de50-4c70-bcd9-3e246c1fa628", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296f1852-9403-45e5-83e1-a3713e064bbc", "sighting_of_ref": "indicator--4e52092b-15cf-4bfd-9093-432d8a6c4091", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9086137a-4f6a-463b-8e53-8cf64af8d648", "sighting_of_ref": "indicator--fc68d2e9-814f-4bb6-9fd9-500947a21952", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf1c8ed-2188-4b39-9fd8-9f811182201a", "sighting_of_ref": "indicator--f805a93e-30e4-4bcd-acb3-6ef115f328cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3dbdb2-cb2d-44ac-af14-d1499e693807", "sighting_of_ref": "indicator--f805a93e-30e4-4bcd-acb3-6ef115f328cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf30733e-3631-4c8b-9be2-ad976849366f", "sighting_of_ref": "indicator--b7b7d7a4-18a6-4a7d-9c46-9ed2150324a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51559a36-c2d1-433b-9f32-e70c1210f360", "sighting_of_ref": "indicator--7a0ea9a1-b8ab-4010-8055-765ee393c2f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f53a71-25c3-48f8-acf6-166ce22e2b8e", "sighting_of_ref": "indicator--6946b574-3d14-49af-9986-700f10f61b94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9782dfef-6b10-42e5-bb16-87ec1c5f011c", "sighting_of_ref": "indicator--b335c672-05e6-463e-8014-a36b6f5e50d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f577bb25-0e1e-4d21-9a91-b18382da803b", "sighting_of_ref": "indicator--3741830a-3793-429c-b6c1-1157b2990731", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38083ecb-cb40-47f9-932b-e1c6e7ad7d52", "sighting_of_ref": "indicator--1e932476-f9da-40f6-89c9-83079417de35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737348a4-6cdb-462f-9c7f-82fdf2e74797", "sighting_of_ref": "indicator--68a84f4a-94a2-40d6-b3d6-72b75ca5c123", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfa1852-ed58-4923-b20a-b805ff3ccb9f", "sighting_of_ref": "indicator--ae59faf7-8b30-4fb8-9949-f27f7c602b02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8317956f-ea97-4313-b915-85b9ab348ef9", "sighting_of_ref": "indicator--995b8be6-dc5d-4634-a264-1cfba894ce69", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef7b261-2e20-4f1d-aa0b-83fb655ca838", "sighting_of_ref": "indicator--2b158447-dfbb-48d7-869c-0a42b44a4f1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db94fda2-1538-431d-a5a0-53f5ac9126ef", "sighting_of_ref": "indicator--7b335f6b-c0ee-4a59-a07f-feb55c934bee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d150785-bfca-4b83-8792-91654f06d229", "sighting_of_ref": "indicator--7bff9557-cea4-4e7a-87df-c1044c491e3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955f3477-45d1-4c1e-834a-8332a4603d01", "sighting_of_ref": "indicator--7bff9557-cea4-4e7a-87df-c1044c491e3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f7b789-59d2-42f2-a3f5-b1bb446f0727", "sighting_of_ref": "indicator--1f8895a8-1ba5-40eb-8f48-782d1e131908", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da74144-4bf4-45be-ac9a-b6c80b89fb38", "sighting_of_ref": "indicator--1f8895a8-1ba5-40eb-8f48-782d1e131908", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681eef80-01bd-4c81-a981-dd35df8e8db8", "sighting_of_ref": "indicator--b9083521-03f4-430e-a442-8f0c5d78861d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5515b4b8-97dd-401a-bc48-611a6cb9ba9f", "sighting_of_ref": "indicator--b9083521-03f4-430e-a442-8f0c5d78861d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730e519-d0ab-40c8-9b48-e69283b26e4f", "sighting_of_ref": "indicator--8f668818-5bbd-4156-95bc-066740951e5a", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dedaccd-e728-46cc-9a5b-03049dadcaae", "sighting_of_ref": "indicator--4fed5fef-e47d-4534-a8bf-9fdffe068a77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d11045d-3251-421c-9e87-c622ce1f5500", "sighting_of_ref": "indicator--42fe3dd0-b129-4d41-84b3-9ddcf0233ff4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e1d860-ece9-4ec8-8cfd-a304b68ba104", "sighting_of_ref": "indicator--7f14e3a9-d2be-4453-949e-7c95853c9483", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2ff82c-7f62-4c1d-a8ac-7098ae537260", "sighting_of_ref": "indicator--c6cdbfcf-a655-48e7-a907-d321a323c955", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad45500-fd0a-4ace-b6c5-2b0d1c038c8a", "sighting_of_ref": "indicator--c6cdbfcf-a655-48e7-a907-d321a323c955", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74a7f59-e719-4a05-b480-abf445dada60", "sighting_of_ref": "indicator--c6f1f515-090a-44dd-8ecc-25ccd8694934", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd2e324-fd06-4bb1-b37a-3bbe88bc9ce3", "sighting_of_ref": "indicator--d5879301-c564-4c19-8ba5-75db28de7925", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58efc338-4d5e-4805-9d9a-839bcb963039", "sighting_of_ref": "indicator--07e54d73-cd8a-49e4-9a4f-9fcd66e6a13f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbb5bb3-4c55-482e-904e-02e644421311", "sighting_of_ref": "indicator--3ab089c6-2119-4fea-b21e-4c952a0b422a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244a60e2-980b-40c4-9f30-5685fc280594", "sighting_of_ref": "indicator--e2f76635-aff7-4a27-9798-99825517d71b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acde866-4c90-4e8a-8236-77fdba25181d", "sighting_of_ref": "indicator--59ea7697-60e8-42e6-bd41-d44a195da531", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f39c74-68f4-49dc-b878-4f18f6651f78", "sighting_of_ref": "indicator--115a8991-05f7-4552-91a2-7661de92a473", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b31320-5753-44a0-becc-94b2cd9bee40", "sighting_of_ref": "indicator--093741db-1fc3-4e9f-8ff5-75844e1b55a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183abddd-7ba1-42b1-b475-80d172d3b331", "sighting_of_ref": "indicator--1184332b-c44f-4625-acd9-4dde85dc73d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887748ab-ad77-4949-961c-68bdf94ae159", "sighting_of_ref": "indicator--1184332b-c44f-4625-acd9-4dde85dc73d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c7f419-9692-4f39-92e6-2ec4352f2e90", "sighting_of_ref": "indicator--020cec10-983d-4df3-a4a6-39f72be31afd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86408d25-1a61-4fc8-a0d3-fe0050eb3b3e", "sighting_of_ref": "indicator--eaf90c3f-8992-4fa4-9990-297d6e6898be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041a03e-2395-4efb-9ca0-3022c00bbe4a", "sighting_of_ref": "indicator--eaf90c3f-8992-4fa4-9990-297d6e6898be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034fb6e8-7cf9-4c71-b280-188b715e2f47", "sighting_of_ref": "indicator--4730c4ac-5e0c-4c65-9e17-481ff95a304a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87165f8-78cb-48ad-a202-cddc265c02ac", "sighting_of_ref": "indicator--3f2c96d3-b883-4a66-a407-695f13abd237", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546ab0dd-a87a-4e54-80fa-bd468bd98b31", "sighting_of_ref": "indicator--5c8d0ff3-f3c7-40ca-98e0-e7db5eb73cac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40125831-be4a-477b-a043-68dab07494fc", "sighting_of_ref": "indicator--22d88d46-81e4-4c2a-b657-05b5a42853bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0046c83-c6e5-4646-ba62-c102c3ce6da7", "sighting_of_ref": "indicator--22d88d46-81e4-4c2a-b657-05b5a42853bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64e4259-f79a-4c15-8444-aaf966c398fd", "sighting_of_ref": "indicator--4578f9c4-6534-483e-a41a-d2be6e5637d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fb1721-42bc-465f-b23a-e298cdfd73b5", "sighting_of_ref": "indicator--2568480f-c733-41e4-b15f-94334f2a64dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b05679-fbec-4456-96a3-a4f6e120597d", "sighting_of_ref": "indicator--6779590e-af77-4908-82ad-9f694ead2a71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7422f9c6-7cc6-4d48-a40d-6ef1dcdfcbe3", "sighting_of_ref": "indicator--6779590e-af77-4908-82ad-9f694ead2a71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0041942-028a-4ef9-9ae4-b9b3d26e7f20", "sighting_of_ref": "indicator--12c56029-448a-48aa-8be0-d9e90654617e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394deb93-cf9b-409f-af66-6228d58d6808", "sighting_of_ref": "indicator--12c56029-448a-48aa-8be0-d9e90654617e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd568b21-a6f6-4d18-9098-5a4aca78e72f", "sighting_of_ref": "indicator--f4e17909-522d-4067-8b22-4c4c5ca25c76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd79d1d-926b-4040-823d-dacd75f64483", "sighting_of_ref": "indicator--f4e17909-522d-4067-8b22-4c4c5ca25c76", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd300f9-f125-4f7b-a70e-6975b800a226", "sighting_of_ref": "indicator--cb2e4acc-e36f-4a82-89cb-670699ff70b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256fb0e2-e145-4688-9a8d-63087c8da27e", "sighting_of_ref": "indicator--cb2e4acc-e36f-4a82-89cb-670699ff70b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bde498e-dcdc-46c5-b412-f8474b3e5e9e", "sighting_of_ref": "indicator--787d97e8-5d80-489e-a85b-c81221184ded", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3b141a-9d71-44b5-8bdf-1ae8248e5abd", "sighting_of_ref": "indicator--3c23dda0-e16a-4032-9ff9-1d4d519166e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d806cb-2ba0-4435-82b4-38dc7bae3d65", "sighting_of_ref": "indicator--b13db2fc-f0b3-4b4f-883a-2825e10e1cc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa974919-3f7a-4ae4-a140-c29547f6fa8c", "sighting_of_ref": "indicator--bb3a55ba-048d-4a0e-85ad-472fda212a0a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e88f6-f4a1-42ec-b060-ad5f25e63412", "sighting_of_ref": "indicator--fe0fa01e-e4fc-4e25-87cd-690236263902", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a207bf5d-5d64-4170-b8b8-8a9c045fa68e", "sighting_of_ref": "indicator--685664cc-bc4c-4bc3-bd49-660e43c98736", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f0ec23-16be-41fb-9333-6da05670f01a", "sighting_of_ref": "indicator--33f5809d-3c05-4e54-b9c7-1daf081af1f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82327506-dc03-4d7d-b3f4-d74d6d338048", "sighting_of_ref": "indicator--05aa03ab-bf98-402c-b6bb-ad8f10440161", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b541728-1521-4375-aaa2-d4806b54f5b5", "sighting_of_ref": "indicator--d4124983-2a66-4578-aee9-65589a9b82ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fc748b-8373-4fac-a6db-bfe5fa8b9af0", "sighting_of_ref": "indicator--d4124983-2a66-4578-aee9-65589a9b82ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526586a2-5103-4549-8da3-54b12d985146", "sighting_of_ref": "indicator--6591b765-eac2-4e96-8d95-63f6d0e26243", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119b65a7-7868-4340-a91e-d21eca4b6846", "sighting_of_ref": "indicator--2216df1c-4b98-4af4-8b86-3fdab140fb74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8c7a6d-df4c-4572-8e36-73e55f2baf2f", "sighting_of_ref": "indicator--2216df1c-4b98-4af4-8b86-3fdab140fb74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd91758-f8d6-467f-9c7f-6162c964c8bd", "sighting_of_ref": "indicator--b9696ad4-47ab-4ada-a709-e6c4889e4e91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5190e26-d64e-4dae-9661-1b0316207de2", "sighting_of_ref": "indicator--a73d0be9-46cf-4424-a8e6-b07e789de03c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa78f1f1-e58f-49ba-aae3-ca6d520d0c9e", "sighting_of_ref": "indicator--ce95e9ea-47d0-4cd4-904c-a73f3e0f41d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edabbbd0-329c-4101-9321-a4049d7f307d", "sighting_of_ref": "indicator--33e77358-778f-4ecb-895f-27f7e0546a2b", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cf331c-bd4f-493b-b42b-b056524bb6f7", "sighting_of_ref": "indicator--e0467e98-5b11-4dda-b44d-8a37c911242f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc02a0d-e2ab-4e9c-9ef0-22c516149358", "sighting_of_ref": "indicator--bf2c699f-6554-4f1d-acaa-41a5ea8423df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292a0b75-b9d1-4436-8f6b-7126d02a1b61", "sighting_of_ref": "indicator--cfc0bf3b-2aad-4098-ae57-d272990a344c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b97383f-8218-4236-8714-4ff34f697510", "sighting_of_ref": "indicator--cfc0bf3b-2aad-4098-ae57-d272990a344c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75cc612-444d-47d6-b832-335d9655a08e", "sighting_of_ref": "indicator--9ba5edac-70a3-433e-be51-bbd9458bbedc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267aee8a-198d-4286-8e0b-7d6df141e675", "sighting_of_ref": "indicator--03dd2558-fc19-4cc1-bff2-7c3208faab9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07474b5f-d3a6-444a-8a93-e22147cec183", "sighting_of_ref": "indicator--55cf5df1-de99-4cf7-a756-0059aa8fa6c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f294b5-b8d6-4d0b-8436-b136bf88f06a", "sighting_of_ref": "indicator--a7a23e95-f421-4910-8ef5-e938f773581f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe99f725-f37d-441b-b6a3-02a520e99e8d", "sighting_of_ref": "indicator--a674036d-2a76-4b7d-973e-ffe1358ff738", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b71bd14-5c2f-432d-9bd6-7a83351366e1", "sighting_of_ref": "indicator--ce37e585-2699-4342-b299-489e59e36f1e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bf55e5-cb46-4cf4-8670-69a4670313bc", "sighting_of_ref": "indicator--a56417b2-060f-4a17-adb4-becaa2df8e0a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53f9e95-33a5-4b59-97a1-7ca9b4902ae1", "sighting_of_ref": "indicator--aa7202ea-3204-4214-8a3a-cdae97a6c7aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af07f238-1dfd-46d4-a34c-5a77a603dd70", "sighting_of_ref": "indicator--2f3c5319-1f3a-45fb-ad70-2c72c3f8ec32", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93c1f0f-a934-4b66-a60d-29e79fed3e8c", "sighting_of_ref": "indicator--0160ef5e-bafa-4f89-8739-7cbd0460a99f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfac163-784b-427d-9a6c-f971c5b72b4e", "sighting_of_ref": "indicator--4237cfca-06f8-42a7-b21f-a043fa3cd9d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ecc6cd-84bd-4aff-b6f4-cf483925be3c", "sighting_of_ref": "indicator--902c6a0b-6606-4315-bae6-d83c12c7a63f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a81616-1d98-41ea-8a2a-8dac3270a16c", "sighting_of_ref": "indicator--0f20b2bd-6b88-4735-9bc9-ed2a7d730ff6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca73d5c-63f9-43d3-b367-76808be36b4c", "sighting_of_ref": "indicator--cea47f74-0343-4b82-b762-2097d8eca96a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a327094-5449-4c96-870c-c86a6c01c0b0", "sighting_of_ref": "indicator--0d2f89ea-c53f-429a-9d9e-ad97932a1a16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10bcd28-16ec-4876-aa99-457879c55d0d", "sighting_of_ref": "indicator--874c9684-11fe-47cc-8c14-d91060cc2d2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5170414b-3fcb-4023-9121-da098e76ab05", "sighting_of_ref": "indicator--874c9684-11fe-47cc-8c14-d91060cc2d2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949df5e9-affc-475d-9319-0ccd770c3f8b", "sighting_of_ref": "indicator--c2b1175d-22aa-424b-9a92-b45625a26ae1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68597756-b9bf-466e-befa-cb9d49012fbf", "sighting_of_ref": "indicator--d07cc09f-9fe3-401f-b1bf-55d578875cf4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc0246e-952f-41ba-871b-2b5c9edee85e", "sighting_of_ref": "indicator--94e54c35-3de8-4315-8221-4e59762966bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9699ba23-cef5-42a1-b887-fc4f8fe76c40", "sighting_of_ref": "indicator--f17b5516-7522-41d6-8c52-d1536287713c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a377e33e-d233-4a3c-b03e-bc70eb07e0b9", "sighting_of_ref": "indicator--a0cfde20-5e28-4ad0-984f-8da5bf32e21e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224f3956-df53-4527-9e99-7e55b59a93de", "sighting_of_ref": "indicator--b7c596df-b586-4c63-8c9c-5783fec4155f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e9910a-c0a5-49b2-b650-f23513faddac", "sighting_of_ref": "indicator--7ac754bb-c374-4af3-8630-5c07ebbfde75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e178a348-5516-4f9f-8623-8eef7f28fb93", "sighting_of_ref": "indicator--e3b86e8d-d924-4b15-a54d-a1e4a749c21a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95f683b-de47-47b3-ad1d-82fc9bffe157", "sighting_of_ref": "indicator--c0ef239f-5f08-41d2-8bb5-228958c0edda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5177542-765a-4ae6-bc1a-ef684890bccf", "sighting_of_ref": "indicator--fb186790-0400-4aa5-a2a6-967827c46077", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc53481-8598-4625-8a48-a5b82d4cf912", "sighting_of_ref": "indicator--402e1105-c4b7-4682-bdb7-7ea4a7ad6be7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9287493c-20f8-46d3-ae88-476394827a06", "sighting_of_ref": "indicator--dd7f1c05-0190-45a4-b6fe-ee060035e6c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2de4117-e8aa-4fa5-9ae6-38350eda9baa", "sighting_of_ref": "indicator--e2f8c581-cbf4-4974-bef0-5947265280da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06a8f13-e8c5-4e83-a20c-089cf0b0b047", "sighting_of_ref": "indicator--cab96f45-ae72-4f4c-ae0a-26507326d408", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b21759-5e37-48da-be7a-01e2e600062e", "sighting_of_ref": "indicator--7f055681-3267-4c95-9c4e-962e9b87e145", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12068d3c-0bb2-4a4e-8ff6-a04248f0528b", "sighting_of_ref": "indicator--3d3cf54b-a6cc-487d-91d6-6ca9dabafc4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156b86e9-60bf-470a-8e0a-635004c1b162", "sighting_of_ref": "indicator--eefc14f3-2e33-4337-9f19-218265dd54d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c2153b-9136-46d5-8a6f-f02b62d04745", "sighting_of_ref": "indicator--eefc14f3-2e33-4337-9f19-218265dd54d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07b6b63-edf4-4a3f-9c9f-b897a56a54e4", "sighting_of_ref": "indicator--aeb45c11-ba24-4850-bbf3-60f32b9e1ee6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2493b20b-bbc2-4f88-806a-79c549c4c60e", "sighting_of_ref": "indicator--393a8808-12bf-4690-8e8b-3e4057bf7a3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a04d7a9-16b2-4243-8fce-fc11e5f9e394", "sighting_of_ref": "indicator--6be2a829-986b-4431-8c77-2aba2ee60c56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1043aa46-1d2d-4633-9bb1-daa23d2feecf", "sighting_of_ref": "indicator--77a602ac-4152-4d06-adc5-d71545ad6b35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b76edf-730b-4c58-836f-edf1eb01b6ea", "sighting_of_ref": "indicator--ee0f2446-f435-4d19-9420-64bc5649f87d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667a20bb-3f6d-4982-ab4b-86b70a31035d", "sighting_of_ref": "indicator--527edaa2-760e-43ec-bffb-2251fa8e19a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e922f7a-7401-427e-87a5-ee5b0f4750c0", "sighting_of_ref": "indicator--858965c8-8b14-49b3-8f1a-c93773cf86f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bc2469-69b0-453c-bd98-7a9c703bca3a", "sighting_of_ref": "indicator--7774d90f-1440-404e-9b02-d3252bcfee51", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41de6e2a-bc62-42af-854d-7e815df5a847", "sighting_of_ref": "indicator--ecff1f38-5459-4c63-845b-2aea668729cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4aeee-f949-433c-9380-c4218df60865", "sighting_of_ref": "indicator--0a2d561e-b18f-4174-8a9e-0e2cd9289198", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a98ff0-975a-4e2e-aed0-a4442bac91aa", "sighting_of_ref": "indicator--0434bf06-821a-49a7-bbb5-3313a9604462", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c752eea-ace0-4dcd-9abd-d571d61b4bfa", "sighting_of_ref": "indicator--0434bf06-821a-49a7-bbb5-3313a9604462", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d3e64c-343f-4c95-8ffa-71fbd7342e2f", "sighting_of_ref": "indicator--60202981-f0ab-4d3f-87a7-077e121f6c9d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607975b-da40-461e-908f-d8c6fa332c6d", "sighting_of_ref": "indicator--1b6bb20c-769b-4ea3-8659-e2000e09a006", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa855bd-56c5-4840-8d7e-1dc173bc3f70", "sighting_of_ref": "indicator--da0d0f57-119b-4886-b279-013221dcc9fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888cb0a0-367e-40b4-b791-4000c2084283", "sighting_of_ref": "indicator--ffba58f6-d7b8-42a0-aaa3-d4db578dbf9f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab399df0-7e4b-4b68-b1b8-b77c39c03b19", "sighting_of_ref": "indicator--ffba58f6-d7b8-42a0-aaa3-d4db578dbf9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c014a53d-90af-4e62-be04-7b13d4aa3820", "sighting_of_ref": "indicator--ff196f3b-42ef-4324-aac8-b40e135f27ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c3b8b1-c21c-49ce-89f5-8bb8dac9f687", "sighting_of_ref": "indicator--121f0c86-945a-4851-8d9f-e0d67fdd1b0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01bdfc7-dbb2-4a1e-b865-6a4d6f21d451", "sighting_of_ref": "indicator--6b189092-fd92-4362-a966-aa8b185803c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db1f39d-96fa-4432-ba0c-9c1164fa3b49", "sighting_of_ref": "indicator--aa722275-41d3-4de9-ad9a-684dec401f97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578decbc-8b63-48b0-9af0-68129fec0602", "sighting_of_ref": "indicator--3a7d7cb1-28f6-4e76-af59-f66397645086", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6801a3be-c3aa-4b6a-9354-3a529960c21e", "sighting_of_ref": "indicator--b00857be-1710-4423-aa66-9bbd749062dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768daff8-2b6a-458c-af9d-0622964c0ffc", "sighting_of_ref": "indicator--fd77b274-f1ca-4056-a669-8c866d670e88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a787c68-c67e-4f16-a076-0703a4cf69ec", "sighting_of_ref": "indicator--aa62792b-df4b-457e-bbaa-c813b1ae0d97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27642623-c68d-4c48-a62b-2dfafdde26cb", "sighting_of_ref": "indicator--aa62792b-df4b-457e-bbaa-c813b1ae0d97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e1e8d3-2371-4526-b70b-9de9e3b9d734", "sighting_of_ref": "indicator--cd9d3c64-a285-414b-a0aa-6356b25214f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf11dfe-69b1-40e9-8028-323c3f4ba410", "sighting_of_ref": "indicator--cd9d3c64-a285-414b-a0aa-6356b25214f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a82d974-f1a1-4256-bf51-0eff9bddcab9", "sighting_of_ref": "indicator--507b2881-a1c9-4fe4-88ab-c6c2bc17af68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4fd54d-15b6-43fa-89fe-5bde604fa250", "sighting_of_ref": "indicator--507b2881-a1c9-4fe4-88ab-c6c2bc17af68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefceeb7-78b0-4b3e-8d1d-15388b8a2bdd", "sighting_of_ref": "indicator--d749740d-3d40-4388-8b9a-3257e600954f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaa0932-fc7c-49e5-b183-4a4cad3705b6", "sighting_of_ref": "indicator--d3812cde-8ef9-4b10-b707-63f48d326763", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78387d1c-ca40-4d68-9ab2-84cd33201c17", "sighting_of_ref": "indicator--8b5bb261-133d-4d88-a0a3-16f118dc730c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de232340-84ad-4b91-99f2-28d60dae7cee", "sighting_of_ref": "indicator--8b5bb261-133d-4d88-a0a3-16f118dc730c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeffb90-81fd-4ea0-b817-e003670a37be", "sighting_of_ref": "indicator--4dc00615-11d8-4021-9b37-65f144b5cbb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fc53aa-89f8-4eb4-af0a-09930ec06756", "sighting_of_ref": "indicator--ab998471-4859-40fe-bc02-e22d8b98a883", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c9ad2a-a42d-476a-ad81-2dfb9b1ac7a0", "sighting_of_ref": "indicator--2160fd3d-e812-400e-92fe-c7c0cf12cf87", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56539152-6b9e-4233-ba57-61afe88bf122", "sighting_of_ref": "indicator--2160fd3d-e812-400e-92fe-c7c0cf12cf87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c066841-6ef5-4a57-a1d1-a10c44a1f3fb", "sighting_of_ref": "indicator--d5f999c8-5445-41f8-bf28-aa384a70ddb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0051bbc-5c1f-477c-8f87-c3b2cea3a77b", "sighting_of_ref": "indicator--3efffd01-f052-4c05-87eb-86eb473905a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977dbc78-1de6-45bf-b294-e9d4cc84c9a5", "sighting_of_ref": "indicator--1fe4359f-d1f0-4d8d-a75a-9c8723938cac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58067031-882c-49ba-86bb-95e8f53163b2", "sighting_of_ref": "indicator--50265173-6686-4b44-b724-52037bcf7bc1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fac181-f9b6-42da-960b-11dc1c7a57a9", "sighting_of_ref": "indicator--e6f7eab4-f21e-4060-9a14-974b8c5b1b70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f630702-2d81-42c9-baad-6490e07b6955", "sighting_of_ref": "indicator--b00b5a63-4fe4-4cb0-ab6c-3ef5b1c6ae21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bf4596-04db-438b-b0c3-377191a2632a", "sighting_of_ref": "indicator--b00b5a63-4fe4-4cb0-ab6c-3ef5b1c6ae21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcca052-a72b-47e6-87ca-e6c67fbe7618", "sighting_of_ref": "indicator--a676d587-3726-40fe-bd08-7e1256308b66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4b003a-f191-48b2-9bab-6f469e36af20", "sighting_of_ref": "indicator--7f223f5d-a98c-4a64-a682-fd5867407802", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd722181-7d8a-4167-a5bf-f2257cfceb7a", "sighting_of_ref": "indicator--0f80e622-8da4-4984-8b1b-bafeb64a42f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed215a1-39df-414d-b13d-2adebc6b1d67", "sighting_of_ref": "indicator--c1d67cac-5509-4893-88f5-eb74f1cc7b80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01438f76-f63a-4229-b08d-93337a650234", "sighting_of_ref": "indicator--19765321-cfd1-48a7-8d1e-8c951bd40da6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcb406b-d57f-408e-b45d-6fdd65ccdb58", "sighting_of_ref": "indicator--dc3fded1-cd9d-49f7-bd51-518b01e81501", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b233e7-8c86-44ca-9030-ed90af1a1c01", "sighting_of_ref": "indicator--43d76c19-ef6e-41c2-96db-58d5d4aad941", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad656f7-edb1-40dc-aa79-a104450fc6eb", "sighting_of_ref": "indicator--1b70605f-421a-4e91-a4e4-33676f69ea61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49613823-f12d-4b19-8153-97498db80966", "sighting_of_ref": "indicator--7e652580-e0ad-46d3-9ff4-a820c64af3ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f5d84b-0cf2-4c76-87e0-c93d6f2d0b1a", "sighting_of_ref": "indicator--07235ba5-24ae-4483-8c53-25605bcea959", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605a0dcb-8ce5-4910-a93e-30419df50c11", "sighting_of_ref": "indicator--07235ba5-24ae-4483-8c53-25605bcea959", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f40917-4346-4948-a9ad-3d0ed974c9e0", "sighting_of_ref": "indicator--03740b1b-7a68-4518-a71b-c30f19e7883b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082c3410-ca12-4035-846a-e84c41bdafcd", "sighting_of_ref": "indicator--b42b5371-1f83-46a8-9331-a2b3e8d0723a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b3af31-0256-4fab-98bd-b92040d05235", "sighting_of_ref": "indicator--9f113d38-8ed8-4c08-b219-945352bddc02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f026f010-9d6e-40b9-8246-22f25381f79c", "sighting_of_ref": "indicator--3b07c933-4b7b-4ce4-9061-6e9a72c451cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8281ddbe-f190-4a23-9c49-d5bb19fd5565", "sighting_of_ref": "indicator--520fd358-2867-438d-8fee-6e23c021d187", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47343b85-d7cf-4a1b-aca5-c12f29a086c6", "sighting_of_ref": "indicator--f0887f10-e702-4ceb-953a-79bc4a76217b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05057c79-74f5-4591-86fc-41a5ae5b35d9", "sighting_of_ref": "indicator--78230b2f-7d5a-4a80-a7bd-8570c29da27f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459a3454-869b-4bd7-95c6-a5634aec6a3b", "sighting_of_ref": "indicator--48d79261-4882-4da9-b124-0a853cc514bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50d1e1e-1b91-43c5-a1b5-dba39e0d842d", "sighting_of_ref": "indicator--9ff387a1-a0b0-49d1-810b-89fe0ebbc8fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cc7120-7549-4d06-9602-de6b0f289985", "sighting_of_ref": "indicator--9ff387a1-a0b0-49d1-810b-89fe0ebbc8fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ce6e6b-96c6-4e36-96fe-86edd3458d3c", "sighting_of_ref": "indicator--f075def0-c296-4e68-bc20-5717f2e264e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fa807e-5e4c-401b-a0d6-99e57dcdcb8a", "sighting_of_ref": "indicator--7170de3d-4c33-44aa-8b6e-47c58fd61f00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bfa971-77a8-4937-8a59-7551b6cb50c1", "sighting_of_ref": "indicator--dc226375-cb87-42c2-9053-ebaffeb1e4d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856ab2a7-a8f5-484c-8303-39f9d009a867", "sighting_of_ref": "indicator--e4fcac7f-22ab-4731-867f-b6ed95cddd73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769b4a71-9e21-4df0-b873-bb1d6efb07bc", "sighting_of_ref": "indicator--a14db64f-3c27-402b-ad85-189a5c045258", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bf3747-fad9-4960-8abb-7428b10681c1", "sighting_of_ref": "indicator--a14db64f-3c27-402b-ad85-189a5c045258", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f676f88-f32f-4087-8383-f80ce587e33c", "sighting_of_ref": "indicator--6982418b-3075-4673-9ad2-bacb3df58d9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fddb2d-b833-459d-81ad-da7ae2d06ce8", "sighting_of_ref": "indicator--e7187214-b927-479e-aba4-3cd834b029af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03755e4-7814-4265-8dd4-0cbee3c08f15", "sighting_of_ref": "indicator--eeb8574e-aab3-4b71-9b34-50e51e2bc224", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1055d532-935a-45e9-be70-51e8e22b05f8", "sighting_of_ref": "indicator--34bd26c4-f3dd-4375-9c42-7e9cf415ec19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca4f97-da26-4c71-8e7d-c50f28b85ab3", "sighting_of_ref": "indicator--a684b256-850a-47a9-9d02-284fabf98438", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace0e47e-9bd8-400f-9f6d-920ca7a0f88a", "sighting_of_ref": "indicator--0314f02f-40d0-4561-8314-3abd27f710d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4070189-66ab-4b65-9b45-c0471ed25ee5", "sighting_of_ref": "indicator--2dd2bfb9-d799-420d-8c1a-55ef72ec6940", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aaa088-b50f-4d0b-bc68-c6db17beb661", "sighting_of_ref": "indicator--03429c5b-5924-4f12-a0b7-bea2d0bb81c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f14f5a8-ec1d-42ed-92ed-91ffffb31c28", "sighting_of_ref": "indicator--0e3d7287-64d7-4f48-85ef-cb0b0722ae79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20ae5aa-be92-487b-884d-b48cee9aacda", "sighting_of_ref": "indicator--7909f65f-84cd-47d2-a713-1c2bda53738c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab48695-393e-48a0-8b7c-eed8f2085dbc", "sighting_of_ref": "indicator--b295ae4c-501b-48ef-85ab-2c2b2758781a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eec29d-7a3f-49c4-a2a6-df25a57bcbc2", "sighting_of_ref": "indicator--a6dc0017-45e1-4f7f-9e2d-742b5639e1f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3592e7-5ab1-46ed-804f-49b0b4c03798", "sighting_of_ref": "indicator--9e09d77a-2eda-418c-a762-a4950a93c7bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb3a622-3159-469e-bf0d-2cce8ae3445e", "sighting_of_ref": "indicator--27867645-7db5-462c-831e-d530e996a1c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f659ab-5f97-4a70-8f14-e082e9d74798", "sighting_of_ref": "indicator--acf46e0a-ac79-4fbc-a51e-a10e5998f7f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c380812-1378-4add-a969-906585300ac7", "sighting_of_ref": "indicator--cca5997b-8f05-44a7-94a1-8f7f5568ea00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1792f3-af72-4d34-90c1-bec2264e69b1", "sighting_of_ref": "indicator--571e99e5-933c-4a3d-aba8-940f6576b1aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ebcf2c-39d2-4d09-872e-9fed7730bfa9", "sighting_of_ref": "indicator--879ab24e-a0de-478f-90e5-8d9bb9f40456", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ca39aa-0207-4052-9fbd-709fa4917c4a", "sighting_of_ref": "indicator--34264dff-ae7b-44e4-acc1-4331eb22b132", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6229ff-6c56-4f29-bb64-0ba43bd68db3", "sighting_of_ref": "indicator--90fed253-ad8a-43cf-90ad-f3534e9e8785", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac4560b-da24-4432-ad39-b9226cb65aff", "sighting_of_ref": "indicator--90fed253-ad8a-43cf-90ad-f3534e9e8785", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b57e6c-dda1-4634-9a30-cee6c5836cbd", "sighting_of_ref": "indicator--a8e35f6b-cb5f-4b63-a887-551c83f807bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ff6cc2-c4c7-4f85-af09-558b90c835cf", "sighting_of_ref": "indicator--a8e35f6b-cb5f-4b63-a887-551c83f807bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1593556-8845-41a0-be12-52e2627b6722", "sighting_of_ref": "indicator--258d2434-f21b-4b27-9f3a-77d5eb0d1592", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8772f3c-40b1-4258-8be2-e29a20f5f0eb", "sighting_of_ref": "indicator--258d2434-f21b-4b27-9f3a-77d5eb0d1592", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea78840e-a024-4733-853d-bdd59772b9c5", "sighting_of_ref": "indicator--e8f7f27d-7ee0-48f9-a161-f9c2782c6947", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db133a0-e76e-4f1b-b7b1-6e1f9b93c2b1", "sighting_of_ref": "indicator--e8f7f27d-7ee0-48f9-a161-f9c2782c6947", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7aa7ec-a435-463a-8bf0-8d6812d14d43", "sighting_of_ref": "indicator--3aa5d031-4b5d-40c6-9f31-95917b382044", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5bf6f7-09e1-4173-90e3-88a194f9f69f", "sighting_of_ref": "indicator--1baf10b2-aa3a-471a-8d4c-d4077a2c4c46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308542be-a742-4d54-a591-75183083e0bd", "sighting_of_ref": "indicator--aaf27b4d-c390-4376-bac4-beadaa6ea936", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4acc09-167f-4d7e-a1e4-1a256db59a9c", "sighting_of_ref": "indicator--9ab9c7a3-c48c-4860-a377-0d20d0bef057", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69044dd5-46f4-4f26-b833-ae0e99e60098", "sighting_of_ref": "indicator--6dc08a8e-ce39-4f5e-8516-06a44d430150", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b770b67c-8c6f-412f-88d3-0e3b7cfc60d6", "sighting_of_ref": "indicator--d85babcc-a5ed-4b7a-994a-4a4f3bb6c27e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a75d78f-45f2-48e3-a2a8-4a787d21cfdd", "sighting_of_ref": "indicator--48feb1bc-282f-4b19-acb4-c5f1b11580ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9beaa37-a44a-46d3-bae3-34fcbb6d40bf", "sighting_of_ref": "indicator--1b37f6e5-7a75-4bc7-8580-4238be09e023", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ef031b-0a3c-4ef3-acf4-19286d6abd93", "sighting_of_ref": "indicator--32929a1f-6f3a-4d07-92b8-276eb79b05e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5515d4-b588-47f9-9b42-473c709a2557", "sighting_of_ref": "indicator--2d334226-6fa4-45bf-8547-de15f981827c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb97d10a-c6f7-4d39-8e56-2e12944977c5", "sighting_of_ref": "indicator--2d334226-6fa4-45bf-8547-de15f981827c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e86eac-c5f1-4191-9394-a178c510936e", "sighting_of_ref": "indicator--f07b6c71-fa00-48f1-b6f8-cd95ed500d84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88621d48-fe05-4b50-b322-f946d94346a5", "sighting_of_ref": "indicator--6b14dd44-45c0-439c-b944-2a29cd9bbe0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162869b1-ad09-4cf1-ad5c-679dc382dd0d", "sighting_of_ref": "indicator--0b45aa9b-7f09-4ff5-8752-d08e0f2a1f8d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3303bf-bff3-44df-a2bb-8a1f06fbe00a", "sighting_of_ref": "indicator--0b45aa9b-7f09-4ff5-8752-d08e0f2a1f8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f8cbff-7dcc-4e2f-9394-08bd09a53cba", "sighting_of_ref": "indicator--2fb9507e-5e74-49e4-b4c1-aca3c7cc76b4", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18fed52-96ec-4a17-9216-c186c96ea32d", "sighting_of_ref": "indicator--47fa6647-b0ca-46aa-b88c-1ebe857579c1", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa98ab7-acca-4c81-9bf2-129bfca50d45", "sighting_of_ref": "indicator--7776ded6-ff48-4a74-80e1-8d5c01997585", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fa723a-746e-44ee-8140-9756e0f411cb", "sighting_of_ref": "indicator--4d120bcc-0f57-481c-9087-e1dad928ceb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2da2c0f-52ee-4f89-81ce-23f930107f3e", "sighting_of_ref": "indicator--ccb8d8f6-3468-4c56-87da-9efa48bfc733", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07633ae-f240-4c6c-9c5f-1f07f37ef3dd", "sighting_of_ref": "indicator--3e8803cc-5cd6-4871-8434-8970f4cbc5b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcc7ba5-ddb9-4e52-b270-d80cc62b8380", "sighting_of_ref": "indicator--691189d6-4430-4f5f-942d-2489b31f3a77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c1d5e2-0664-4576-961d-8127c51a0029", "sighting_of_ref": "indicator--2300cf13-3153-4d9a-a07a-dde4892b322c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815605ce-1e04-4e09-83aa-0f5908a2b6f9", "sighting_of_ref": "indicator--2300cf13-3153-4d9a-a07a-dde4892b322c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c389e809-27b5-4096-86e6-2088fb9e005d", "sighting_of_ref": "indicator--33e3a75a-82ed-4681-aa21-028eee31587d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0da8b2-f361-4dc7-a17a-f78acb4c052e", "sighting_of_ref": "indicator--edece51a-ab50-431c-a91b-2c4b4257f6be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0758fe87-ca29-47f5-b3c5-5017811e67e4", "sighting_of_ref": "indicator--49fe757c-6f09-40f7-bac9-f072203df957", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7843d6b-b74f-4381-b873-ccd7ea7b057f", "sighting_of_ref": "indicator--b47d818c-e45a-4ae3-be7c-abfe65d142ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc404b9-27d3-4da4-8b15-fc4fc2f213df", "sighting_of_ref": "indicator--b2c3f0f1-fb23-4ba6-89f8-e98bdf74327a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb2320d-d14f-48a9-a1d6-81d003314659", "sighting_of_ref": "indicator--170c9928-8f41-40d5-9b1c-258f4ef3393d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3b589d-759d-47ff-9930-8fc43c638028", "sighting_of_ref": "indicator--f625f89f-84af-4357-af04-6137ccce59b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd3d212-5faa-423a-8494-babb5896dc9a", "sighting_of_ref": "indicator--f2b537ce-e592-47ef-ac34-50fcb84d4e6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6054d15-c9d7-4e5c-bb64-699220f28f18", "sighting_of_ref": "indicator--1e936ca7-1b22-47c5-8c74-7dabd28953a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cccf81-d341-40bf-8708-392fdffc11e2", "sighting_of_ref": "indicator--759bca5a-3111-4eca-b4c7-dbea9cd5b73f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c153b39-8ae6-4295-b75b-1b375367850d", "sighting_of_ref": "indicator--96144982-302f-4003-a8f0-5001f9314d62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db85eaf-2081-4ec1-af0a-bbf4ab14ffd1", "sighting_of_ref": "indicator--b3382fd4-59c9-4225-87dd-49e155d2b7ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3bc9d3-ee29-41ee-9f97-bd67fa864b70", "sighting_of_ref": "indicator--2d7983d7-b4ab-4ebf-b413-3a53bcf79d9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7278e4cd-40e9-4ce9-b71d-d7bf23c49cef", "sighting_of_ref": "indicator--2965ea15-2642-4e2a-8025-f296f96bb22a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464b5631-e2f3-49fd-8fe8-bdada59c26a8", "sighting_of_ref": "indicator--8b1014cc-eb55-4b34-9632-713c91ddb296", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089ecd28-292e-4d13-aeb3-ed80e297afdb", "sighting_of_ref": "indicator--b372f8bd-bd7d-4b0d-9dc7-db638e3c1fa9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e0a0a-c550-4782-8fdb-f4796c4a5314", "sighting_of_ref": "indicator--f75888a7-5121-4b8d-a975-2d328569719b", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d68156-f19b-48e7-9dc3-282c460f83a6", "sighting_of_ref": "indicator--4b64ad15-6b3c-4145-bed3-8d6e335d6b50", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87dda21f-9c73-4b63-bf84-5992c903e390", "sighting_of_ref": "indicator--96ab6bc3-1d7a-402c-991e-4e726245a860", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602c5c90-5744-4024-b21e-ac0bbbf5c2db", "sighting_of_ref": "indicator--ac8879a2-855f-4899-856b-52a40b9f9217", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af477ed1-1184-43bf-a323-67145f42cb57", "sighting_of_ref": "indicator--1485fef4-7a36-45f5-b1ed-0c9d99ea0900", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582a0d2d-8c38-44cb-9630-c69e7aa33bb0", "sighting_of_ref": "indicator--2559e586-159e-46ba-8ebe-ebf866bd3e4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55ca532-8d9d-415d-bb88-197573a55ab2", "sighting_of_ref": "indicator--74cef0f1-bc8f-444e-8d1c-70046f5650a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0f7913-f6a3-474b-bfc8-cd5890a1ba46", "sighting_of_ref": "indicator--b7d9080a-d273-4e73-ace0-145a9554ec14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9eadd6-081d-4af6-8039-92eb07647094", "sighting_of_ref": "indicator--0bc51473-2e01-49d8-9377-bf4ecd75ff5e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90778d2e-dda1-4e09-9896-9aac0869703a", "sighting_of_ref": "indicator--823a88e5-cd6d-436f-8f89-0930c753060a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd21ee70-5563-4462-8dbc-6b8348179504", "sighting_of_ref": "indicator--807e79a3-9205-4dff-b3f7-9e8dc192e035", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829397f4-1987-4dd4-a034-3a90e19280ef", "sighting_of_ref": "indicator--af41f96f-d2aa-4931-909e-0d797d2b9018", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21581357-8f29-4e4c-97d1-e171bb762e30", "sighting_of_ref": "indicator--e2ac3b1b-0979-418e-98b8-390617c63fa1", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012f349-921a-4b75-bafa-0c25068b3796", "sighting_of_ref": "indicator--e2ac3b1b-0979-418e-98b8-390617c63fa1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517a3351-d22c-4c49-81a4-7719145c8f34", "sighting_of_ref": "indicator--ec1f4eb6-3927-4544-b172-bea75656d895", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a1cb57-9dce-4c12-9b46-1ef999824d0b", "sighting_of_ref": "indicator--ec1f4eb6-3927-4544-b172-bea75656d895", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98003082-08d3-4aba-b69e-4d097b15b0b4", "sighting_of_ref": "indicator--c9666a31-a149-43e2-bbac-afa8130f662e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddcbd4c-6d81-417f-8717-b72fa79a86ad", "sighting_of_ref": "indicator--622e1b60-56d3-4f19-baaa-1e3b1df171c0", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95daf0c6-c161-4cdf-a4ce-ff792e41e4ac", "sighting_of_ref": "indicator--594cd1c9-bd17-4d58-94e9-16bda73f660d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e56009-3723-4f82-8946-efec38d547d8", "sighting_of_ref": "indicator--7971b558-21e5-4620-81bb-36944d76b5e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cd70a1-8d98-40ae-a09a-887fcc11cef0", "sighting_of_ref": "indicator--04ec1772-431f-4af7-86d8-d32deab75830", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585b1faf-c8e9-475b-966e-b17e4388cc5d", "sighting_of_ref": "indicator--52dac6cb-171d-4a4c-8938-542f09fe0f79", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46c4150-0b26-4262-b683-0fdfcf54970c", "sighting_of_ref": "indicator--52dac6cb-171d-4a4c-8938-542f09fe0f79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc51072d-8902-4002-853f-ab208723affe", "sighting_of_ref": "indicator--f5b4810b-06dd-42f1-ae01-bfed3f2766b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3ff329-6afb-4c9e-863f-228397f72e1a", "sighting_of_ref": "indicator--f5b4810b-06dd-42f1-ae01-bfed3f2766b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df415cab-7f4c-48d8-a8a2-f64d14ce2b87", "sighting_of_ref": "indicator--62acf8f2-1ea5-4205-a49b-967e0113bdf9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd9b3a4-c955-4f4f-bc96-1727ab88aa0f", "sighting_of_ref": "indicator--62acf8f2-1ea5-4205-a49b-967e0113bdf9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8216767-a776-4729-a216-30ddd02f90bf", "sighting_of_ref": "indicator--e792f35e-f435-4300-bf63-4c61418e03f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d70a3-7edb-4f8d-9d55-90153a73737c", "sighting_of_ref": "indicator--232225ac-6994-4344-86c7-0b9129e28f48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce606dd-5964-40d6-97df-c487a93f501e", "sighting_of_ref": "indicator--232225ac-6994-4344-86c7-0b9129e28f48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af32ee2-b9ba-4eb2-9baf-b6b9012986b9", "sighting_of_ref": "indicator--61d901ae-022e-4b04-baff-e45e04d3c099", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0754fcc8-df3a-4e22-b17b-79ee8cd4f9df", "sighting_of_ref": "indicator--820666e8-97a4-4828-8788-88a48610412d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0be6b7-cb2b-4eff-b020-610bbe0afbe2", "sighting_of_ref": "indicator--214f2e03-5930-4f65-a559-72794411fa4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b993dd45-d35e-4165-9575-688deaa0eb5b", "sighting_of_ref": "indicator--6e7e021a-7b32-49a0-9c58-bc9d2ccd0005", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d0c9f1-f7d0-4ccb-b155-c38c81988f31", "sighting_of_ref": "indicator--5012378c-31e0-4a50-85f4-2c9dcc3a2bbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bd539a-89c4-46c3-aa3a-dc7c0593e117", "sighting_of_ref": "indicator--9c7a7d0f-02d4-4a2a-9a2c-faf7e80dc312", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf54fd0-af52-4ca9-ad36-20ed81b7c9b4", "sighting_of_ref": "indicator--8fae26bf-c104-45aa-b144-5a9ce37a4389", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55815054-1af7-419b-9b72-03abd697efa7", "sighting_of_ref": "indicator--5e5b6ea4-8090-49a2-9fb5-6c808c068ab8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66119f-538e-471f-8497-220805b8bb7b", "sighting_of_ref": "indicator--6fe99435-6e5a-468f-aca9-5125380eaf57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c19205-e52d-4bfb-b9e0-16a536d44559", "sighting_of_ref": "indicator--e1e7367a-5c63-44de-8fd4-f6153799518f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5831b16-ef39-4d91-9491-17898f33271f", "sighting_of_ref": "indicator--f5133c38-7aaf-4c3c-904d-1ceb898576d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c038ca-82c3-4c51-a87b-2e0e3c2a1f93", "sighting_of_ref": "indicator--6e2208be-9243-45dc-9d4a-b27a4733b202", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592f4685-4ce8-4808-88d6-8636d008338a", "sighting_of_ref": "indicator--2fd2c166-541b-4af2-bdb0-59f2b46a2719", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0107c0c1-6b78-4c22-b87f-a8ca935bbc4a", "sighting_of_ref": "indicator--3655270c-38a5-4b9b-acda-f3051e1eb35f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7274d3fe-5624-434c-9e93-00e5dc388f19", "sighting_of_ref": "indicator--3655270c-38a5-4b9b-acda-f3051e1eb35f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7e324f-35e2-4eac-a97f-88a4f6ee4d31", "sighting_of_ref": "indicator--53cefa05-9154-45e7-b6b9-d67991c036f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1aaff5-7206-4321-bdfe-37ac7b27dd9f", "sighting_of_ref": "indicator--c966fd32-5768-4275-9b84-9a8b2f13c3c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48436c5f-4945-4e3f-8354-f5f3995f7c34", "sighting_of_ref": "indicator--feb6bec2-d482-4b5c-8448-c9bfa6e5759e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a313692e-4056-4cc9-8352-74a36ba8f3d4", "sighting_of_ref": "indicator--8bf0e241-09e3-4072-9d09-f67e5ee7cda5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83df655-e7e0-4397-ac1d-3a312aed7f32", "sighting_of_ref": "indicator--e0ed2fe1-5d98-49cc-b0bb-40c5506a94ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23886923-eb08-48e8-8b77-945b2b8429c7", "sighting_of_ref": "indicator--50cbedfa-a669-452a-bea5-b50a52d65afd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af2ccc1-156f-459f-a064-e3f4513e294c", "sighting_of_ref": "indicator--427da4ae-3dd2-45b3-8b60-7f48a3738bec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ddabde-f4c5-49e2-b2bb-1e0318fb19f7", "sighting_of_ref": "indicator--8a975881-b273-454d-b68c-e8f1e853fcac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d4a1bf-b54b-427c-aeb6-d13d5733381b", "sighting_of_ref": "indicator--2f86bf48-1e44-458e-8e00-6f9730c84ecf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3e4a5f-8007-4717-95b1-f553b1ec5fcf", "sighting_of_ref": "indicator--fd49fbb8-77b6-4aae-a53a-dd82a45a9c6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d5e74e-0a01-415e-a9f2-5453429ff0f3", "sighting_of_ref": "indicator--fd49fbb8-77b6-4aae-a53a-dd82a45a9c6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548c7ea-7198-4157-99d1-d8fad843ee3e", "sighting_of_ref": "indicator--97e8a60d-a81f-4caa-aa52-8ec163054789", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab3e61-114d-464d-b746-cd25d4738842", "sighting_of_ref": "indicator--7373c5b1-0509-4c26-8691-6840368edf77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1e299d-acbf-475b-a302-14d4018a226a", "sighting_of_ref": "indicator--24b2ddcb-707e-49af-8bac-f30fbf114040", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43b1d58-c9a6-4fbe-bb6f-99907d940f58", "sighting_of_ref": "indicator--d61214a0-e071-416a-a8d2-410687782730", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3595f4c3-c8c8-466e-a2fa-e41caf3ca628", "sighting_of_ref": "indicator--9d2b269f-6f39-4198-b116-f9129b231f8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10cc2be-fffe-4f6d-9d42-eb90277bb21b", "sighting_of_ref": "indicator--9d2b269f-6f39-4198-b116-f9129b231f8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bd0ef2-3c13-4570-99b1-8e611a27a69a", "sighting_of_ref": "indicator--1df36e2b-1c1b-4a2d-b138-a2fbeb9c74b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d609a59-9a68-40d7-9703-980a9840d76c", "sighting_of_ref": "indicator--1df36e2b-1c1b-4a2d-b138-a2fbeb9c74b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fffa7a1-2ac2-40b8-bbe7-23e4796d02e2", "sighting_of_ref": "indicator--9208b1c2-f6e0-45e7-8022-c607c62fa315", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608c06a-f2b9-42a7-b9d8-12cd2afe39f6", "sighting_of_ref": "indicator--9208b1c2-f6e0-45e7-8022-c607c62fa315", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c17abb0-19f7-4c71-92d5-5d2494b7a450", "sighting_of_ref": "indicator--5511abe4-f957-49cd-90a0-67c799901f00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee41cd6-aca8-4e2e-bab7-2289b82b597b", "sighting_of_ref": "indicator--5511abe4-f957-49cd-90a0-67c799901f00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efd29fe-4e00-48d9-8384-6b14b772d33c", "sighting_of_ref": "indicator--fcd3fcf4-ff13-4223-ad05-92fa4bc09b53", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d698e82-456a-41ed-b3cd-0b4b758c9c0d", "sighting_of_ref": "indicator--fcd3fcf4-ff13-4223-ad05-92fa4bc09b53", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d4391a-45a3-457d-b625-b0f2c207b28f", "sighting_of_ref": "indicator--135db24b-ba5c-403d-92b4-ab519e3ba368", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807efe4d-6965-4946-a1ed-9a8063f6eaee", "sighting_of_ref": "indicator--135db24b-ba5c-403d-92b4-ab519e3ba368", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd350638-a173-4172-bee9-2888b8df4fcc", "sighting_of_ref": "indicator--561070ae-f711-427a-b356-e9a84e600105", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885d9b25-9ee1-4c0a-bbd4-4d0a88b8f301", "sighting_of_ref": "indicator--561070ae-f711-427a-b356-e9a84e600105", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef60112d-8f43-4b4a-a637-0d6362630901", "sighting_of_ref": "indicator--1b5584d1-85ee-4e05-898c-187d0cb02f4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a964d98-d1fc-4e92-a877-ac2b040aaeb3", "sighting_of_ref": "indicator--1b5584d1-85ee-4e05-898c-187d0cb02f4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e593fb17-0b0f-4e92-a918-f12e61123a6d", "sighting_of_ref": "indicator--a5f25667-d7a7-4194-8a24-cfd78f12512a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a523dac-27ff-4ad4-9243-d79af2a7fd39", "sighting_of_ref": "indicator--a5f25667-d7a7-4194-8a24-cfd78f12512a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59be3f14-a41e-4f67-85b3-97f7c1918147", "sighting_of_ref": "indicator--06737225-72b7-470c-b4c8-8608c1d08eb7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80da993-f0c4-461e-be1e-0dde9d17f8e4", "sighting_of_ref": "indicator--06737225-72b7-470c-b4c8-8608c1d08eb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef291939-d5c3-42dd-8e97-9ace5b3c44f7", "sighting_of_ref": "indicator--f1b61646-7429-4b94-b002-9c106dc0bdba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37570512-253c-483c-a923-f6329f33f61f", "sighting_of_ref": "indicator--f1b61646-7429-4b94-b002-9c106dc0bdba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d744096-29d1-4f5e-8daf-6d91d30a61ef", "sighting_of_ref": "indicator--414c0ead-8391-4c72-a66a-741a9d0fc261", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696654ae-c389-4701-84fb-935775593bf7", "sighting_of_ref": "indicator--414c0ead-8391-4c72-a66a-741a9d0fc261", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bed393-eeb1-41f8-ae72-2ab7bdfa9e73", "sighting_of_ref": "indicator--f34ec801-c671-4e00-ae46-8c7fad4fe144", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58f5c96-bcf6-435a-ad4a-e39a0ad69aa4", "sighting_of_ref": "indicator--f34ec801-c671-4e00-ae46-8c7fad4fe144", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aacaf98-9714-418e-821c-4092a81417b2", "sighting_of_ref": "indicator--b61e250b-eb52-4a48-b761-3714ce95f43a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970585a3-e986-40ff-84cb-5ef5fa85d130", "sighting_of_ref": "indicator--b61e250b-eb52-4a48-b761-3714ce95f43a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c8b7d-2077-477f-b989-dd15267ce6fc", "sighting_of_ref": "indicator--1a32c9cc-4402-4059-a366-0acc56f59970", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecabdc36-1f56-427a-8358-501e9185db58", "sighting_of_ref": "indicator--1a32c9cc-4402-4059-a366-0acc56f59970", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133ff9d5-e75d-45d4-9006-132b2f9bd5f3", "sighting_of_ref": "indicator--58a186e9-dad7-4d80-87bd-e4da54179b14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251cdaaa-2032-437f-9f12-9bb360c9421a", "sighting_of_ref": "indicator--58a186e9-dad7-4d80-87bd-e4da54179b14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f3dcdd-4957-4499-b766-fd378989737d", "sighting_of_ref": "indicator--7163ed0c-6dd2-4ad7-bba5-963a1ab29f04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d730f32-979a-48b1-8e9a-c01bcadd4f50", "sighting_of_ref": "indicator--7163ed0c-6dd2-4ad7-bba5-963a1ab29f04", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ad9cdb-234d-4562-983d-83aafc80ba41", "sighting_of_ref": "indicator--61c6399f-a9fd-4ff9-90ce-a7fadb92786e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b45f52-2b6b-43eb-8c38-29d7a82ab968", "sighting_of_ref": "indicator--61c6399f-a9fd-4ff9-90ce-a7fadb92786e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459aa8a-41c8-4d35-96ae-8f0ec7f95251", "sighting_of_ref": "indicator--2b7f9cb7-4b73-4b4d-8433-972c5adb7c81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a044e41c-84da-498e-88a3-9a848442b6d8", "sighting_of_ref": "indicator--2b7f9cb7-4b73-4b4d-8433-972c5adb7c81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d103a01-b95b-4bc1-bbc3-d16f9a517517", "sighting_of_ref": "indicator--a5bf3ec4-4aba-4ff9-8058-c2e2d9f842d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44992cc8-63be-4016-a50c-f42a4e29f38e", "sighting_of_ref": "indicator--a5bf3ec4-4aba-4ff9-8058-c2e2d9f842d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4b4f64-c253-4342-a4ec-a9b55b81916d", "sighting_of_ref": "indicator--1ae37d21-eac5-4fb3-aee3-bf790d34a34f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d6d62d-c44d-4b98-9631-ef4b991365b2", "sighting_of_ref": "indicator--66670aa7-0697-44e5-850a-95a826032841", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3245ebc-7f74-4923-be33-c4efd6c56fd4", "sighting_of_ref": "indicator--300a50d5-916c-41e7-a5e4-cd95dd38a178", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03759106-06c5-4c17-9ea1-855b3cf097db", "sighting_of_ref": "indicator--ff5eab67-5f29-4d1a-9559-4c0690a18c51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b85f4dc-8f07-415c-8e95-ab45823e6133", "sighting_of_ref": "indicator--1653bf45-005e-4924-bde8-3302e5d17545", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfe737d-e64f-47c5-b2e3-6d67e4e603a6", "sighting_of_ref": "indicator--1653bf45-005e-4924-bde8-3302e5d17545", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceb8583-7bf3-448c-b25f-cb7ab52e11b1", "sighting_of_ref": "indicator--43daf459-e8fc-44a6-997d-08f75f4ea4b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0149eb4e-4150-4359-b6e7-6643d87f1a4c", "sighting_of_ref": "indicator--8086c5c1-63db-4dc3-b3e3-64a7d8d7fd8c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f39e14e-9cbe-4c8e-9519-70f26e072f82", "sighting_of_ref": "indicator--8086c5c1-63db-4dc3-b3e3-64a7d8d7fd8c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd383df-e3e7-4572-9ae5-706a398d1b40", "sighting_of_ref": "indicator--8086c5c1-63db-4dc3-b3e3-64a7d8d7fd8c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3777cd24-090b-4e62-8b14-500e85cf9f0e", "sighting_of_ref": "indicator--aa4bed2e-c053-4ec6-8efe-cb2bf8d7242c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8d1401-7428-4ed4-915f-edccc01a610e", "sighting_of_ref": "indicator--f2315857-1466-4061-ba82-f5aabb861190", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a74a9d-77cf-419b-84bb-4ed822dcc387", "sighting_of_ref": "indicator--053264e3-6ee4-44c3-88f3-4a7491029c4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cd13da-f643-46d4-b8c7-f7f7df18398a", "sighting_of_ref": "indicator--feebbfa1-d4e1-44ba-b87e-852e5539faac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daac508-522c-4ed8-85d7-e093c52d04e8", "sighting_of_ref": "indicator--973c5824-aaec-4c05-b9ee-2d7cf08d8034", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcc14f7-7a70-4f9a-bf78-70a025826571", "sighting_of_ref": "indicator--7b37c704-2312-45b7-9f9f-8f252f8cabfb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e345f7ec-9a59-44d6-97e1-12255693aed6", "sighting_of_ref": "indicator--34bbf9b8-9fe6-477c-bdce-3380919c2104", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caccefe3-5ef6-48e8-9463-291250548337", "sighting_of_ref": "indicator--809833b4-4128-4e1c-9bfd-6957422ea7ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab533c10-9716-40df-a8b6-9dd999de832f", "sighting_of_ref": "indicator--9cdbd1f5-f955-4b24-898f-e06621f26a06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f401b731-5124-4750-97bb-b58a61d0bac4", "sighting_of_ref": "indicator--9cdbd1f5-f955-4b24-898f-e06621f26a06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e8784e-d968-4a3e-a224-a25c84378d89", "sighting_of_ref": "indicator--f5b71c69-4751-4227-9948-38822a828c0f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32928a77-2daa-4d17-ab3b-1d508d39bc27", "sighting_of_ref": "indicator--84d7d2ae-cfb1-4314-ac40-154f8cc1e976", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f445da-f03d-421a-9604-9c5ef426e63b", "sighting_of_ref": "indicator--d83ccbb0-134a-486e-b1ad-8ed6069bd067", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce919d0c-5a94-4f60-986a-4e10adc16078", "sighting_of_ref": "indicator--a65e4293-fec6-47df-8a3a-388050bd847b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde3d51a-e71e-4f43-abe6-153d9b39cc1f", "sighting_of_ref": "indicator--0af92793-4445-4b74-996e-730f747c5755", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241a626f-e258-425b-a1c3-52ea7885de0c", "sighting_of_ref": "indicator--3293e969-b91e-40cd-b738-37b24703a1dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecc6415-93a7-4aae-8e90-4d005dea38d6", "sighting_of_ref": "indicator--818921b8-71bd-427d-acec-de3b4462e8ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a715410-0a96-4dfa-adde-cca6aa2f7e7c", "sighting_of_ref": "indicator--a05a3e5f-65d1-4f2d-8c7d-00725072034d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc46b54-514f-4e84-9624-b9cdaaff4d00", "sighting_of_ref": "indicator--eeab1651-e561-4e9a-b788-b8f1d0cd0806", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033ad831-7d6a-462a-a0b6-80acd40e5335", "sighting_of_ref": "indicator--f528c53c-2431-40ef-9f0b-b72353faa6c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ddb0d1-4789-4d11-b384-4db896be699e", "sighting_of_ref": "indicator--4115ce00-65e7-463d-81fd-bb7d9f5e221d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367cb678-d482-4e3f-b5e4-5b7dc3e86d2d", "sighting_of_ref": "indicator--b42b4168-39fd-4c2a-a5ff-83ed7d522f1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dca521-0f4a-42c9-8d8d-d414649e4b78", "sighting_of_ref": "indicator--c840c45c-9979-4f2f-a929-ecb4da38c145", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616baa3d-d8c0-43a0-9dee-bc4ec77dce93", "sighting_of_ref": "indicator--4f07d4b5-85b1-42bb-806d-7ae3eff55725", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d866be-3e7d-46db-b4c2-57e5286f2743", "sighting_of_ref": "indicator--4f07d4b5-85b1-42bb-806d-7ae3eff55725", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b146a4-414d-4afa-a615-ecddba3153f6", "sighting_of_ref": "indicator--e24370ef-ebc4-406a-a86d-397434fe148a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522e0fbe-887b-4635-95c8-90a79a37ac7c", "sighting_of_ref": "indicator--e24370ef-ebc4-406a-a86d-397434fe148a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55113652-fe24-4dbe-9607-42f8e9a6bae0", "sighting_of_ref": "indicator--88282adc-b21a-48be-9c08-6b20c4700d18", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6c94d4-928f-4adc-82ff-9c897402965e", "sighting_of_ref": "indicator--88282adc-b21a-48be-9c08-6b20c4700d18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475d15f3-38a4-473a-bfa4-e996b21cbb93", "sighting_of_ref": "indicator--730d49d1-44f6-4fd4-bbfc-ff942521ee82", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9276f111-6bf5-4bac-8e65-2be7efa3ee94", "sighting_of_ref": "indicator--411d6e4b-66c5-4c44-b8df-9e9eb19c0b45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14170a0f-82af-47aa-8783-daab84d5deb1", "sighting_of_ref": "indicator--a66f14b5-eb4e-426f-bf4c-4ee594011cf2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663a5fe9-7f20-4a7c-95c5-40294498dc4c", "sighting_of_ref": "indicator--a66f14b5-eb4e-426f-bf4c-4ee594011cf2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d951704-dfbb-4258-bfb1-d34a27cbc444", "sighting_of_ref": "indicator--2287fb3f-4bfb-47bb-baae-cf51cfaee02b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faa5ae7-cf70-41dd-a9a5-991dbfc3f3bb", "sighting_of_ref": "indicator--3b4f8f26-b8d2-4ca6-a678-c8e164f6d44b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291c053f-2a6c-41c5-bb68-78dc19aba018", "sighting_of_ref": "indicator--7a2f7f40-f478-4148-bb19-7b572d3ba5d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12187d2-9c29-43e3-bb61-7eb7e1d0195b", "sighting_of_ref": "indicator--f8f3f6f3-511b-4e32-90f9-4b77d3631e21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be24d98-80b8-4525-a050-0107fb8e1027", "sighting_of_ref": "indicator--ad732311-beff-43a4-be70-a5afb10cf902", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d418ac0-cc76-48d0-b253-46f8c1d98a76", "sighting_of_ref": "indicator--5a82e8be-874e-49a2-982d-2a595722da7d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcac957-840f-4047-9227-359bea42f454", "sighting_of_ref": "indicator--e814e3dd-99dc-46e9-9815-94ddd9627bb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2488b59-16e2-4c95-bd30-5391abfcbf93", "sighting_of_ref": "indicator--d96b2924-7f8c-4d15-8966-153818990200", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1502be62-1a28-4c29-8ef9-a645b2afdfe1", "sighting_of_ref": "indicator--d96b2924-7f8c-4d15-8966-153818990200", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b3f9b5-3ea7-48a8-a49b-ee61331bdb11", "sighting_of_ref": "indicator--08f0e72a-38da-4d96-b651-a4f9e479bfcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d53525-67b5-49c0-aba8-388c563b101f", "sighting_of_ref": "indicator--fda22222-59a9-4358-af84-cb9d74a16d5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c2f710-47ca-4dbd-a00c-10c2f1fe286e", "sighting_of_ref": "indicator--fda22222-59a9-4358-af84-cb9d74a16d5a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f62e90-5f29-4de3-aa44-392480d193a2", "sighting_of_ref": "indicator--a9873a29-8a3a-446d-bf7b-46142ee179d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b695e6-f0f0-4628-8be5-fdf4d5a63cc5", "sighting_of_ref": "indicator--15fea315-fedf-4a9f-be86-fe11df4b728a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7dc48-ce0c-4395-ab84-480e8e1707af", "sighting_of_ref": "indicator--15fea315-fedf-4a9f-be86-fe11df4b728a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff7607e-c801-4b2d-b6fa-4a8a36c97a2c", "sighting_of_ref": "indicator--4ab299b3-7f72-464a-bfd8-faf1f31ea826", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30869226-d878-4cea-95ee-adb24cb6381e", "sighting_of_ref": "indicator--8dc415f4-a7aa-4a18-93f0-6cec49796039", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fd37a5-fde4-472d-95e1-4c19165506e9", "sighting_of_ref": "indicator--8dc415f4-a7aa-4a18-93f0-6cec49796039", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e57664-5e18-4aa1-bd49-4c0cad2ad7e2", "sighting_of_ref": "indicator--fcc95c03-3b99-4fed-a022-30ec19ed70f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc18b20b-a660-49e6-9523-a206cd7b7985", "sighting_of_ref": "indicator--1fe4f806-9aa6-46a7-b2f6-221902d91cbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf02a99-8cc6-4da2-a72e-19d392623518", "sighting_of_ref": "indicator--a83513b1-73e7-42c3-bf08-f4065424791c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02011cb-826e-4d49-8e61-cee418badabb", "sighting_of_ref": "indicator--3ef56824-6e55-46cc-9355-c88ca8c2634e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcf01de-a6eb-494b-8451-15e993ef1c88", "sighting_of_ref": "indicator--3ef56824-6e55-46cc-9355-c88ca8c2634e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27de70bf-11a2-41ca-a45c-8e5f9202c3eb", "sighting_of_ref": "indicator--b57d3724-c058-4c3f-b22c-c181662a199a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870612f6-defe-4344-8d9d-aaaa6d545c4e", "sighting_of_ref": "indicator--08c1fd57-1277-4082-b7c0-bd40a051d05d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d610cf-cd13-4ccd-a663-7ccf6c0698f7", "sighting_of_ref": "indicator--08c1fd57-1277-4082-b7c0-bd40a051d05d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa587e1-144a-48f3-ac43-0958d5d3b460", "sighting_of_ref": "indicator--8a701255-dec5-471e-b20c-215947f9b61f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741ff53d-c2bd-45d0-9ae7-17d7891882e5", "sighting_of_ref": "indicator--e57668e8-3eb6-43dc-8c43-72025699cf2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca3db10-5bb4-4a16-a23d-dfad9fa0e1a1", "sighting_of_ref": "indicator--be3d175b-2c17-45d9-938e-add52852ec97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2408768d-821e-4838-96ce-3bf54430db5c", "sighting_of_ref": "indicator--c83a6b3e-e567-4a0a-af84-ade78a646f29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1f52e5-9348-4256-94c3-5c79d4b2f7c3", "sighting_of_ref": "indicator--e7760b62-9866-4d21-8dc1-91affc71052b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713afbc1-9336-445c-9738-aa630e606fdc", "sighting_of_ref": "indicator--e7760b62-9866-4d21-8dc1-91affc71052b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec6f639-2209-4eab-a1b5-831942d33918", "sighting_of_ref": "indicator--add6aa94-4d69-4945-9f54-2ac745bf1a5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef4f8b8-05b3-4a9e-b109-eec49d040038", "sighting_of_ref": "indicator--bf656e05-d375-4e33-8d6c-775a3288df8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a990a-b27c-4369-9598-d83133ce3ac9", "sighting_of_ref": "indicator--87da8445-fa19-4908-8fc3-930e1eeb041b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16775ca1-2562-4099-b1da-4d9e33b9d525", "sighting_of_ref": "indicator--87da8445-fa19-4908-8fc3-930e1eeb041b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24faca6d-7824-4798-969e-6e56bd8d0d83", "sighting_of_ref": "indicator--626e909f-958b-4735-9d5b-526623c98d11", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf83c3-aedd-483c-a5a5-565a0d5883fc", "sighting_of_ref": "indicator--626e909f-958b-4735-9d5b-526623c98d11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d9d98d-91bb-4fce-a7f0-cbabf9d0e8c0", "sighting_of_ref": "indicator--de63abb9-1135-4d2d-aba1-40c2048086ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4a82de-4870-4f72-a56b-27c51f7fe708", "sighting_of_ref": "indicator--9eff5c01-a298-492e-a13a-6bd9e4db8543", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cbb1c3-2cfd-42d0-8ae5-b6b97740d260", "sighting_of_ref": "indicator--b6d08fe0-536b-4063-b98c-0c47aae997a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72d09a0-f3c6-440c-888f-e6a1d0bd5b76", "sighting_of_ref": "indicator--b6d08fe0-536b-4063-b98c-0c47aae997a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3215f87f-c0de-426a-82ee-d6479dc11a12", "sighting_of_ref": "indicator--2501e9a7-7409-46ab-b586-d385c02c856e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959a33da-5a4e-44bc-b6d4-b439ba1efe81", "sighting_of_ref": "indicator--2501e9a7-7409-46ab-b586-d385c02c856e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16ddbdb-b7d8-4693-afd4-cf9d5db97e1b", "sighting_of_ref": "indicator--7983e8d3-7116-4271-8be4-724659e70e62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d5e183-58dd-4e3b-9d34-9736a49b0801", "sighting_of_ref": "indicator--9ad01679-851a-4328-99e6-eaa5eb999bcd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272c7827-d94d-43b6-89cb-b9fd71c409d6", "sighting_of_ref": "indicator--042f5e70-38bb-45a5-a911-5aed36e37701", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdde28d-1cb0-4528-8590-e474c87df787", "sighting_of_ref": "indicator--2ed176f4-8730-42f1-965d-4f73fe363426", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a45acee-c4f7-46b7-b0af-01a0a4633775", "sighting_of_ref": "indicator--790a6c78-8063-4767-a99c-51e7ff019e79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdce34b0-730e-4de3-a79e-ce786e09f48c", "sighting_of_ref": "indicator--fd3c88f1-eb1b-47a3-b4f9-3139b1bbdba7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d224d1bf-b525-4c82-8d89-d9b84c4ca76c", "sighting_of_ref": "indicator--fd3c88f1-eb1b-47a3-b4f9-3139b1bbdba7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe6e54a-df61-4bc8-aae1-1b1541e43bf0", "sighting_of_ref": "indicator--eda34f49-4f67-4a21-b109-4b70f26e719f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec70e8f6-42c5-4425-8475-ae2bbeb7061d", "sighting_of_ref": "indicator--abbd832c-bc9a-43d4-a522-a1129c48119c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7afa933-346d-4f9b-80e1-1f76ec0328cd", "sighting_of_ref": "indicator--fedbea7d-0275-4597-a29d-4d84134c1ad7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ffebf4-3b71-4e4d-95f5-021ae6979714", "sighting_of_ref": "indicator--f107f7bc-55ff-4376-8045-b81d7c7bf0bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1d9427-d406-43ea-a177-d60a41010bc0", "sighting_of_ref": "indicator--c83a7d7d-fad4-4d28-ac3a-bf0753166d0d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bd5dbe-b74c-44a8-9a6c-0aa998344f23", "sighting_of_ref": "indicator--946890de-b1c5-46f5-ba4b-00f68c6c6217", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02393c2-d9cc-4ea5-9d94-43ad74861def", "sighting_of_ref": "indicator--dc7304f6-82c1-4d35-aeed-4b59981bceef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e85b9f-d861-4c53-87f0-f455f109d792", "sighting_of_ref": "indicator--dc7304f6-82c1-4d35-aeed-4b59981bceef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fe11a1-3809-4b67-862c-a381eb31418f", "sighting_of_ref": "indicator--ea20525c-0b30-49a6-8e58-7dd90e449853", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c53f36-65af-40c9-aa57-7e4188eb11d2", "sighting_of_ref": "indicator--b5ee4b12-cfcd-4bee-b846-08f13df68fe7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade6427a-2694-4ab1-a5ac-8fed3be2a41c", "sighting_of_ref": "indicator--3b19a198-de2d-40bf-a41a-63f53f97608c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef126393-9916-421b-804c-4ba5015bc1a9", "sighting_of_ref": "indicator--3b19a198-de2d-40bf-a41a-63f53f97608c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccb787b-3dbe-4bdb-9c65-94c376a0f223", "sighting_of_ref": "indicator--e293d810-3586-40ca-8c8d-299b378a1057", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b32ad00-b185-4d18-8ed2-ffb52fbd2197", "sighting_of_ref": "indicator--e293d810-3586-40ca-8c8d-299b378a1057", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632bb306-8e50-433d-9311-8e6f80915ea1", "sighting_of_ref": "indicator--b215196e-8efc-4328-a8a2-9f7c4929499d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2cb82c-60bb-4cd3-804d-722026415ef5", "sighting_of_ref": "indicator--10c2523f-498b-4a0b-a012-b78ccd4226c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcbc146-302e-436e-a440-8d61a388ccd5", "sighting_of_ref": "indicator--6bb45120-38ac-40c4-ad5a-d8a7ada92df9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca5fea-75b6-46cb-abad-f498e80467d1", "sighting_of_ref": "indicator--3cb7098d-8b69-439c-a14c-96d9dbe05857", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15916e91-61e9-4e0d-b59d-e0d81965e984", "sighting_of_ref": "indicator--3cb7098d-8b69-439c-a14c-96d9dbe05857", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a364da49-62c3-413f-9285-b4c2a49c18b2", "sighting_of_ref": "indicator--49c2b44a-11b0-457e-972e-71437e9c1cd4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaca414-01ec-416c-a47b-9143208b9c25", "sighting_of_ref": "indicator--af38341b-125d-4e7f-9015-72c623ebab8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e04939-397d-401b-b836-c43fda664b0f", "sighting_of_ref": "indicator--ff18bc09-82f1-45f9-95d9-ce4d9722d659", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30410a7a-0e0a-40d0-977e-e1e65fac6d0a", "sighting_of_ref": "indicator--d8d6e82a-dfca-404a-8545-564f306d0241", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca927e22-e1e4-4600-afb9-263a3dec7246", "sighting_of_ref": "indicator--543b6e7d-e716-474e-9bce-dc66d89e4fa8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8255b7-1e3f-47c6-b087-44658bf99228", "sighting_of_ref": "indicator--9982d92e-2d84-493a-9ff4-4f252ae99837", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5295ce9d-b611-47bf-b2b0-e794d4ac6cfb", "sighting_of_ref": "indicator--ccae1696-0073-4638-a32e-1eb1e1c93d91", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b695ba9-421c-4c83-8c0d-8a9141fef057", "sighting_of_ref": "indicator--bac9a595-c2a8-4449-a977-1d4fc66e4ef9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a6e111-87f6-4213-b514-e84787efcf8c", "sighting_of_ref": "indicator--a7110650-6978-4b8e-9881-47df2932deb2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81b27a-71bf-47f8-a1ea-395fee56ebe7", "sighting_of_ref": "indicator--b34f40ff-a0d6-4c3e-b1b0-d339dc6a70ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cace1713-9870-4238-8cc7-1786dfd442e6", "sighting_of_ref": "indicator--b34f40ff-a0d6-4c3e-b1b0-d339dc6a70ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ff9447-1091-4f07-b724-0f8619199d59", "sighting_of_ref": "indicator--ffb76d31-da90-46e3-978f-5faf518985a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efbc3fa-da1d-4c06-a133-cb8c476c4c08", "sighting_of_ref": "indicator--29f8ee6e-c567-43ca-9a2f-2dd4b367083d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a6a378-261d-4bc6-9909-44d708fd0e96", "sighting_of_ref": "indicator--e7c87934-d6b7-4099-9e6a-5692dee9c12d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9772490-f090-48fa-977c-2b8b9f6aae0c", "sighting_of_ref": "indicator--6312d874-9a4d-4398-9e4a-fe8c09806e14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fa1c69-8cea-429b-aa7d-0ce0bef99bed", "sighting_of_ref": "indicator--e7924685-bacf-4254-bbbe-4e23a971d593", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc283e1-04be-4775-8343-5a7e0d00de79", "sighting_of_ref": "indicator--e7924685-bacf-4254-bbbe-4e23a971d593", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ccc512-0c9a-413c-992a-67258be38ecf", "sighting_of_ref": "indicator--86c99051-f77a-4d5e-9ed0-ab702fecca97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da066bf-733c-4120-8f8a-659629c4ee41", "sighting_of_ref": "indicator--e5d24561-5d29-4045-963b-c889c491481a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b107263-9441-4502-881e-ef813e72d462", "sighting_of_ref": "indicator--fad8e451-64de-4bca-b5ad-b8571e0fbe94", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303f54cf-35fa-48cb-8d87-f199082d2ad5", "sighting_of_ref": "indicator--fad8e451-64de-4bca-b5ad-b8571e0fbe94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b6ec6d-4d4d-4488-beb4-79d9338fa8ae", "sighting_of_ref": "indicator--6854541f-c9c3-47d3-b69b-0bbdbacb5eef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6d7a94-2877-42b0-9532-dfa2786af258", "sighting_of_ref": "indicator--6854541f-c9c3-47d3-b69b-0bbdbacb5eef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6512c54f-ebcf-4671-a854-acec22c617b9", "sighting_of_ref": "indicator--0fac17f8-1cb5-45fa-9e22-472567f2f213", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11266af2-9e71-4d0b-8ce3-ebb8d554e552", "sighting_of_ref": "indicator--87282b97-a53b-41eb-8f3e-0d45c02e24a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7807937-8499-4f49-b106-763708659885", "sighting_of_ref": "indicator--01e12e53-bc26-4216-9076-9fffd4531317", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d8e92b-b173-4739-9d66-2a1077c235c1", "sighting_of_ref": "indicator--28f57352-e838-4d2e-87f5-2d6f787bfc47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b728ba-bb59-45a7-994e-b27485b317c3", "sighting_of_ref": "indicator--df076e67-a5b3-41f8-8367-3d7cb800077e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d7068a-5af6-40da-bcb3-d0ffd9b92309", "sighting_of_ref": "indicator--35fdc3e1-1472-46bd-8857-e46178d000c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c37512f-4b3d-4325-9d78-9851c2381512", "sighting_of_ref": "indicator--5f047a7d-fae3-418c-bd2a-67f6c3e5802f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67be2bb0-abc4-44e1-ab9e-f553bfd5da3d", "sighting_of_ref": "indicator--5f047a7d-fae3-418c-bd2a-67f6c3e5802f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee7d595-4798-4d13-9661-04c1285c100d", "sighting_of_ref": "indicator--d51e54e5-f203-4f99-9c79-9da483ef1a0d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f1ea44-c3d0-4dd0-a796-e9532ddcdf20", "sighting_of_ref": "indicator--d51e54e5-f203-4f99-9c79-9da483ef1a0d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d466dd8-2f49-4a05-b3ba-65f7d561fded", "sighting_of_ref": "indicator--46339502-f9a8-4d4e-8648-0567798f538a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccd5f1e-67bf-4ee2-8348-d9daf672a92e", "sighting_of_ref": "indicator--505ab9a7-134c-49aa-b7db-850a6c50f3e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbca8a9-ff4b-4d90-a357-fa3115b3a683", "sighting_of_ref": "indicator--505ab9a7-134c-49aa-b7db-850a6c50f3e2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e5516-aa24-4ff1-b63e-76adcf994446", "sighting_of_ref": "indicator--45d7e7a5-b500-47a8-ba8c-2c1a24256e3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b519af-302a-43b5-b910-e2a6b448578a", "sighting_of_ref": "indicator--5df77a24-1d39-4e87-9d6b-1975b87ecdb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1f45ac-a6d6-4f9c-b337-7fa63ec6467e", "sighting_of_ref": "indicator--9b35cb4f-4081-4a4e-afe2-f832b9ec1cac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7f9d0e-5f60-4c95-9267-6ea84734eacd", "sighting_of_ref": "indicator--3ac5d012-8d90-4c23-8115-a501a9497760", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079f3a9b-e312-4f05-a5dd-d597afade625", "sighting_of_ref": "indicator--3ac5d012-8d90-4c23-8115-a501a9497760", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba471aa-ab10-4d76-ae3f-15af2afe3193", "sighting_of_ref": "indicator--a6312297-8693-4cd2-a4cd-b4009060d4b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7170939-63ec-4596-a859-5bd488b15a56", "sighting_of_ref": "indicator--060f139a-eee8-4146-97a0-808efe815988", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d7e5a7-c52e-4759-b8c7-dd82f849ef1b", "sighting_of_ref": "indicator--6e30de16-6b3f-44d5-96d8-07e4995fecd0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52381719-ac26-4481-b1e4-f113ada50d6f", "sighting_of_ref": "indicator--6e30de16-6b3f-44d5-96d8-07e4995fecd0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e6fab3-702a-4021-b841-a0c4ae54d65c", "sighting_of_ref": "indicator--7047be92-b2be-4a2c-acde-a3dd6e974c16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c7e49-485a-4a32-ba59-9721568b9433", "sighting_of_ref": "indicator--ee2752a2-830d-40ff-ad2e-2ffa012b571d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d94cc4-9b18-4591-b4bf-302d062b7aa9", "sighting_of_ref": "indicator--8ce71557-ff92-493c-bb6f-07f4e70c07aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be25ca70-f669-4f19-b10f-5d21a5672d9e", "sighting_of_ref": "indicator--6a9ab64d-61ab-4220-bfa5-8d751c5c5457", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16abb212-b363-41cd-b8ee-42c94a32d25d", "sighting_of_ref": "indicator--4b57293d-1724-40fe-ad57-4f2e037bf1f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a4aeb3-1100-4345-8097-42306cb372bd", "sighting_of_ref": "indicator--b6ce14ad-6bbb-4104-b443-7e05e0e0b8cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e155f1-1c31-411a-8ad0-31a4429070a8", "sighting_of_ref": "indicator--ba2d3493-9592-48bc-add6-db8c8f396201", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906860a8-6bbb-451b-9365-1946ed8f5b1a", "sighting_of_ref": "indicator--d7c44dc7-eb16-43c9-87d4-d23ddb933b48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3470c9f0-1b85-4470-b0a3-f6b16c92769b", "sighting_of_ref": "indicator--045ec539-2dd9-4c92-bbfb-e3f32f153a47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb5e298-ab3e-466b-a83b-3fa800f0c5df", "sighting_of_ref": "indicator--9eda573d-928d-409f-8d69-d70014f956fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643a915f-1dd1-4c81-97b4-fdc3bfd1ddc6", "sighting_of_ref": "indicator--9eda573d-928d-409f-8d69-d70014f956fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbbd6ee-2af4-4154-a274-04c8616264ec", "sighting_of_ref": "indicator--44cd447a-2ff1-40f5-bdc1-eff565be80c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136ec0ea-45af-480c-81b1-e188f50d7cf4", "sighting_of_ref": "indicator--3df1bf9e-78ea-42d0-aa20-70d7c2a811b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2e0088-c119-44bb-838d-2291ae9f1b7d", "sighting_of_ref": "indicator--3df1bf9e-78ea-42d0-aa20-70d7c2a811b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acfb4f9-939f-4a18-8b77-d9bc5d0ee310", "sighting_of_ref": "indicator--4d9a919d-1b76-475e-a3d3-ba003828e93c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c074c642-7238-447d-a67d-82b08038631c", "sighting_of_ref": "indicator--c6508866-9424-4d27-a371-ed3671d3cb7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a5abff-c964-49dc-9085-d8401b4a7387", "sighting_of_ref": "indicator--90ff3827-e936-4eaf-8412-7782b3dd4216", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1021bc7a-727e-4657-936a-dd001045957f", "sighting_of_ref": "indicator--90ff3827-e936-4eaf-8412-7782b3dd4216", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edee36aa-0f39-40dc-a8b5-c8f2fd91d393", "sighting_of_ref": "indicator--c5dda0af-c6c4-4dfa-9565-24444683daa2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892a7e23-6c83-45a2-ac93-f5c1974240d6", "sighting_of_ref": "indicator--148cc1e0-a882-4073-867c-6f148c79cd4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb573757-7dca-428d-bfca-b1600f8be68e", "sighting_of_ref": "indicator--8f863447-d5c6-4ac8-b496-d181b300e2db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdf113b-c774-4153-a4cc-c6029aa4415c", "sighting_of_ref": "indicator--8f863447-d5c6-4ac8-b496-d181b300e2db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8350764-408e-48cb-bb20-e83052be18d9", "sighting_of_ref": "indicator--4a5688bc-a4ac-4260-a153-6c72b85396ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db62af8-174d-4413-b117-3e7c333fb32e", "sighting_of_ref": "indicator--a43c71ca-b5e4-430e-82b5-6c359c775798", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3fd1e7-2f17-4d29-b5cf-9d4e512a77a5", "sighting_of_ref": "indicator--e2d3b0db-39c0-44f4-82b2-39fb5a7f1b05", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094bc069-6586-4758-967b-828925cfc481", "sighting_of_ref": "indicator--5a20e19f-b675-40f9-a0cf-a9f51eb54cb1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74757a45-4e1f-4529-b083-8be39e3fc452", "sighting_of_ref": "indicator--a93a2742-ffe5-456e-8dc3-76d78105e114", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c4268f-7c7e-4bcb-96c8-13fde21401b6", "sighting_of_ref": "indicator--79829927-f412-42b9-bc24-ee0fdcecdd02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76522b9-ed75-4a60-87f5-4b2222ce3e28", "sighting_of_ref": "indicator--79829927-f412-42b9-bc24-ee0fdcecdd02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a8766b-3fa2-4c4c-b6d6-ca20c2720b4b", "sighting_of_ref": "indicator--cee25be7-a75f-47f5-a149-3bb7df5e7ec6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a80d72-9bd1-4d45-82b3-144affdd3fd6", "sighting_of_ref": "indicator--cee25be7-a75f-47f5-a149-3bb7df5e7ec6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4559719-0e28-459c-83d1-f6e261d438b6", "sighting_of_ref": "indicator--e738f82b-badd-404f-82b8-178bf5e9e1c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a02b7-1626-41ac-b0d9-b74cb4d5ebc2", "sighting_of_ref": "indicator--781fd19c-d0c8-4fa2-86e2-4a6f438a773f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88026bbf-8ae0-4769-86bd-a2eeaacb823d", "sighting_of_ref": "indicator--ed45f47a-c6b9-408c-b039-ae9e9c561d89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf38d21-768f-4fa4-919a-bed44950f4ed", "sighting_of_ref": "indicator--ed45f47a-c6b9-408c-b039-ae9e9c561d89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc6fa08-f7c0-4e55-b837-ad5f015488cb", "sighting_of_ref": "indicator--a2e827ad-26ed-4188-bb02-ed3927d10057", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0426e905-a272-498d-9d0a-6d53b5254e20", "sighting_of_ref": "indicator--6b2c603d-0403-4173-903d-d6086de47a38", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1702e24e-0f00-4b8c-a754-bfa2a92fdeb8", "sighting_of_ref": "indicator--63916472-3af2-4541-9941-233ac0488582", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e285546-154b-4eed-8d6e-67516190c87e", "sighting_of_ref": "indicator--56182eb9-f182-4d05-a5bd-cbe3d695762a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b49ec0-1a61-416d-ab97-6ae932cbb774", "sighting_of_ref": "indicator--5284970f-5b98-4c78-858d-90123519fb8c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08095027-b4ae-4121-97a4-0453e4844ee7", "sighting_of_ref": "indicator--5284970f-5b98-4c78-858d-90123519fb8c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d369d6f-159c-4973-bd26-1d2747674766", "sighting_of_ref": "indicator--76d05e51-0171-4b95-9081-cbf051f15917", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8612316f-5f8c-4141-bd04-7ec1d7558dff", "sighting_of_ref": "indicator--76d05e51-0171-4b95-9081-cbf051f15917", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41048216-f064-4eff-a7bc-0847bc045602", "sighting_of_ref": "indicator--7768195f-1d5c-4df3-a05e-3c6fa6fb324b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8d4d1d-56b8-4f7b-a6d4-d4731ff1d01b", "sighting_of_ref": "indicator--3d47a99a-163e-42da-b8be-7e8295429fab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e239a293-7d61-490f-92e9-6474ac510579", "sighting_of_ref": "indicator--7dba8814-15f9-48b3-8a50-d24f67262408", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c932ade0-babb-4566-a5a6-0746a7646d72", "sighting_of_ref": "indicator--742cfe02-d8ea-415f-ac00-28f8a4eaf764", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36a35ee-0ae2-414e-b4aa-a4a0e30cbb17", "sighting_of_ref": "indicator--4666d3a5-fff6-4545-b4f1-91ef07fd4885", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34db778d-c727-47c8-935e-93fc12856ca5", "sighting_of_ref": "indicator--9a9d60d3-cf8b-45d0-8e26-ff0d63f23ddc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2054999e-85ff-4618-9509-7d531c128b8e", "sighting_of_ref": "indicator--9a9d60d3-cf8b-45d0-8e26-ff0d63f23ddc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaf53d9-e81e-47e8-ac39-b877fc66a448", "sighting_of_ref": "indicator--04f550b4-5ece-4e7e-afa8-0a01a0ed7176", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc93138-e816-4d06-bafb-d06c604ffbbf", "sighting_of_ref": "indicator--04f550b4-5ece-4e7e-afa8-0a01a0ed7176", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2f73ae-cdfc-4c89-962b-c1ca30199e13", "sighting_of_ref": "indicator--b029e52c-d86a-4f4c-92d7-788a742ebb8d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f2f0e2-0b20-4c82-bc64-259a76e9bf29", "sighting_of_ref": "indicator--9de811f1-2d55-490a-be83-d594b3cedbcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36151bf-8442-48a0-ba70-ede261ea093b", "sighting_of_ref": "indicator--47d7ae5c-7533-4a7c-b88c-6a390466039e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250a7533-5b62-4a0b-8e52-7d4ee6097c7d", "sighting_of_ref": "indicator--6d9fbf0a-208e-4b09-b4af-0182a2a78437", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71667ab-9bec-48d8-b728-a2362511c167", "sighting_of_ref": "indicator--da660b9f-6dfd-456d-a739-e117bf4d3fb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c167ee-0aa2-48a8-878d-41770ec8c74c", "sighting_of_ref": "indicator--da660b9f-6dfd-456d-a739-e117bf4d3fb6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b11051-42c7-40b3-be4e-9372372a7bda", "sighting_of_ref": "indicator--c54d8d21-9985-4579-a79f-0238a0a032d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd23950-3e8a-4a35-b0f8-6b77e527bc1e", "sighting_of_ref": "indicator--c54d8d21-9985-4579-a79f-0238a0a032d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a27e7-5b6e-429f-bf19-6d7f2be140ef", "sighting_of_ref": "indicator--e09f51a8-ede9-4551-83d7-1d0f1f81d322", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f156d4-901d-4312-80b9-04b1044b611b", "sighting_of_ref": "indicator--8b5023e4-383d-457a-b320-8dbad95034a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019ff640-99bb-49c9-ba9f-5ee49bd5d24f", "sighting_of_ref": "indicator--117a4b94-a210-45f3-ade1-df3f5441f1ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52fda67-99e2-4294-96b2-29d9163eb195", "sighting_of_ref": "indicator--117a4b94-a210-45f3-ade1-df3f5441f1ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee47f77b-2cbb-41e3-be3a-f6b69e5d5755", "sighting_of_ref": "indicator--1fe7b1c6-8c2c-457e-8566-036ff7c82a02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6ab703-fec9-4917-9382-4d7db3e3538a", "sighting_of_ref": "indicator--1fe7b1c6-8c2c-457e-8566-036ff7c82a02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab2e422-5186-45ea-b515-b610b6fe3012", "sighting_of_ref": "indicator--362e87a1-3797-4541-98a0-fa5ad1c16abe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f9db44-0d2a-4b6b-8e62-a2f20411d1e1", "sighting_of_ref": "indicator--362e87a1-3797-4541-98a0-fa5ad1c16abe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed87252-47ed-4845-af33-c0492a6da923", "sighting_of_ref": "indicator--712a133f-0be9-47d1-a36a-64739ddde611", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde99902-1de3-4ff3-ad70-55ef28235e65", "sighting_of_ref": "indicator--f35f1f94-bc1c-4dfc-b174-2dc8bd04ad0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc854cd7-4b87-4a72-a6fd-106432472692", "sighting_of_ref": "indicator--8eea53fa-a244-4faa-a2d4-96f58815c11c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc121ff-9382-41e3-bdd9-2b8883834dc8", "sighting_of_ref": "indicator--8eea53fa-a244-4faa-a2d4-96f58815c11c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6a7213-6a1a-4c3c-b50c-f7f1c32d96c5", "sighting_of_ref": "indicator--df6d91a7-6720-4b9c-a79f-4ad35bf97829", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dbc056-c405-4e05-9d15-c447efb682eb", "sighting_of_ref": "indicator--df6d91a7-6720-4b9c-a79f-4ad35bf97829", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd463a8a-ecb0-4f19-8f19-c7423227dea0", "sighting_of_ref": "indicator--8c0b0e52-ea59-4a32-98f9-ba6360ba365f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d2d83c-8fa6-459a-a83f-ddc85248a107", "sighting_of_ref": "indicator--8c0b0e52-ea59-4a32-98f9-ba6360ba365f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa7eff9-8986-4d8e-9fac-ffa98a9b0cfd", "sighting_of_ref": "indicator--31e0f598-a04f-4fa9-988b-6a108479afa8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb79168-035f-4ecf-8dd5-3efc226acd7c", "sighting_of_ref": "indicator--9cb73fdc-9122-4f14-b5d9-46e5b3ccd326", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cee8daa-6c59-4b16-b509-d729283456eb", "sighting_of_ref": "indicator--ebaec2aa-039c-4c4d-9b6a-a64731a2ee65", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2807a71-2422-4b49-ae3b-ed3dd7d25c9e", "sighting_of_ref": "indicator--f2e58122-f334-489b-b9fe-b332a4d79e34", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffeada6-8dc8-4f14-9ac6-fe5df4e3d7c1", "sighting_of_ref": "indicator--ab0470fd-c617-4e36-9dd3-45a1a782fdd5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70220727-a7a8-430b-8af5-e80bcf99ea4d", "sighting_of_ref": "indicator--3cdcf0e2-f271-421b-bb86-6853a97aae85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523b8d20-5395-42e5-a1fa-69eefb436726", "sighting_of_ref": "indicator--3cdcf0e2-f271-421b-bb86-6853a97aae85", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a4f8e1-6df0-404a-9a30-9b10301838c1", "sighting_of_ref": "indicator--5a522f69-112a-4a53-8704-e0a7ca466a29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd11c22-9567-44ba-aba7-6c0ce225137a", "sighting_of_ref": "indicator--a12f01f6-c5c9-4717-bcaf-4df2df67c0cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf3fe13-0ff0-43f7-9cd9-4cd721af7647", "sighting_of_ref": "indicator--9b73ceec-18b8-43ff-beb7-3d9d8252c099", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eee01f4-ca11-49fc-a13c-81165267b9d7", "sighting_of_ref": "indicator--9bab65fc-53a1-4373-ac9d-bfc696e4f58a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27455566-2730-476b-8455-7845bd0db379", "sighting_of_ref": "indicator--c4175bfe-8a27-413c-b52b-1fbd1a87e977", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6fa519-9ebb-4133-af85-d0e7f6cc9ef4", "sighting_of_ref": "indicator--74062507-c4a0-40a1-89a1-92215d3786e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c067c5a-d58a-4e09-91dc-7d6f238eda3c", "sighting_of_ref": "indicator--ca3b9cd4-559f-4e92-ab96-635a1512c116", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26ba612-a530-4a59-9a1e-fb7440d059ea", "sighting_of_ref": "indicator--c81ea9d7-c9cf-40eb-982d-dc0d4e7c3f73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e9fb80-747b-4c7c-aa4f-99faa125a1ba", "sighting_of_ref": "indicator--c81ea9d7-c9cf-40eb-982d-dc0d4e7c3f73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581e8a3b-4559-41b4-bc8e-96be023d4b53", "sighting_of_ref": "indicator--c58edc05-b30e-46f7-90dd-8d137c15a817", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f849882-7f19-4eeb-a99a-c00b73073f7b", "sighting_of_ref": "indicator--c58edc05-b30e-46f7-90dd-8d137c15a817", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff544d8f-bd3f-4548-b11c-2ccb19777977", "sighting_of_ref": "indicator--edf46300-a18f-4e14-a104-bba1076fff88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29caa5ed-0cb6-4da2-b533-04fc0d479f8c", "sighting_of_ref": "indicator--edf46300-a18f-4e14-a104-bba1076fff88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820d66d1-4894-44ae-867b-e664972ca6f2", "sighting_of_ref": "indicator--48072d2b-d3c6-439f-976d-c529b493dff2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddb33fc-4b67-48b3-8f5b-43ad1423647c", "sighting_of_ref": "indicator--8c2c0022-4b4c-433d-b4fd-337c94692a73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079153da-12aa-4a9f-a311-ca77faf9bb60", "sighting_of_ref": "indicator--f842fca1-2603-4371-bbc3-56916ace890b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcb0dc4-88f6-496f-ba63-bec38631ee32", "sighting_of_ref": "indicator--f842fca1-2603-4371-bbc3-56916ace890b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd088aec-d425-4848-bb1e-f731c64e15de", "sighting_of_ref": "indicator--eabfa553-50fc-45bc-9c95-8e05c5917c57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88f724a-d8a8-4278-b24c-bed62ecba68c", "sighting_of_ref": "indicator--c36e30da-ef30-4627-a34d-4ff6254f7868", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c891d3-7b60-4d5a-9db7-c6f7e4c6bfb6", "sighting_of_ref": "indicator--c36e30da-ef30-4627-a34d-4ff6254f7868", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a15cb6d-bce2-4cf6-ae7e-7a8b043d7d27", "sighting_of_ref": "indicator--cdfc5b1b-97bd-4aa5-9df1-7e1f66cd23f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beab59b-7517-46e7-8072-682367c429f4", "sighting_of_ref": "indicator--a2ef7759-5634-40c2-a2de-eb22542b105c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39ea66d-c031-4d53-814a-edfb14629e1f", "sighting_of_ref": "indicator--0329c794-bbb1-47bc-bb7b-273a186e070d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98639be-3e93-4a0c-ae5e-2a04749ebf66", "sighting_of_ref": "indicator--b12387f5-eb34-4290-b7d2-4b731d16e961", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159b7c92-44b1-4460-9358-10b3fae3415d", "sighting_of_ref": "indicator--b12387f5-eb34-4290-b7d2-4b731d16e961", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012395fe-cbef-447a-ac3a-e97dda6ebd15", "sighting_of_ref": "indicator--d7260a52-0144-49a8-a04f-347593b32747", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f882469b-ce43-4bc0-8410-f5a731bbb8ff", "sighting_of_ref": "indicator--70f78c5f-2d2e-4bbe-8d74-31975797a8b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d1b0c7-26d2-4aeb-b65f-6203fe305282", "sighting_of_ref": "indicator--24862cde-dd87-4717-9bb4-eb109ae295bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a49a79-2e7d-4778-bbd7-0b616927e260", "sighting_of_ref": "indicator--24862cde-dd87-4717-9bb4-eb109ae295bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb534c5a-06d7-455a-9b69-130cd1a1d1a8", "sighting_of_ref": "indicator--aed947ea-390d-4f78-a501-4a637cf429d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb55694-f0c4-47b1-8913-ed77df57550f", "sighting_of_ref": "indicator--aed947ea-390d-4f78-a501-4a637cf429d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c526fd9-962e-4e9a-ab91-3e1c7fc4692d", "sighting_of_ref": "indicator--7ec117fb-92ba-47de-a7bd-f4e108887272", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b365d0-0b6a-4cfa-99ef-b4a9be097da1", "sighting_of_ref": "indicator--7ec117fb-92ba-47de-a7bd-f4e108887272", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee309eb7-4ad3-4eba-9f27-01a17b34671a", "sighting_of_ref": "indicator--4a610bdc-6866-4d8b-b48c-530ae8754fb3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41bd3a-796a-4c40-af3e-ff6b66f9ffcd", "sighting_of_ref": "indicator--3855ae9b-9e1c-4086-ab03-c35d9e036f33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca572ff5-51dc-4508-941c-f7a5e2874457", "sighting_of_ref": "indicator--936c7bda-b7a4-4acc-8e93-d6f04377791c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e517b22a-b961-4026-877b-1436a663539f", "sighting_of_ref": "indicator--843d1584-a196-486c-9d4f-287637b72c86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dea1715-8290-401d-8b10-fe7d012885ee", "sighting_of_ref": "indicator--843d1584-a196-486c-9d4f-287637b72c86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18417892-427a-44ec-88fb-84be25eb2b81", "sighting_of_ref": "indicator--954a29ac-5a5b-487f-8534-77236b2620f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c671db7-7e8c-4f56-a7ba-5555ec0f1c4b", "sighting_of_ref": "indicator--fa081613-2a8e-49c9-a180-db6bcb4e6aa4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18daf3b-c05e-45f7-a6c7-523fcd5ee3eb", "sighting_of_ref": "indicator--fa081613-2a8e-49c9-a180-db6bcb4e6aa4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d06989-0873-4e0c-ab67-115c29b131fd", "sighting_of_ref": "indicator--ac346872-f503-433e-8a48-180bf7cc7a55", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e86dfff-fe47-4554-9f44-2b3c4c0b00f2", "sighting_of_ref": "indicator--5ba3cc38-9b64-48c7-9343-e30ef3b66380", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723559fb-c69d-42c1-8c21-1121f8fa755a", "sighting_of_ref": "indicator--22881281-ffb5-4ef4-947d-8dc7e2e19da4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab75c3-28ad-4082-b5da-004efd82d13f", "sighting_of_ref": "indicator--22881281-ffb5-4ef4-947d-8dc7e2e19da4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e71e3f-d16b-4438-adbc-454b53c41000", "sighting_of_ref": "indicator--330350ff-393d-43fa-834d-694065453059", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec4807e-6775-425f-a000-e08dcc198456", "sighting_of_ref": "indicator--2fc0b30c-073d-45fc-926b-9633dd307162", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256b0ab6-25e0-4d74-8c63-8277a44008b0", "sighting_of_ref": "indicator--75c5cf82-0cfa-4cf0-b0e3-494024d0f9c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4effc1e-5915-405a-8102-9500706be1d3", "sighting_of_ref": "indicator--bac8d626-15e6-407c-a2da-de1b34ed8748", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c31c03-7921-4224-9c48-383c5a1b4b62", "sighting_of_ref": "indicator--04747ada-df8c-4c7c-8f9e-697343ca2b43", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4a4e18-c279-4e51-bb37-b9ce2db36918", "sighting_of_ref": "indicator--04747ada-df8c-4c7c-8f9e-697343ca2b43", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf3b046-301d-4563-ad96-2fda159c94f1", "sighting_of_ref": "indicator--0b622377-6a40-42e9-acab-81fd3c16a18e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02567dd-f92e-496b-8372-e349b845e557", "sighting_of_ref": "indicator--26dea9e3-8795-4b71-816b-45127f97bd4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1fcdfd-ca0a-4c70-aec7-523d418ab9a5", "sighting_of_ref": "indicator--794202af-f8f9-444d-acea-798f1c1aded8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124a45b1-8540-486a-9615-962cc80956ca", "sighting_of_ref": "indicator--794202af-f8f9-444d-acea-798f1c1aded8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab145e40-3a92-4b66-bfa9-61e18c143d45", "sighting_of_ref": "indicator--047e9fe7-7611-4f64-920c-926dec7be19c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847df475-91a6-4fed-9417-f3130fa118eb", "sighting_of_ref": "indicator--047e9fe7-7611-4f64-920c-926dec7be19c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b62137b-35ec-40a4-822f-d8f19a7acc56", "sighting_of_ref": "indicator--d22de0aa-ce92-4c08-a0cc-67b4e0232377", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488747ca-ce11-4015-b5e0-8bb5ab0ca8fd", "sighting_of_ref": "indicator--d22de0aa-ce92-4c08-a0cc-67b4e0232377", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a956c9fb-83ad-4c11-a231-5dcd4ce9e680", "sighting_of_ref": "indicator--ebf0ec84-346d-4622-adda-87c926980038", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dcfada-edf4-4e62-a83f-3cc319fb6c7c", "sighting_of_ref": "indicator--7a7a69b4-57ee-4284-bfc6-c86eacb6fc3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e378810e-e3db-4fc0-8f61-f91a6b7b6f9d", "sighting_of_ref": "indicator--6ad9d4c2-f029-4141-9cac-3f87d8d19886", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b58ba5-5e38-40d8-b800-2444ab500cc4", "sighting_of_ref": "indicator--81948afc-232d-4ce5-ab63-bfe6517c2c16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45741e30-35ac-4696-8193-95e640a511d6", "sighting_of_ref": "indicator--56882337-d2b4-49b8-a001-85ada36673e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358c998f-3c58-407b-ae4c-3a9ea47f634d", "sighting_of_ref": "indicator--56882337-d2b4-49b8-a001-85ada36673e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d292bed0-4b78-4f43-98dc-3912a295056d", "sighting_of_ref": "indicator--d67efe72-4afb-45ea-9214-b5213a7246a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8cac2e-0ba6-4328-b91a-98704012d5bd", "sighting_of_ref": "indicator--86051834-41c5-41df-a442-cc79edfc1de1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bca237-808c-4331-b6ae-f0db89f2b652", "sighting_of_ref": "indicator--a7f6f7cb-93be-4ec8-8f51-b75128839f45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e3ffb1-5d53-4a87-8ade-5aa107dc44d2", "sighting_of_ref": "indicator--31ed8985-bfa6-496b-9bcc-8f5bcd989b86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e326c395-1f0f-4658-882a-db974d7855de", "sighting_of_ref": "indicator--31ed8985-bfa6-496b-9bcc-8f5bcd989b86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bd5e23-0f81-438b-a775-6e5ae7aab2ed", "sighting_of_ref": "indicator--252055e1-0d0d-4e50-9385-9d3e8391d2e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f2ae27-b1aa-4cd0-bcab-5dc5d8f9fe37", "sighting_of_ref": "indicator--252055e1-0d0d-4e50-9385-9d3e8391d2e7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794aa522-e1ad-42f2-aa25-6d64fea22dff", "sighting_of_ref": "indicator--0ee36be3-7a3a-4c99-a555-b2c8a8ec30f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b9f6c8-22bc-4965-ad99-737e9c2882c5", "sighting_of_ref": "indicator--dac4c2ca-93a1-45cb-8906-b17f5e6caf33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d759f43-e3f2-44ef-b48e-0aaff9bed184", "sighting_of_ref": "indicator--dac4c2ca-93a1-45cb-8906-b17f5e6caf33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a48e3ee-ecc5-467f-9abc-8be41e58bb73", "sighting_of_ref": "indicator--b04b86dd-e355-496f-be26-ce0901cadf6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd166cd9-a658-47f7-924c-f2103537cfdd", "sighting_of_ref": "indicator--9228c74e-c4b8-41ba-8ad5-a89abc43fed3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff55364-c636-4c6e-8c6d-57b214bc2c01", "sighting_of_ref": "indicator--9228c74e-c4b8-41ba-8ad5-a89abc43fed3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a8493f-9884-4554-9ac7-c233509d9635", "sighting_of_ref": "indicator--7119c089-9ad8-4374-b1bf-a07de6eb3bce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ea98f3-6434-4a27-bf4e-b64cd867edb8", "sighting_of_ref": "indicator--f4f52b72-8a8d-4168-848a-547bfadc6544", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4aa013-1750-4f3b-9898-fec762fb82e4", "sighting_of_ref": "indicator--f4f52b72-8a8d-4168-848a-547bfadc6544", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa1a370-03bb-4eae-8dcc-40c3ad64a9cf", "sighting_of_ref": "indicator--0d7dc2e9-9774-460d-80b2-66eeda3640ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd15f78-9023-4440-afce-99593379e894", "sighting_of_ref": "indicator--8d49de95-7e61-4085-842d-c5d8d9589df0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260b48ae-ac95-4911-a0eb-9cda887f57b7", "sighting_of_ref": "indicator--47938799-8460-471c-a8e3-5b5a3b60d82c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422ed5e5-8da8-49e1-83b3-056c56deb741", "sighting_of_ref": "indicator--cccd3e93-d071-4eb9-9d12-81455181f8c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f183a4-0cd6-4bac-9006-87b1cc414419", "sighting_of_ref": "indicator--d607abff-c100-408f-9c27-e09113928d2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d0be44-aad2-49e7-8451-c4ec76837cfe", "sighting_of_ref": "indicator--d607abff-c100-408f-9c27-e09113928d2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd16565-cee3-4175-a06b-c256043a3d94", "sighting_of_ref": "indicator--9a27fab3-939c-449c-8341-29f4d3528bc9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5a2833-07ee-46d8-87c1-d1d459d44f46", "sighting_of_ref": "indicator--911c5047-c838-45e1-a690-35e185fe4e09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a2d4d4-f631-424f-bc41-039835dc154d", "sighting_of_ref": "indicator--86753c28-2307-4580-9d8b-6eeda01ae0b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72107b98-0a09-4b1f-ac79-2070c545cb17", "sighting_of_ref": "indicator--3e41fa1a-7d75-4275-8f6f-db22071d5eef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c63976-4b88-42c2-814b-92a410225988", "sighting_of_ref": "indicator--3e41fa1a-7d75-4275-8f6f-db22071d5eef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6717fa9-fa21-474e-aaca-3e7a15672a19", "sighting_of_ref": "indicator--3f9fda68-036d-4d0f-a3ae-7c4e000e6385", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1a2b68-5100-4e95-9a13-3ecf0f9c1bad", "sighting_of_ref": "indicator--5c746d66-7cc5-415c-835e-86b8d0537378", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd281f33-ae80-43dc-a05a-544ae8022b63", "sighting_of_ref": "indicator--b4682235-067c-4ad1-bdc4-10f499a415dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417d09be-5e2c-44b3-855d-036e984930de", "sighting_of_ref": "indicator--6a2ef0a3-14bc-4489-9029-d435de7bf0d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2124af5b-b45e-48df-b5ae-6ef7464b4682", "sighting_of_ref": "indicator--370b858e-24ff-4ae5-b2d8-0a20ac544635", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe2d12d-97ba-4a36-948e-7f905c7d7036", "sighting_of_ref": "indicator--dbd1e9b4-3c12-41ac-872c-44d0c1c77add", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a13c5c-0e5d-469d-8821-b92ad1558a2c", "sighting_of_ref": "indicator--3a7d67ab-ed39-4b5f-921e-bcb9f00795c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e052bb7-fcd2-409d-8c39-3b451ae51822", "sighting_of_ref": "indicator--7fe79f80-67a6-496d-a549-a4ea40b32ec3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b57cdb-487a-436a-8caf-f531f59c4ab2", "sighting_of_ref": "indicator--7fe79f80-67a6-496d-a549-a4ea40b32ec3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f7464f-56df-4b88-b37b-f91369a3f21c", "sighting_of_ref": "indicator--b1de1420-41ad-464a-b326-8b3af897a89a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7e37a7-89f1-4c76-b5a0-d83d20347e46", "sighting_of_ref": "indicator--cbf5b6ea-eb22-4f51-805d-fda0082d737e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a595be0e-bb22-49f2-be05-f0beac446cf4", "sighting_of_ref": "indicator--2cbd1f45-ef13-4748-b768-cd89b5656a5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e047143-2440-4c04-88d5-491ed9673a7f", "sighting_of_ref": "indicator--2cbd1f45-ef13-4748-b768-cd89b5656a5a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82e8ae4-aab3-451c-b5cb-9a0f33927749", "sighting_of_ref": "indicator--d23dc936-bbf8-4793-a6df-8c9670ac66be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd64a04c-39d6-4a15-94e7-192c1be55143", "sighting_of_ref": "indicator--8f62ffc2-c19c-4bd6-b4cf-c2cbf9ca0407", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31ba73a-7788-4083-a5d7-00c84ba2c8f8", "sighting_of_ref": "indicator--d3063794-5ee7-42da-a49f-a13ff6639ead", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c096b2-7fc3-4616-9a64-eeba9c820327", "sighting_of_ref": "indicator--d3063794-5ee7-42da-a49f-a13ff6639ead", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e120d8e2-70a5-4204-ac64-80100a46a648", "sighting_of_ref": "indicator--1046fe02-42f7-49b3-9f56-486e91e30ff2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e393946-9754-437b-bd88-1109b1e84478", "sighting_of_ref": "indicator--8ccb6542-c22b-474a-9758-e514ef361d9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c2e365-04a2-4dee-a028-78658c43b56e", "sighting_of_ref": "indicator--3919b25e-d96e-4e62-aafb-ec9dee4f0d29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc1bb43-941c-402c-b7c3-e9166556d773", "sighting_of_ref": "indicator--3919b25e-d96e-4e62-aafb-ec9dee4f0d29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e90a6-afa6-4698-8540-141a4ef79e3d", "sighting_of_ref": "indicator--fa0096a2-f52f-474a-8bc3-5ad7016df319", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982eea41-5fb7-42c9-ab52-1807a2548612", "sighting_of_ref": "indicator--fa0096a2-f52f-474a-8bc3-5ad7016df319", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232d1ce-eaf1-484f-bf9c-af0e0c6aeaf0", "sighting_of_ref": "indicator--0f6444fd-fc30-4440-94a9-7c9befb8f1b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ccb410-8f06-4c34-85b8-51e61b06a920", "sighting_of_ref": "indicator--0f6444fd-fc30-4440-94a9-7c9befb8f1b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83bf4ed-8770-4c51-b8cc-8e1f10997f43", "sighting_of_ref": "indicator--5799070e-76b9-4370-97bf-99a7327348ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0f370e-1778-49c8-93e4-43d2cc0f7f57", "sighting_of_ref": "indicator--5799070e-76b9-4370-97bf-99a7327348ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bf1f60-18bb-496f-9485-04112dea1327", "sighting_of_ref": "indicator--ee0e982c-b2d0-4e08-ac1f-0cfc797e9729", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417f63c0-d7a7-40e5-a1b6-04d233db6449", "sighting_of_ref": "indicator--214415b5-8b53-4ec3-a597-ddd489e7092a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5803bc6c-47f5-4372-bbab-a396bbb934ea", "sighting_of_ref": "indicator--214415b5-8b53-4ec3-a597-ddd489e7092a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89841f5-12bc-483c-83df-d7531913f3aa", "sighting_of_ref": "indicator--5782f3e5-e64e-4366-9072-91b1ac07fc13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234af59b-3a03-4fbf-bdb9-0d0dba59271b", "sighting_of_ref": "indicator--d3f4827a-5291-44c1-b1c4-7a18cd8b6324", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3413a416-0584-45b6-946e-b7a880bb2c30", "sighting_of_ref": "indicator--c979b8f7-d245-4747-9440-3b0acfde2bc1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992a7c9b-0042-4085-99ef-05ad87fa4ce1", "sighting_of_ref": "indicator--c979b8f7-d245-4747-9440-3b0acfde2bc1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c0b361-2d28-481e-a88e-1d491fc42899", "sighting_of_ref": "indicator--b17dc58e-3039-4f4d-a862-81e340d220a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1ad573-6a2d-4619-a413-151b03c373fc", "sighting_of_ref": "indicator--d840ef80-c561-4569-8343-0cfa1119a6e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cdfe2d-ffa0-4616-aed6-5857db7409c0", "sighting_of_ref": "indicator--db119d24-2b48-4ca3-ad9a-3e182a5e735f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00a6b44-3d54-4d24-8fdc-b998487b5442", "sighting_of_ref": "indicator--db119d24-2b48-4ca3-ad9a-3e182a5e735f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804dd2e9-3bb3-4fc3-ad24-965afff90e4c", "sighting_of_ref": "indicator--c80b8837-952b-4ea6-aa14-9791872b93fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25609956-0cc1-4b8b-b1d0-cc72cfd6b90a", "sighting_of_ref": "indicator--79b7d683-2993-4c66-9a95-e463de83ea08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5ddc7b-2788-48be-bfb5-4c147f4c8c0c", "sighting_of_ref": "indicator--79b7d683-2993-4c66-9a95-e463de83ea08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b283900-a72b-4c6e-8b73-0d74a4ce3140", "sighting_of_ref": "indicator--4c7939ab-38a3-448e-82bf-bedb58385571", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f00f1a7-171a-4197-9a2b-830eea203287", "sighting_of_ref": "indicator--4c7939ab-38a3-448e-82bf-bedb58385571", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc9a86-17e1-4c91-8528-3de234dd5852", "sighting_of_ref": "indicator--a7a2114d-661a-4be1-a2a0-e36130380fa7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3626f29-3718-4f80-bf7e-f7078e6dc0a5", "sighting_of_ref": "indicator--b773366d-2fc8-4b9a-8073-d4b012279831", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98004236-ad15-4249-bfb8-7311c5022795", "sighting_of_ref": "indicator--b773366d-2fc8-4b9a-8073-d4b012279831", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd63a61-d5e2-4c99-b384-a5e53ddcc72d", "sighting_of_ref": "indicator--177eacac-338f-4262-b11a-342c89839c89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8736cc67-27a7-49be-b7ad-2839294d4df7", "sighting_of_ref": "indicator--177eacac-338f-4262-b11a-342c89839c89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46822c86-ea4d-46dd-8f1c-30075b70c550", "sighting_of_ref": "indicator--e8b03f86-7567-4491-b155-ff4e928dc974", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149dbc6f-3d95-4375-87c9-5dd3edceda09", "sighting_of_ref": "indicator--f385fbd4-d7ed-4b8c-b5b3-3ce4933b850f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4608e21-65b0-4e53-9f56-9f974411eb7a", "sighting_of_ref": "indicator--8ad6ec7c-137c-4f0b-80e1-8db2ffc037d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370e0003-f259-483f-a0cf-4ad6032b2773", "sighting_of_ref": "indicator--23b92879-7e59-46fa-a5c3-fb0b5b199ecb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedde3d5-614a-4df1-ba18-420b0f2968cf", "sighting_of_ref": "indicator--23b92879-7e59-46fa-a5c3-fb0b5b199ecb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff596c7d-2be1-47a6-8e06-b4a9646056f4", "sighting_of_ref": "indicator--b2d34deb-f689-4c91-8ade-a99c84c4d8c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bad1b72-4732-4be2-8e2e-a2781a0b7088", "sighting_of_ref": "indicator--b2d34deb-f689-4c91-8ade-a99c84c4d8c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbc925d-1180-4ffc-92eb-2477bfd33c96", "sighting_of_ref": "indicator--0bcc5c80-747e-4968-8e3e-92cf6c2b80f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd40c47-860a-451d-88f5-46470fce058e", "sighting_of_ref": "indicator--5c948716-0276-4fd2-a129-3f8c041cc91f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d73997-7c66-463a-bb69-d909d30d91fa", "sighting_of_ref": "indicator--5c948716-0276-4fd2-a129-3f8c041cc91f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c314e269-b6ae-4ae1-8335-0ab71b1b30aa", "sighting_of_ref": "indicator--51521862-88f8-4b62-9160-cec9d7a9ca21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3aa4f3-9547-4822-8115-b7086d002040", "sighting_of_ref": "indicator--3c321930-d6a8-4956-ac99-b44cf2e11232", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc15189-a180-4c1a-95e5-0148eb4961c4", "sighting_of_ref": "indicator--3c321930-d6a8-4956-ac99-b44cf2e11232", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900fe214-0900-4dce-9d5d-df1c0f36570a", "sighting_of_ref": "indicator--eda32853-81cc-4403-b94c-e9af4a275d41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6d8eb7-e07d-4c01-80f3-af03a22eb827", "sighting_of_ref": "indicator--eda32853-81cc-4403-b94c-e9af4a275d41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2108bb-b6e7-4a4e-a31e-3177667cf804", "sighting_of_ref": "indicator--822aba3b-e9d5-404e-90ee-121d5f43a543", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf5a1f-6304-4ebf-bbc3-39a3d24dae38", "sighting_of_ref": "indicator--54c1982f-e929-44f1-8035-7dabbb027926", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fb4874-d845-4625-95b4-3b6dba3a780a", "sighting_of_ref": "indicator--54c1982f-e929-44f1-8035-7dabbb027926", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169535a3-43c8-49df-8f4e-6aa0e39343d5", "sighting_of_ref": "indicator--d79ccde1-d326-4e00-ac35-69db0ae3d7ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c7abe8-18c6-466f-93a8-61ad08c2a9ed", "sighting_of_ref": "indicator--71d58fee-7526-41f5-871f-2b31bdae7326", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2bb333-1af3-44a6-858a-0eecbacc49a8", "sighting_of_ref": "indicator--566c2975-cedd-4977-9c5f-7020620f0d3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01794451-8a62-4eef-8b5c-96b659dde6e0", "sighting_of_ref": "indicator--6cd53fe1-a122-4752-a3dc-644fba1d8237", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0d29d5-5218-4d7e-8006-62d9e711afda", "sighting_of_ref": "indicator--7ed6009e-f752-4acf-a481-9d0aaf1e4d90", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72218063-5596-49b7-9b55-5a6446550bdd", "sighting_of_ref": "indicator--7ed6009e-f752-4acf-a481-9d0aaf1e4d90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62289354-128c-4789-8124-9ba8722140d0", "sighting_of_ref": "indicator--150d755f-146d-4563-889f-08be240ae54a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5480f6-38ea-4339-ae19-9b295dc97e4f", "sighting_of_ref": "indicator--becba0a1-03cb-4d7f-ae66-c9fb3f67f426", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb4c122-362b-42c1-933a-3b14b6d3a019", "sighting_of_ref": "indicator--d6f5fa49-e86d-4127-ab18-d3af0e079d9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a59dfd-fcb2-479b-8cfe-ca1f873d2112", "sighting_of_ref": "indicator--811fa10e-9eac-48d3-9dc9-4de126591d49", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0426ab9b-bc22-4e95-b98a-9e886de41367", "sighting_of_ref": "indicator--811fa10e-9eac-48d3-9dc9-4de126591d49", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59171ca-caca-4997-af11-c459ebd3d9ae", "sighting_of_ref": "indicator--2ff0105a-7f75-462d-b4e2-bb7898e6b0b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d9b0ef-341b-466c-a932-5ae9eca9e4a2", "sighting_of_ref": "indicator--f1fbb2b6-f283-4c7a-9bbd-0d9e124b9d12", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f479d3a0-9f4c-4bea-b8a8-9fadb7c66b76", "sighting_of_ref": "indicator--8c716627-0b69-4798-a40e-79215e8121ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d689690-96a9-4b78-a9d8-bcd973b5296b", "sighting_of_ref": "indicator--8c716627-0b69-4798-a40e-79215e8121ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82c8e91-a7d9-4c57-8c48-ed5dbe111940", "sighting_of_ref": "indicator--7bd946c5-d617-4315-b815-c3890aeff23b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6e85c7-6bf9-42f1-bc67-ca92d095338e", "sighting_of_ref": "indicator--fc50ac89-2170-4e13-9a1b-376cd00559e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4002d48f-5030-49a3-928d-d1b921a11c38", "sighting_of_ref": "indicator--fda38cb4-cd7d-4f0b-b02b-f5d4c2fa7859", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba59fe17-57e5-4fde-a7de-2b04c073445c", "sighting_of_ref": "indicator--c5dab467-e21b-433f-9bcd-429bc3152e1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2f8db3-7093-49c7-9123-f63d63ba9f25", "sighting_of_ref": "indicator--0c94c186-1d98-4094-b359-bac7e57b8d67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4079484a-8ff2-4d5f-8e74-b1e599826d90", "sighting_of_ref": "indicator--0c94c186-1d98-4094-b359-bac7e57b8d67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b2f955-b4ad-4d95-97b8-4af619d346c8", "sighting_of_ref": "indicator--b2686a9d-b2cf-4bc2-bb65-607e53c75569", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4334a2b-456f-4ea6-88eb-7f1e099b9b8f", "sighting_of_ref": "indicator--8e49e581-837d-4d69-b7da-1721cf7c6108", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab8ad9b-2c85-4e10-8234-97175ee3bdd6", "sighting_of_ref": "indicator--2f8ca14f-3b53-4327-8e8e-d9fe9849fd7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cebceb4-bed9-4c10-8f78-6fbd384c5be9", "sighting_of_ref": "indicator--2f8ca14f-3b53-4327-8e8e-d9fe9849fd7a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d307fe-da67-4daf-9bcf-9c3a973b036e", "sighting_of_ref": "indicator--141b7c69-b963-4401-b959-0c0a4df69b3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55a4bf7-f289-401c-8964-08609603c78d", "sighting_of_ref": "indicator--392d2f9c-537c-4e41-a681-add01ab120bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b338e086-05ea-4e33-bc1c-2717915fa3f7", "sighting_of_ref": "indicator--efb6639d-89ec-496e-b603-95e5b7712810", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d852e1-42c8-4cab-9f3d-773c95cbbc62", "sighting_of_ref": "indicator--efb6639d-89ec-496e-b603-95e5b7712810", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f275b2d9-fc6d-4294-98d5-175d286a3018", "sighting_of_ref": "indicator--117512cc-0882-4604-9205-e86cde4e57f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b18381-1473-4bba-bb33-866d5a81d464", "sighting_of_ref": "indicator--5f687025-8ea9-487f-92c1-b96a34461ade", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6f82b-d407-40b0-bce9-71993fbea7fb", "sighting_of_ref": "indicator--5f687025-8ea9-487f-92c1-b96a34461ade", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ec2ce4-ffc2-44ec-99a6-f9157500642a", "sighting_of_ref": "indicator--17769b61-0ede-49d5-82fb-c37adfac8f30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f3000e-06d0-41fc-bf06-4341a8c2a66d", "sighting_of_ref": "indicator--2a2a1fe4-36ab-4d1e-8f3f-fd6bf2ccbdae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65a9eb4-3dc0-4b69-80b2-0944f1c3e9f2", "sighting_of_ref": "indicator--2a2a1fe4-36ab-4d1e-8f3f-fd6bf2ccbdae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef2f1b4-9577-4d37-a3a6-56d058b14083", "sighting_of_ref": "indicator--2053733b-6d25-4981-af7c-be7a2c5388d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65936e4-5dad-4350-a0fe-2c9c5d639234", "sighting_of_ref": "indicator--df1e2638-6c2d-46e9-968c-ac86f7dee917", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11381da4-d131-40a3-953b-8c0c1d9861e8", "sighting_of_ref": "indicator--94a7b77f-587a-41dd-bd14-18d2f2c58553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64674678-7250-4770-814e-7a26c2890a04", "sighting_of_ref": "indicator--94d5d0bc-7ed3-4969-bca5-b4ff03863764", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8c0ec0-eed1-42fb-916d-e61fb058d970", "sighting_of_ref": "indicator--e501bdb8-4bfd-4b7f-a6cb-18056eca1245", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5874881c-f4d6-442d-807a-992f6dd7aa2a", "sighting_of_ref": "indicator--e501bdb8-4bfd-4b7f-a6cb-18056eca1245", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55072687-01a4-427c-8b7c-dfb165611d4a", "sighting_of_ref": "indicator--e6a05f5c-4ecb-4832-b4a7-aee97d0e3c42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b7151-e833-4659-a47a-7a43eb30d78e", "sighting_of_ref": "indicator--7d70217a-0218-4237-97c8-b062e6461a0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf7275b-19f4-45dd-b080-99ff950a1704", "sighting_of_ref": "indicator--7d70217a-0218-4237-97c8-b062e6461a0f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc82641-b4db-456c-a3db-4971d760667e", "sighting_of_ref": "indicator--7a846711-ecb1-4511-ac3c-6177df381f03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127f2b57-ead5-43b3-9ee5-bbe18a0d8d37", "sighting_of_ref": "indicator--2517fe8c-ddbc-4618-86bc-1d0073a9281a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14549eea-8af9-4deb-9edb-98d55eb91d0c", "sighting_of_ref": "indicator--6b57a27e-3aad-45b8-bf1b-378837780326", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2affd53d-9569-4975-bcc2-551fcf85b602", "sighting_of_ref": "indicator--a7af83ff-95ed-4f65-ac13-e8b4ad6d20ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a750d643-888e-473d-8e38-0c85c55ce993", "sighting_of_ref": "indicator--e9b4883d-de20-4d72-bddc-19d7e664a162", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d719f70-0a73-48fe-8cbf-ac71026bb4f1", "sighting_of_ref": "indicator--e9b4883d-de20-4d72-bddc-19d7e664a162", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056b521f-6768-4822-a7b0-a814744f55a9", "sighting_of_ref": "indicator--6a432b6a-7344-4e03-813e-739458e2027d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dce795d-fea7-4e6e-9508-3b0e573a96d1", "sighting_of_ref": "indicator--6a432b6a-7344-4e03-813e-739458e2027d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dc031f-558a-49e9-806a-331945a1f82a", "sighting_of_ref": "indicator--54c751be-6d38-4b4f-bd1c-cd10012f21d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00704e8-06d9-422a-b9c3-111e39aae9b2", "sighting_of_ref": "indicator--54c751be-6d38-4b4f-bd1c-cd10012f21d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4967f5f-483a-43db-813b-58d91b4ee2e5", "sighting_of_ref": "indicator--e6fd7118-8fe1-4875-8f95-21f8bd04cbae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da15f8e3-54d6-48f7-9d4c-00ca5fdd3dea", "sighting_of_ref": "indicator--06bb6327-bce0-4c55-9705-d46c852a6f93", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6ac77a-fb66-4e95-82ce-4e544b90b15c", "sighting_of_ref": "indicator--5e3ffed0-f372-46f7-988b-44f57d4839db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bdfa3f-c8ef-4909-b763-56b6cf73bbf5", "sighting_of_ref": "indicator--b732d2d6-13eb-4526-8828-52e2505356a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340788a9-1714-4651-be19-9b90f10847f2", "sighting_of_ref": "indicator--ba67c026-b8db-460f-bb4f-4770e7c579bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb11741c-6b3e-43ea-a15f-917d1b08fe7d", "sighting_of_ref": "indicator--ba67c026-b8db-460f-bb4f-4770e7c579bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a63aeb0-31c3-4721-95e8-348a0a6926c3", "sighting_of_ref": "indicator--1fddebfe-61cf-4604-94f9-16b91506a827", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559a8e28-653d-4385-8ca8-fea73d32689a", "sighting_of_ref": "indicator--7eb7a87a-5b66-4c9c-81eb-b8b1357eda1d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5b58db-2765-42e0-81d2-9e8a873ee4d0", "sighting_of_ref": "indicator--1eec58d9-53c0-4e1a-bae6-b18cde8e5127", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b589d8a6-ca05-4305-93b0-bbabc8a6f0a0", "sighting_of_ref": "indicator--8fed5cb8-fa74-4dd8-9292-c17acdbb0425", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41371da-35e9-41d3-9abc-6c410d7fc581", "sighting_of_ref": "indicator--22b0e5c6-0bbf-4887-b196-675aeb64f466", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd454a2-feff-42fa-9603-1dc24ac025b8", "sighting_of_ref": "indicator--24f019d3-74f5-4e97-90ff-242f2a406116", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e25145f-def7-4609-82d6-99e61a5dce85", "sighting_of_ref": "indicator--24f019d3-74f5-4e97-90ff-242f2a406116", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085fe710-1e71-4d35-a12f-eac757e72781", "sighting_of_ref": "indicator--8a01afb9-189d-425d-b144-ecab9785c587", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b840d2-8f56-4dd5-8841-bb4bf43ab256", "sighting_of_ref": "indicator--2520bf6c-fa13-4714-b42c-1a565ec14ee7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9d8dc4-97cb-4c3e-a571-7560229e43a6", "sighting_of_ref": "indicator--2520bf6c-fa13-4714-b42c-1a565ec14ee7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfac3cf-8187-4972-93a6-9c6311fad816", "sighting_of_ref": "indicator--8331e2bc-ad53-46c4-8634-c08734ad92ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9138c5-f0d9-4079-ab40-dd38006e2889", "sighting_of_ref": "indicator--8498bfa9-0cc7-4789-868b-dfb74ba02c5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2142ae-ffc9-47c0-9d39-58872cac13fa", "sighting_of_ref": "indicator--8594ad7e-161d-4c14-b6d1-53f8a999b285", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065d07d4-c2f9-4f44-860c-59331f982b02", "sighting_of_ref": "indicator--95ec9f23-8131-4e23-8045-99c1f26af661", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8429af1e-f209-46c4-88f6-5947ce2be0e9", "sighting_of_ref": "indicator--2b6683b5-2ae6-4e15-b22f-9e0037e89b09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77aee3d0-4854-4c79-a944-ac624d6d9715", "sighting_of_ref": "indicator--d0e05870-62a4-41db-9879-e1255d88e131", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96afcb81-a02b-4885-9140-097c280a2419", "sighting_of_ref": "indicator--74470a26-593f-44fd-87e1-3635ae115a34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1326ae4f-916d-45ff-a14c-9b22a1fb0602", "sighting_of_ref": "indicator--e4701b11-9aa4-43a8-b986-ad1d9067e54f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c78e866-4979-4fd0-8fd0-50462584b684", "sighting_of_ref": "indicator--e4701b11-9aa4-43a8-b986-ad1d9067e54f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf73596-d1a7-4056-8a85-43ffd4bae7a6", "sighting_of_ref": "indicator--2467e2b0-a1b9-447e-abd6-14c0f38bada4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe381c28-14a9-4df4-97da-88051f4be21a", "sighting_of_ref": "indicator--a85c1e12-646a-46bd-bed4-bb1ce3f5adff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0087d7-8404-41e0-892c-ac04a352b75e", "sighting_of_ref": "indicator--9610dd7d-f40d-4179-ad71-72cf86b3be82", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1df78e-0f24-49a0-af7c-ee392ec62e58", "sighting_of_ref": "indicator--0b80afa6-96f0-4100-85c9-9e14e23a92de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4251561-4614-4bbf-8844-9fc2c593dac8", "sighting_of_ref": "indicator--7ad0e165-b6f0-4115-89c0-dc7caa399ed2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c66244-0206-4c24-8f98-83812caa86dd", "sighting_of_ref": "indicator--d288fb11-7a28-4bf5-be89-6171a7ffbbc5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6935edb-181f-4a8e-ad2b-2d6768d63b4c", "sighting_of_ref": "indicator--26d6e4c5-cc93-4768-85c5-9c2ab600a7e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661ab954-eeb6-45cd-9e24-66567bdfbec1", "sighting_of_ref": "indicator--fb402d7d-7406-478d-bb76-2482fd475840", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0115b443-8838-4015-9e38-a267f2cf92ca", "sighting_of_ref": "indicator--9dd2806f-2591-4d14-9db7-a61df061d9a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f30190-456c-4fcd-9a43-b6bc7d31d0f7", "sighting_of_ref": "indicator--cc1dd1a6-53fd-4845-8860-9259983d5284", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d582f78-b793-48ae-adb9-e0888458e18d", "sighting_of_ref": "indicator--c9855efe-4086-4fa7-ba02-800207002f0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6a2d5f-2b53-4329-86a0-63fc6db64edc", "sighting_of_ref": "indicator--e6f4f872-dba8-4583-96b4-305ea45d60ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23efbb-3798-41a5-a79a-351f3a314c8f", "sighting_of_ref": "indicator--7c2d6907-7efb-49d8-8b7e-dca22f4f5690", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4309405-4814-4f03-b714-c407e8534840", "sighting_of_ref": "indicator--56a6285a-68e9-48dd-99df-6f8d293ea35b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086a3617-2467-4493-8527-8e8f9fd19dd2", "sighting_of_ref": "indicator--2a2e5272-ce17-449e-80bb-dc8785dd55a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5dcf1d-e9e4-4c68-91e6-3b3f654ee254", "sighting_of_ref": "indicator--69e6ecf8-6b42-4539-b90c-4cbc4b64816b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb88563f-1040-4ae6-bb7a-6cdbd03ed4d3", "sighting_of_ref": "indicator--72d06a13-785d-43a7-980a-29893cd74c28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359754e5-f077-4c5d-bd8f-2c092899b81f", "sighting_of_ref": "indicator--66c07c0a-3204-48aa-8d02-09cc5d7e01f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e37665-521a-48aa-96b0-b9496837162a", "sighting_of_ref": "indicator--8434b8f3-67b8-4de0-bb52-96d36df90cff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf1f2e-f72e-4ddb-8cbe-0d401b526098", "sighting_of_ref": "indicator--8434b8f3-67b8-4de0-bb52-96d36df90cff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7ccd07-91f0-454d-a0a8-eaaabb41072f", "sighting_of_ref": "indicator--a6e4d04e-9f2f-4716-8011-90e9a65487a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a084d1c7-405e-4acf-bbd9-d944fcef48dd", "sighting_of_ref": "indicator--afad117b-a4e1-4ece-82fa-86a5b56a8c77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40868a1-db79-4cf5-8df2-f8b71d017814", "sighting_of_ref": "indicator--2397d1be-3335-412f-b45d-70b2ebb2bf5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a774ca-4f54-41eb-825d-0ba817423233", "sighting_of_ref": "indicator--d8f88d6c-1d04-461b-8f55-99aaa120110e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f7f5e9-bb64-4daf-a19f-35826f5bfc73", "sighting_of_ref": "indicator--75730e69-eeb7-4f20-838f-26ccdf986d1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca9fe8-d73c-4e22-bfd2-e318a5bf4efc", "sighting_of_ref": "indicator--9aead2a3-c01b-451d-b603-7a7a671a3307", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f56194f-b24b-4f70-8fae-194758b58cf9", "sighting_of_ref": "indicator--4112936d-f534-4310-ae1c-43a0915f6135", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bbe6aa-6966-47e7-a63e-f09ac7143714", "sighting_of_ref": "indicator--c251ef2d-a55b-4a08-949a-87ea55f5bdc6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff91ef0-3d6a-4d11-bf69-f2640fb79dee", "sighting_of_ref": "indicator--c251ef2d-a55b-4a08-949a-87ea55f5bdc6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30aa48f-ba11-477d-b0ed-db0a71259ada", "sighting_of_ref": "indicator--2c7ed63d-ba6a-4d09-ae85-808458b7cae7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549a8a75-880e-40da-ba09-832cc63a1786", "sighting_of_ref": "indicator--124253d1-8fb6-47fe-a5fc-bedccd5bedd2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18922e95-6f60-4bb4-9690-041111e32282", "sighting_of_ref": "indicator--124253d1-8fb6-47fe-a5fc-bedccd5bedd2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237cae54-3c1e-4677-bf9a-06ecddee6e73", "sighting_of_ref": "indicator--1825caa4-a23b-4cf2-8d70-adeaedec2a2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369b4540-c657-40cd-8f50-e30dbb141c14", "sighting_of_ref": "indicator--6b3a0162-7f86-4374-b3b5-c340bd8b7a62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33178235-5b92-414c-bc12-bce0ea16cc58", "sighting_of_ref": "indicator--6b3a0162-7f86-4374-b3b5-c340bd8b7a62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7f105c-a78d-45ee-a6fe-49729bac31a4", "sighting_of_ref": "indicator--3ee36978-7fe5-4f0f-ba60-f34f5351690a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e25937-4483-4cea-a4d8-134a2f81f498", "sighting_of_ref": "indicator--d4f2d9dc-25aa-4693-b2d0-8e3877d3a2ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3df15c-730e-49a4-9407-6f6ca7c51830", "sighting_of_ref": "indicator--df76111b-e349-492c-a788-0410e790e18d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4f132a-92d0-48dd-8c33-4e80bbc22225", "sighting_of_ref": "indicator--df76111b-e349-492c-a788-0410e790e18d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a3ec73-3b42-48b3-99d2-2f5b4c3db23c", "sighting_of_ref": "indicator--cdf1da36-2c31-4da9-b426-d5850680cba4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd4c47c-b992-4d88-a912-29c4025a8e6c", "sighting_of_ref": "indicator--47c4dc4d-27f4-45a9-810b-2edbf2f98b30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6ccb21-cbbb-4015-b6cd-75e23489fdee", "sighting_of_ref": "indicator--47c4dc4d-27f4-45a9-810b-2edbf2f98b30", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3befcbe-78a2-4f8c-ac9e-9c2b35d62330", "sighting_of_ref": "indicator--36365bbc-d0f4-4902-b422-771d290162f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78b4ff1-696f-49c3-b9aa-254de2b9d21c", "sighting_of_ref": "indicator--dd284be9-d013-48ba-8dbf-94e9963eb03d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e52f2a-085e-4460-b29f-345a810f5412", "sighting_of_ref": "indicator--7b1c3c29-d37b-40b6-8e17-df2f11c19b80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb622c-fd1b-4c10-85f3-b0524f19236c", "sighting_of_ref": "indicator--9c5b83fc-0ed8-4951-a1dc-9ddfa8c44493", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf978d0-0789-4023-8b4d-632951d0449c", "sighting_of_ref": "indicator--76cebf8c-094f-4b50-9615-ae174cef4c2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b707d9-4f46-484e-af4d-fcc37f19e78b", "sighting_of_ref": "indicator--76cebf8c-094f-4b50-9615-ae174cef4c2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac939533-34fe-4dbd-9cc4-93a1f9b028c4", "sighting_of_ref": "indicator--8f76c69f-ca22-4584-b309-ebff14c854ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300b9816-df46-4596-ab02-678f7cf57b0c", "sighting_of_ref": "indicator--8f76c69f-ca22-4584-b309-ebff14c854ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91ab750-9465-46b5-9d1b-c079910496c3", "sighting_of_ref": "indicator--a1033566-d70e-4f8a-afea-270ff5e2d873", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cd7cc4-7200-4322-b822-e448f3d2b837", "sighting_of_ref": "indicator--7dd5a161-4e84-4fdd-a75b-f5b6de69af94", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7b18b3-8313-483a-b7af-ae49db1a8f6c", "sighting_of_ref": "indicator--2fe3a4d5-42a6-4ec2-b515-7cc6100e49dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085b9ac5-6910-4306-aeb8-0d640b55ae62", "sighting_of_ref": "indicator--84064005-8530-4365-81ca-bae8d88189fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dabefa-331a-414a-9cac-383464611377", "sighting_of_ref": "indicator--3953e50e-74a7-4674-b970-abea1de4a694", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfe1fc3-52c7-4d1d-9247-72095f5db7f7", "sighting_of_ref": "indicator--7f7eff92-78b9-45b5-b196-59c1c5cd9df3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414aa3b7-4649-4849-bf19-d34eb36f269b", "sighting_of_ref": "indicator--13cccd82-2d03-4710-bfd1-294e0db94485", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187c0a14-7d22-48d8-9580-922b7c1dbea7", "sighting_of_ref": "indicator--c18090a0-5662-47a8-b559-3cb575c10b6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c752654-2b33-43db-a811-cc88238875db", "sighting_of_ref": "indicator--2d848028-c120-4394-bdea-55c0984aa1a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff335283-ded5-48f8-94d0-e8380e8d1c40", "sighting_of_ref": "indicator--4cc1fb3c-1850-4f50-b647-49484b566874", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c19224-fa25-49f4-8577-2427f89d5894", "sighting_of_ref": "indicator--93bab83d-50fc-4135-bf76-49f465010a25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a83de1d-68ab-4a7a-8e41-d860604d37b7", "sighting_of_ref": "indicator--93bab83d-50fc-4135-bf76-49f465010a25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcabc9db-8c6d-4c89-8565-26a130e7505d", "sighting_of_ref": "indicator--1f39dfb2-68ea-4386-94b8-9050b68f8222", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386c85de-f2ed-4fb0-9840-b468889f7972", "sighting_of_ref": "indicator--6284c410-a901-4a95-bf1a-eda8bc2cf1b4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2a45b5-9f12-4ce1-802d-d95e2c71da31", "sighting_of_ref": "indicator--e4af8a79-4c15-4936-b5d8-3bfe5b1986de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2034c5f-e267-4828-8c25-7a798ec91a08", "sighting_of_ref": "indicator--7eff33fb-4fbf-44bc-8d10-8c0799f0805c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60591349-e4b5-454e-8f23-b06e0aad7ec1", "sighting_of_ref": "indicator--42c2e66d-1981-48fc-ae9e-fe2dd23d0fda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7028aee4-4c21-4d58-87b7-5b626e508d1a", "sighting_of_ref": "indicator--8bf42386-8992-42c1-955d-f9345904a433", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e82075-4be3-437f-bdd2-fb10310c1012", "sighting_of_ref": "indicator--312aa03d-8edc-4dc8-aa51-454fd1ca26bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1b7ed5-387a-4184-bc36-46b159550ab5", "sighting_of_ref": "indicator--c8d72044-758a-40b7-85d1-13d6e9cfb20e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e504af-fd3b-4200-8c19-a6b0fa943c24", "sighting_of_ref": "indicator--375872be-511a-4a3d-884e-5437014e7261", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a5516-8a8b-4d7a-8caa-230170ac9daf", "sighting_of_ref": "indicator--1aefd0f6-8188-4339-aa9b-8f5735e86557", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515e4258-a239-475d-a456-df92e37067ff", "sighting_of_ref": "indicator--1aefd0f6-8188-4339-aa9b-8f5735e86557", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8008715c-0a94-4f54-8a06-b6725915bfe4", "sighting_of_ref": "indicator--5cb70309-e1ba-45f7-b5e1-454f9e32c8a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfd936e-3c9a-4d37-8dfd-226c71d5303a", "sighting_of_ref": "indicator--bf5fcc9a-b87c-4eb8-8e3e-67ed717a0d36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afced80-b368-4d33-ab6d-ab6d4716979b", "sighting_of_ref": "indicator--4635dbf2-c774-4180-81c9-3c0418246130", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da334362-fdc5-4040-9fa7-7e3f52a372a9", "sighting_of_ref": "indicator--aa6e3e2c-45ba-4dcc-9dd0-c3d2f32c5d85", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e096cb6-627c-41da-add9-bccdcc8bc7e1", "sighting_of_ref": "indicator--56a57af1-9f6e-4d95-b838-8d7c7f74b11f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e12b30-9d01-4221-a86b-868a0100256f", "sighting_of_ref": "indicator--7a65baf0-5d86-4841-b5db-103b4552c7e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491654b7-08d5-461e-a358-d029be47cd68", "sighting_of_ref": "indicator--8a6adb63-99cb-40fa-9516-c83434ef833a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d181cd5-9258-49e6-b983-81a5f177c993", "sighting_of_ref": "indicator--eb5ba9fa-ecb3-4036-b084-60837c2ed4b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220d2c20-3a66-4ca1-8509-73d95eb590e8", "sighting_of_ref": "indicator--8d1f68e0-6cf4-4d9c-bea7-ca38805dcb09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7868c8a4-e7b1-4998-a917-49e74101e989", "sighting_of_ref": "indicator--3a8c3d4e-f414-469e-8e84-e1308b889c77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70765bfb-c957-4f6f-93f5-ed14b093786b", "sighting_of_ref": "indicator--3a8c3d4e-f414-469e-8e84-e1308b889c77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa2d7f8-0611-41a6-bcce-4a834d4cdb0a", "sighting_of_ref": "indicator--ce6303d9-1d71-448a-9cea-b5cfb0b205af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36371125-c675-46eb-a5bb-e186de41dbe8", "sighting_of_ref": "indicator--113a6363-e7d7-4dd3-b94f-ab5cbbffbb16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ff44d3-2797-478d-a518-dcc956a4e52f", "sighting_of_ref": "indicator--e190371f-1ae9-4b76-a983-7d6cb89ae62d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be0b1fd-6ec0-4104-a190-9f719020778d", "sighting_of_ref": "indicator--828664f5-f2bc-41e6-80d4-e40573878950", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c57dfa-5241-4e01-b1f4-1dae8f771bd3", "sighting_of_ref": "indicator--34eea0e4-7e56-4eb6-8271-9e7d8c46043e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf47cc-f704-4a4d-8743-92d32be935e8", "sighting_of_ref": "indicator--24660d87-6d79-4c21-9ecf-a7814bfdabb9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba7a1a9-6d38-4f58-ae82-8ac2961de618", "sighting_of_ref": "indicator--117ab55b-d939-4681-8052-02ea6f3bab22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1e5ddd-d536-40fd-b2be-276471516999", "sighting_of_ref": "indicator--48bcd94e-7c1d-4b8d-9e0a-ec9ca72c7eb5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d609de-1821-4457-95b7-acee6ec0ac34", "sighting_of_ref": "indicator--b8f21e21-a5e9-42a1-ace9-64469b4e5a2f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8849390-7693-4562-915f-1c1823463eb0", "sighting_of_ref": "indicator--5e2f014f-9890-4a6b-8951-1bfa84149b57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb25e23d-a0d7-4aec-b395-0fd336a6fc90", "sighting_of_ref": "indicator--5e2f014f-9890-4a6b-8951-1bfa84149b57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34e07de-342c-4322-9ffa-f2eccd38d9f6", "sighting_of_ref": "indicator--b7f9fba6-4d2a-4f88-ac85-703688ab1049", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d819534-0fcb-47a3-9f5f-1e92da828244", "sighting_of_ref": "indicator--528d6458-1ce8-46a3-aa5d-e2a9b07b41c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d9c63-2879-4870-a97f-d47786493fcf", "sighting_of_ref": "indicator--528d6458-1ce8-46a3-aa5d-e2a9b07b41c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c0851e-9f8b-49d9-a9ff-da5aa1fdd0c4", "sighting_of_ref": "indicator--7a699731-af0c-420d-bc72-6d47c4f3ccc0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8f1836-2c0b-4cbb-8a63-02c3b9061abd", "sighting_of_ref": "indicator--ca784953-5112-4440-bdd7-e52f97465a5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7c951b-cb4d-400c-94a0-b1df6dcbe15c", "sighting_of_ref": "indicator--b32574d7-69ed-48ec-a259-6a9acf46ebb1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02422469-f404-4b55-b9bd-aee4aca99c3e", "sighting_of_ref": "indicator--8e2e38c6-1bac-417a-95a0-908ed27cb77a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea5c33-9378-4e9e-a536-64210340d183", "sighting_of_ref": "indicator--fc167463-b8b4-4bee-9b9c-21d84e94fc06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5435951b-67f9-4cb9-b97c-fdad80edfdca", "sighting_of_ref": "indicator--7a02bd93-0e27-4fb3-b3d1-024762a08392", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced3fe7-cc6a-4f07-bbc5-65cec2fffc83", "sighting_of_ref": "indicator--d6f6fa33-9439-42f4-b91f-2c6875daf967", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fc8637-be56-48e7-b400-c75176ad5672", "sighting_of_ref": "indicator--dcf48dac-99fd-43f5-911a-7d5dbafddb68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c59b21-d096-49af-a99d-550e9cc93791", "sighting_of_ref": "indicator--d40d05ff-40e0-4520-97d8-751bb49eec67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c12e14-54a8-43c0-8aa3-ca223cf80031", "sighting_of_ref": "indicator--10a6ce9f-a09a-48bf-ba4d-dd9bf130e62a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a1a07b-dc48-46df-9d9a-379f384b98e2", "sighting_of_ref": "indicator--10a6ce9f-a09a-48bf-ba4d-dd9bf130e62a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aea8a4f-1869-465b-88da-992ddbc71f2d", "sighting_of_ref": "indicator--1f702833-56c7-4188-a689-5f97d78e17e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37854776-ded0-45fd-8b02-9ba5557ae1a9", "sighting_of_ref": "indicator--7f385e77-b1e5-4c41-b83b-5f91f9813088", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8cbe2e-eca5-4ad6-b891-ebd5d08cb286", "sighting_of_ref": "indicator--01d9ebfd-e9d5-4eb7-9fe6-c2e7b9d73146", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2a6ffd-0739-4ed5-8c2a-1dffebd1f296", "sighting_of_ref": "indicator--cd894c2d-ccdb-4c3e-b269-a47c1e296636", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033aa949-72df-4668-af63-836d13afe0c4", "sighting_of_ref": "indicator--3adc0118-f0ad-4f67-aed9-65cad9cac213", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a682f2-f695-4a15-8b3c-313a760e10ad", "sighting_of_ref": "indicator--8926ee6a-65e1-4b99-be22-4757fb4314c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5750550d-693c-4e7a-818a-520defb0d1dd", "sighting_of_ref": "indicator--83d37fea-1dc7-448c-8db6-329ee714af60", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3752d9c7-c2be-4b52-9653-63078c114cce", "sighting_of_ref": "indicator--83d37fea-1dc7-448c-8db6-329ee714af60", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b56e0e-6513-488b-85cb-a0209e7d94cb", "sighting_of_ref": "indicator--d91ea928-8c37-4d57-bfbf-c70d62d4c840", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5d4e2c-f6d9-4ed3-b066-a41be3a56cd2", "sighting_of_ref": "indicator--3de73919-12c9-48e5-95e4-c3fdbf524d54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66f1f8c-d1d5-40a9-9451-5d608266aa9d", "sighting_of_ref": "indicator--66fdf6c5-9e9a-4520-af8c-c10c3d5e4fac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7232be54-fc94-4fe5-a2c2-9f1232ad882e", "sighting_of_ref": "indicator--66fdf6c5-9e9a-4520-af8c-c10c3d5e4fac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68695611-7f62-4b37-b001-5a769b222fdd", "sighting_of_ref": "indicator--aa90d0e6-cd26-44bc-bac4-5de2f348569c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4008f299-1742-4649-9565-454e64d0e138", "sighting_of_ref": "indicator--482375b5-3a1a-4abf-8ce4-15c158fbc829", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdda5649-f1a7-4cc0-9278-e8b127785e0e", "sighting_of_ref": "indicator--eedac2c3-c9cc-4732-a75e-43a093a6d826", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2de911-8b92-482a-86ef-f96aa8c40712", "sighting_of_ref": "indicator--eedac2c3-c9cc-4732-a75e-43a093a6d826", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90308a3f-5f77-4510-8652-865fc3f3b669", "sighting_of_ref": "indicator--7241a11c-ee06-44c4-9a04-50aefc0438be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fadc9b-8147-41e3-942b-0e47cba669bf", "sighting_of_ref": "indicator--065039e8-fe12-48cd-b035-2f33bd16f982", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41b55ab-8bb4-4083-9702-cc321ba71b65", "sighting_of_ref": "indicator--0a6a8301-26fa-42f4-982f-00776e734086", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ad1a60-0fb6-4914-b654-5615acd0ac0a", "sighting_of_ref": "indicator--4f8d9843-5fc0-4990-a5ce-7517c6bd3ac2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f9862c-9d2e-4c09-b397-2dd4abe5a623", "sighting_of_ref": "indicator--4f8d9843-5fc0-4990-a5ce-7517c6bd3ac2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19657c8c-371e-4662-8b0b-0bbd42c2b1cb", "sighting_of_ref": "indicator--0ccf8356-93f3-49e4-a1d1-8b7045c24f71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd8f741-6e3a-4c36-86ab-2e9af83990d0", "sighting_of_ref": "indicator--0ccf8356-93f3-49e4-a1d1-8b7045c24f71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6844e6b2-a97e-47b8-89d7-946d8c94ef8a", "sighting_of_ref": "indicator--5771c47f-0edb-41e2-ab55-258ce5c68e41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79865b9-bfff-46a1-a547-90c80f154120", "sighting_of_ref": "indicator--33427c60-2946-4b16-a1ed-3b1317838e86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11717b19-b373-4317-8f01-5257d377feb3", "sighting_of_ref": "indicator--33427c60-2946-4b16-a1ed-3b1317838e86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e584c847-4829-44a7-a74a-9b54f33e7ae5", "sighting_of_ref": "indicator--a0605af0-cd79-4a86-be7a-ac9f372fcfc8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9595df-15ab-4a1a-9467-c965458f9e97", "sighting_of_ref": "indicator--73953642-5b28-4c9a-a3d7-6319a612fe8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d62be5-e06a-4d38-bbb5-0e5f177ff51d", "sighting_of_ref": "indicator--054f1d61-34be-48d3-906d-ec9daabb46e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc75d49-a094-4b44-a6cd-4110da9e199e", "sighting_of_ref": "indicator--054f1d61-34be-48d3-906d-ec9daabb46e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0333750f-05d5-4633-9d67-03b2554f7f89", "sighting_of_ref": "indicator--06422dc6-1d6a-46fc-aecb-49c76111e1d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b116eb1e-04b7-46fe-9a2c-528bc06b9364", "sighting_of_ref": "indicator--80f96da1-2033-400e-80dc-5fcbf0755989", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beef8544-c1e7-417f-960c-38a42cb9bd39", "sighting_of_ref": "indicator--9a2b3e27-38a7-4552-a457-4cf6289c25ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992babfd-985f-4b35-8b36-402ecf6abd16", "sighting_of_ref": "indicator--8bc1ad91-11dc-4802-97b3-055ee2011f58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd5d07d-ad66-49cb-b309-98f574df9341", "sighting_of_ref": "indicator--8bc1ad91-11dc-4802-97b3-055ee2011f58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c1142-fa3b-4008-b300-f1ad0903ade1", "sighting_of_ref": "indicator--846bf7ba-17b8-4986-bf59-c3d8d2e24f3f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a606bd6c-004c-4589-8886-218082e589cf", "sighting_of_ref": "indicator--fd72db7a-7b25-454c-b593-b25781f8c11b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d143d7cf-e8a3-42d0-9ac2-1727730f6ee1", "sighting_of_ref": "indicator--6cd2b256-f945-4693-88c4-3f801efbfba4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb2948a-2f79-4f71-9b61-5fe43efcc917", "sighting_of_ref": "indicator--868dd07b-005d-46d4-832a-e961acf2323e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686f0643-c91d-4491-9a83-692ce3668b9b", "sighting_of_ref": "indicator--51a069a5-56a0-4974-8917-353fe3079026", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8abe0-7ec9-48cd-8782-ff6f78de6dcc", "sighting_of_ref": "indicator--51a069a5-56a0-4974-8917-353fe3079026", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da267f33-ca65-4fe0-b43c-b034de629202", "sighting_of_ref": "indicator--1bc863dd-035c-429c-a747-33fb7c9169a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7416b248-b21d-4892-8d8c-36152e5023bc", "sighting_of_ref": "indicator--d3b851eb-5ffb-42bf-9b05-83f6d636b55c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef8c40a-0bb9-43f5-bf72-1c929bfa0495", "sighting_of_ref": "indicator--d3b851eb-5ffb-42bf-9b05-83f6d636b55c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22845c88-6be8-4561-aaae-3801a68fb370", "sighting_of_ref": "indicator--0a0fdb2e-cfda-4ba0-b593-e8cf58083168", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de467ecc-a82d-4cc6-9e8c-a74a036b7dbd", "sighting_of_ref": "indicator--a262e6d9-507d-486f-a6ab-f545b7727791", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2893db13-b00e-4c33-ab90-922ef0b11bb4", "sighting_of_ref": "indicator--4be855ff-4c9a-4f05-9848-7b50368a02f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d849d-95a9-4622-a332-58a2cfd1fc4c", "sighting_of_ref": "indicator--4be855ff-4c9a-4f05-9848-7b50368a02f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440e3a4c-0c63-41f7-8af8-4bc4c69c6cd3", "sighting_of_ref": "indicator--496a7f7b-cc90-4064-a4e8-c8f39d66fee7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef85de7-d3af-4ee9-b98a-29382879bc96", "sighting_of_ref": "indicator--ac3f36f4-c73a-47a0-8a2a-93394b3acdd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70509d19-2d06-4e77-99b3-6bc18c36d865", "sighting_of_ref": "indicator--26e1dac2-f0bd-4a39-a1e3-623f5b29ef72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882f8a05-ac6b-4ef8-b848-708724f47627", "sighting_of_ref": "indicator--203032ea-73e8-4590-8666-e628fd241e19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7904d30-c88b-48d2-8422-ee31aad21ce6", "sighting_of_ref": "indicator--20055651-a3b5-4325-b2e2-cdb47d6a7e3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efc9a1a-e94f-42f6-b3ab-0564f30b1faa", "sighting_of_ref": "indicator--9bdd6171-130e-40a4-9946-e7e99f67b9d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0afc6c0-b934-4a1b-b3a5-6ec05b14164e", "sighting_of_ref": "indicator--9bdd6171-130e-40a4-9946-e7e99f67b9d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f36365a-4d7f-45b1-ba62-65972fa333eb", "sighting_of_ref": "indicator--2b4fcf78-e95f-4e1e-875b-200b90ea5787", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc67bc6-3013-4925-84d2-dfd802b1b962", "sighting_of_ref": "indicator--d5e2d8f4-f587-4575-80e8-874966b34b11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f851e6-cb10-4696-b33c-010e40e65750", "sighting_of_ref": "indicator--a2bf9cb7-cbfd-4e9f-aaa6-0dc23ea825c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79ef0f2-6973-42cf-8e1f-b7fb15035e7b", "sighting_of_ref": "indicator--08215dc3-1758-46a2-bd9c-f8399530a9e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9073e08-045d-41b8-9a02-fdb001be71ba", "sighting_of_ref": "indicator--bd930de7-ea16-4514-bda4-7b992085d715", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cb8287-05f2-42b2-a08c-adbb103247c7", "sighting_of_ref": "indicator--bd930de7-ea16-4514-bda4-7b992085d715", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9b902-5c9d-464c-a9bd-57e7a51c017e", "sighting_of_ref": "indicator--95b3d5f5-2dbb-46f6-a350-ca3cf0b60185", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab92f223-ba39-427c-84ea-88f6f4239e85", "sighting_of_ref": "indicator--45d2a9ca-9b60-499f-a335-4ae534c2c5cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706a1aa3-ff48-423f-8a46-959625385c58", "sighting_of_ref": "indicator--68a88218-796c-4764-b17d-5d9b1c33b655", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d8d7cb-6149-4903-aeaa-234248dafe61", "sighting_of_ref": "indicator--75181f9f-8325-4fc6-ae45-46f9e518cb2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a8b30-f43a-4faf-9102-3b1c6b1ca1fd", "sighting_of_ref": "indicator--75181f9f-8325-4fc6-ae45-46f9e518cb2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb5afe-6b8c-4769-bc11-efea12d3a5a2", "sighting_of_ref": "indicator--65ba82d9-084c-446a-ac2f-89eb39c7f4a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2430c9-ce42-45b4-ac8f-c510523e91e9", "sighting_of_ref": "indicator--7a86fe70-e457-4731-89c5-e7c3ea47864c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89c5ea1-1e78-4321-a267-6182a0d1f324", "sighting_of_ref": "indicator--7a86fe70-e457-4731-89c5-e7c3ea47864c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e70f09a-9d7a-45eb-858e-c74f14b2f841", "sighting_of_ref": "indicator--8559686c-baca-44cb-bf64-8b0e6987b4e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1c4a83-756c-4946-9974-cc734a245d46", "sighting_of_ref": "indicator--a17bec84-3f60-4d18-bb10-5716143cc561", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c215778-93ca-4a10-9796-7ff557e3e596", "sighting_of_ref": "indicator--a17bec84-3f60-4d18-bb10-5716143cc561", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e39a8f-4ccc-4594-a563-f5ca33e96e70", "sighting_of_ref": "indicator--a475592f-7bfd-4aee-a061-7a48206b9660", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe77a85-816d-4b34-bd38-46bc246ed6c4", "sighting_of_ref": "indicator--7f1965a4-9d2f-43f9-b43f-67d74ecc288e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774545d5-a2cc-402d-9a03-e7f714a8db07", "sighting_of_ref": "indicator--b535f7a3-9285-481a-8f44-ed011d1f4649", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6d511d-4a10-41f1-8fee-4b2e37a59ec8", "sighting_of_ref": "indicator--b535f7a3-9285-481a-8f44-ed011d1f4649", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f882258-29f6-49f9-81a6-0095def84e66", "sighting_of_ref": "indicator--a3740765-9e4a-44d4-a148-093c581eb401", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da31caa-646e-4ac2-abee-730490a9248d", "sighting_of_ref": "indicator--a3740765-9e4a-44d4-a148-093c581eb401", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cc0a29-f88b-4e1a-a57e-db7b0ade6df7", "sighting_of_ref": "indicator--f5505ed0-72b7-4b1f-b2ce-af19d9e89270", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6222e8-afe6-4fc2-a57b-3214ffc6b418", "sighting_of_ref": "indicator--ca63c0c1-cf5e-4a40-9298-05bed5da56cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1aba27-b5d5-4096-9d42-bb02ba6d11dd", "sighting_of_ref": "indicator--c5ddb19f-f693-4551-a8ac-90f08f91b7d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f8d374-dd3d-4670-a213-ed21f2aa701f", "sighting_of_ref": "indicator--07fc7268-4da9-4309-9408-aecd98f42641", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbe3afb-b4c1-45a8-a44d-65874d096b1e", "sighting_of_ref": "indicator--07fc7268-4da9-4309-9408-aecd98f42641", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d14a683-8125-4086-8cba-fa8275be64d4", "sighting_of_ref": "indicator--5f3a9a43-1f71-4d1c-a38f-b79324a9c9f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9466b50-d575-4e51-9d24-e131ca907af8", "sighting_of_ref": "indicator--24d96259-f124-4fab-a4ac-f5eff10613ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc39c3d-816d-49f2-839a-9f7c165abb6f", "sighting_of_ref": "indicator--24d96259-f124-4fab-a4ac-f5eff10613ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd653c7-e9be-4918-b765-00e2b2aba199", "sighting_of_ref": "indicator--a2bb270d-c249-4522-806b-74ffa42a0995", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbbf158-c608-46a5-9a21-fd98ece56c2f", "sighting_of_ref": "indicator--2f2d1246-177d-4cff-94fb-773fd1ed9919", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0007a6-f100-4ab4-b97e-d51b74ccb6e1", "sighting_of_ref": "indicator--c47b23a8-2903-4169-bda8-00132afc672a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca03e86-3e7f-4965-930b-db30839f2be7", "sighting_of_ref": "indicator--5cc117ff-0190-4975-be00-a18c2c780b2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6848de71-9f7d-44b9-8759-e74494fcff09", "sighting_of_ref": "indicator--98bd9b17-c938-4197-a6a8-380470d309b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5949eb0e-0df6-4b56-9bb7-bd72adb4cab4", "sighting_of_ref": "indicator--98bd9b17-c938-4197-a6a8-380470d309b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1aecd6-f8f3-4453-b0f0-67b479376f44", "sighting_of_ref": "indicator--08d205cf-fb9c-4358-acea-11049fa3e08b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3798c0a3-dad6-4f7c-89bc-805343433258", "sighting_of_ref": "indicator--1f5f1051-c2a1-4bdc-84f6-f8127d8fcb9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e44fd4d-f1e0-4cf4-a37f-9eaca6d7ddae", "sighting_of_ref": "indicator--5034c74c-05c7-41a0-8a82-c0a206532c4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ceec16-69f8-4439-9aad-16e64b0cff9f", "sighting_of_ref": "indicator--5034c74c-05c7-41a0-8a82-c0a206532c4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ebd1b9-6c38-42bf-be06-1a14c8b752a7", "sighting_of_ref": "indicator--5a983579-c96e-4d38-98ad-d33e9175122e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eea16e-1ef0-4754-a2d9-61e308e06943", "sighting_of_ref": "indicator--5a983579-c96e-4d38-98ad-d33e9175122e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11492af-3d09-4b4d-94f0-7f5dae5865ee", "sighting_of_ref": "indicator--f5fe1513-d869-4f91-b487-dfe687805535", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c83bc4-d420-4d48-9dfb-024b241bac40", "sighting_of_ref": "indicator--5dbab25f-383a-4ab8-988f-f8e0f0a3a488", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c686fa20-f645-40e3-b09f-7508c94bd4eb", "sighting_of_ref": "indicator--5dbab25f-383a-4ab8-988f-f8e0f0a3a488", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92102f15-1ae8-4a1d-a4db-ad77b42e583d", "sighting_of_ref": "indicator--e8d79e1b-eef1-41ac-b524-141a6c330370", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d8a0ac-38ad-45b5-928f-0e7ca2b41552", "sighting_of_ref": "indicator--e8d79e1b-eef1-41ac-b524-141a6c330370", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77156200-0490-4e90-97be-892ed5b2fa0e", "sighting_of_ref": "indicator--03d6046b-739d-4c34-91c1-94e757df9062", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92597145-950e-4b32-ba62-91212f788526", "sighting_of_ref": "indicator--875a4de6-931a-4c42-9e59-df2f51053385", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f358710-396d-4ea1-87b2-3588813d337a", "sighting_of_ref": "indicator--173550c2-6d89-414f-b538-99b2de767c4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca37277-e3ac-44d6-9739-fb6ff7881f7f", "sighting_of_ref": "indicator--46132441-9e37-42fe-a777-5e8f367a2056", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e769bdf-8460-45dd-8e37-b8654c7bf594", "sighting_of_ref": "indicator--3c997827-e8d1-44f8-be52-6d9015c5a44b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed77b18-88d8-4faf-bcf4-b4bece5d6da9", "sighting_of_ref": "indicator--2bb8ba42-8bf3-40a5-a4c3-ac09670d8150", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a6552e-5c46-4e20-bed4-423ba9cf5c23", "sighting_of_ref": "indicator--2bb8ba42-8bf3-40a5-a4c3-ac09670d8150", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04518176-c13a-4614-b5cb-7f5b0093ebd0", "sighting_of_ref": "indicator--ab3534cc-bbe7-4adc-ac19-da5bd49cc76f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653eb963-4c63-4c0d-b71a-cb467391a82d", "sighting_of_ref": "indicator--1cd25e47-83ab-4523-b5bf-cd9dfd329c07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e9a77-c813-4414-8c43-531a9aa6ec38", "sighting_of_ref": "indicator--1cd25e47-83ab-4523-b5bf-cd9dfd329c07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2458a559-36b5-4582-9e31-4b2c4531c2a3", "sighting_of_ref": "indicator--0e62989f-eaf3-4593-adf5-dd11f669f30d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee2fab1-6736-4d70-8aa1-9791c1122b86", "sighting_of_ref": "indicator--fac53f52-6e8f-4ed4-a550-efb889db265b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90164fa3-23e7-4cef-9b1f-90a5590b23ed", "sighting_of_ref": "indicator--43936c53-7c2f-433b-a59c-75f42b5ebea5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904f9fee-3dfd-42c7-bec0-a3b6fa30d5b1", "sighting_of_ref": "indicator--43936c53-7c2f-433b-a59c-75f42b5ebea5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28caa6ac-c6c8-4019-9864-7cdf802da652", "sighting_of_ref": "indicator--757a2f7e-ffec-4550-8cf5-4455cb78b10e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59703fc4-4b34-4011-b666-1dd1ccbfb7b4", "sighting_of_ref": "indicator--10ef02fd-5aaf-4136-b657-6c937d93d14d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef72b6-3cff-47af-8236-eae691e677d1", "sighting_of_ref": "indicator--20e2232f-929c-4d7b-8edc-d9ab65014fd5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9e0965-5a11-4ac8-bced-d9cb524baba6", "sighting_of_ref": "indicator--20e2232f-929c-4d7b-8edc-d9ab65014fd5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82d0bb0-0172-44c7-9472-ce90569f7032", "sighting_of_ref": "indicator--4103e542-e6cb-4fd8-8479-f143ca9f1d9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11e37da-a092-4782-ae59-62b0f9657db1", "sighting_of_ref": "indicator--4312eb3d-58a2-4d2d-98a7-118382bf7c5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a5d941-f6c1-4603-b4e2-6de1a968c571", "sighting_of_ref": "indicator--42e56805-e0f9-47c8-aca6-0b5ad9c36137", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4d5975-d113-4ce6-bca3-bcf5f55ce6d6", "sighting_of_ref": "indicator--42e56805-e0f9-47c8-aca6-0b5ad9c36137", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85a30ff-bb52-49b0-ad29-8c9ce873550b", "sighting_of_ref": "indicator--6bb2a635-3602-48ca-9c06-395db3872049", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1065c3-3c0e-4043-8992-617fcfd63cec", "sighting_of_ref": "indicator--6bb2a635-3602-48ca-9c06-395db3872049", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854c080e-6ff9-4a89-a2ce-8be86f71074d", "sighting_of_ref": "indicator--8248bf0e-49ef-4126-9647-cdfc17251ffb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d98bd1-acc2-4055-8ccf-694a1d4885e5", "sighting_of_ref": "indicator--ce6efc75-3272-4db0-9982-14033ef3cbf5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10298c58-5d57-4769-8d77-ce19608558ea", "sighting_of_ref": "indicator--e912584f-15e0-4d7b-9c45-535a25030d81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a7b9e6-b46c-4b03-a393-948f47fb0854", "sighting_of_ref": "indicator--85e172d1-a215-4ef7-b5a8-d132a559434d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5224cd12-7ece-4158-999d-06e0730eff6d", "sighting_of_ref": "indicator--2eda2ad1-8f15-4c9d-b0cb-4d9b725f0128", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fa0983-d6c0-4f31-9c49-71afbfd750dd", "sighting_of_ref": "indicator--533c2626-0c42-4afe-8d2e-c52136d1282f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5766303-4611-4713-bab0-b3fa2bc895b4", "sighting_of_ref": "indicator--34dd1762-b7a2-4273-90c6-f1b5bb382916", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c903d9-bff7-4702-8d7f-8d6e7becd485", "sighting_of_ref": "indicator--26b95e20-8d66-4087-877e-27f8d899ea7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a61c83-5305-42da-9597-272e01fbd1a0", "sighting_of_ref": "indicator--26b95e20-8d66-4087-877e-27f8d899ea7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78377a4-6e33-4f76-a950-ac45029661e8", "sighting_of_ref": "indicator--393fb3fc-da4b-4343-8de3-721915e57289", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90487cd4-391c-4f3a-8883-5ac36c4adfb3", "sighting_of_ref": "indicator--42bccc3c-3df8-48e1-a495-9427512c20d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234f80f5-8ef7-495a-b165-b0e22364adb4", "sighting_of_ref": "indicator--7424bdb9-1c21-4889-b807-5426b1cde74c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e15736-ee43-4c9f-a9e5-7ad9d7efe9db", "sighting_of_ref": "indicator--16d6d9ee-0116-4960-bf3b-3c782130b93d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553c59b2-b0d1-4aca-a157-ee1c738afecd", "sighting_of_ref": "indicator--16d6d9ee-0116-4960-bf3b-3c782130b93d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e1beb-89ee-47e9-961e-11d9e4c06ca2", "sighting_of_ref": "indicator--2e27ee82-6af4-4e22-a96b-87dc9c1a0586", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ecdf12-c109-4f0b-a664-e1867ffedc57", "sighting_of_ref": "indicator--663ce563-6e2b-4bde-95b1-d05001821456", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1a0801-a197-45cc-adc4-15434bfd64c0", "sighting_of_ref": "indicator--e8f2681b-4a23-4f69-8e73-b571b10eaced", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4abf5e-3213-48cd-999a-e9fccd97da64", "sighting_of_ref": "indicator--4178e45b-7ad7-4333-8f03-66fcd3f81dfd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047c5be7-efeb-4cd8-bee4-215d13de3a90", "sighting_of_ref": "indicator--2a26142c-98db-4f75-9060-77ffa2d4cb85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86585a56-d0df-4e4d-b8cf-eabd9edcac62", "sighting_of_ref": "indicator--d5ba7289-c84f-490a-a411-3bf59d43421e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b62ce84-adce-4b3a-a016-1bd8adf22db1", "sighting_of_ref": "indicator--d5ba7289-c84f-490a-a411-3bf59d43421e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8955bd3a-0e8f-4619-bdd3-d7b76ba305e6", "sighting_of_ref": "indicator--444a2078-6571-45b0-9716-91af2a62ad9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b57ca9f-7c0f-4bec-85b4-19095168f752", "sighting_of_ref": "indicator--444a2078-6571-45b0-9716-91af2a62ad9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec107df-1c81-4be3-93ac-eadb3e1d5719", "sighting_of_ref": "indicator--677569a5-6dab-4a6b-b387-e9fd153c2979", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56575fa-ef5c-4fcf-91aa-c6aecac030ee", "sighting_of_ref": "indicator--677569a5-6dab-4a6b-b387-e9fd153c2979", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69be127-aa10-4404-90d4-df8ba7a060e2", "sighting_of_ref": "indicator--da2b3747-add3-41e9-999a-bcb73d49cac9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a22de7-94ef-4cf3-b548-1fa8a750f8cb", "sighting_of_ref": "indicator--acc53bc7-98f8-47e7-bde7-1e98727ac88a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b7a26-162a-43ac-ae6e-30d64903ae30", "sighting_of_ref": "indicator--3c29c55e-4ca8-42bf-9a10-ec6b876ff124", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ab14d0-b055-422c-9ffe-7536fe92d801", "sighting_of_ref": "indicator--4114dfcf-f052-4461-94eb-552e929371c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914542c5-3a60-4a4a-a3fc-312687745e25", "sighting_of_ref": "indicator--8f9b2f41-cb54-4d04-a081-53631ee319ba", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c830bb32-0da6-4e5c-82f7-6877fa260af3", "sighting_of_ref": "indicator--90d493b8-f6d0-4d9f-93e0-830a6589c391", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b90560-6e6b-4ced-aa81-4d2775767100", "sighting_of_ref": "indicator--80fb41ca-8a13-4bfd-b74c-fff5a0dabfc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f2c0b7-c63b-4bc4-8b92-2c5497bfe219", "sighting_of_ref": "indicator--5adb4c9e-2da9-4656-b49e-c68c0322233a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1b8628-c818-40e4-83c0-8508442ebfdd", "sighting_of_ref": "indicator--e90ee846-86e7-4eb1-a21a-45c6014b7e97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fad56c6-d047-4f82-bb18-c4dc48045a30", "sighting_of_ref": "indicator--4cea3fc3-c7ff-4076-8c77-5584a8080e84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4fb6eb-747f-428e-98c1-6f333240fe24", "sighting_of_ref": "indicator--4d0a8dd1-b125-47c6-8d8a-9bfca06044cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8543065e-6882-485f-9fba-c8769f26529a", "sighting_of_ref": "indicator--4d0a8dd1-b125-47c6-8d8a-9bfca06044cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e380a9af-0275-47ba-96be-3eecf7e95f17", "sighting_of_ref": "indicator--0ca31834-e8ab-496a-931f-aff57953f1b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41cf87f-8b99-4861-b403-e3e88a7be21c", "sighting_of_ref": "indicator--6fba325f-f120-45c0-b8ca-7eb38504ee50", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d55985-c732-4265-938d-a683fec7a50f", "sighting_of_ref": "indicator--3d7b4748-7996-452c-b327-3c703dfec505", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929e0ea6-11e2-4133-83e8-c7543df76b3e", "sighting_of_ref": "indicator--b3a69817-f9a5-44b6-bd9d-ceefb83dfa6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4f9377-deb1-476a-a58a-d449b5ad615e", "sighting_of_ref": "indicator--e8276d5a-8345-4d4c-8cb8-9092a3cf515c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3990cfc9-29cd-4831-82d9-95af7f1b84ca", "sighting_of_ref": "indicator--51d1aef5-50f2-49a2-8a32-62b7d9c40267", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27be4b6-f082-42d2-868f-9a406e48c5bc", "sighting_of_ref": "indicator--f921a9f3-728b-41f2-931d-93029368a5dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693e5d51-43ed-490b-9092-ef8fe2568d11", "sighting_of_ref": "indicator--a1fe002f-dbc9-4fe3-8b5e-55e6edf0a5a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72244f0-e4ef-485c-b0d1-7afbbdba5290", "sighting_of_ref": "indicator--0619634f-dd93-480a-950e-00e84f42d4e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b01231d-f17a-4687-a659-2da451e0e1e9", "sighting_of_ref": "indicator--1dc9d34b-aa82-4082-a696-281452d85178", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdf2b34-f273-4c00-a351-f40d5e692552", "sighting_of_ref": "indicator--1dc9d34b-aa82-4082-a696-281452d85178", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ab03e7-bf51-4917-9ee2-0747f8d67425", "sighting_of_ref": "indicator--c1b63afe-c489-4b2b-82cf-3a2fc25b515e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef88159a-b502-47f7-ad7a-57f9c2db871e", "sighting_of_ref": "indicator--da768de1-1ee6-46c1-b28a-0dc31ef61827", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917c3dae-6e18-432b-89c0-c33e968027e8", "sighting_of_ref": "indicator--76520c37-533e-49c7-835c-6e47fc4f3ab4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db257551-f89f-475a-8710-a8383b8fe63f", "sighting_of_ref": "indicator--631e7d2e-c284-4c21-ada7-fe68bab02cea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966e0870-58a8-4067-85b5-b5ec29d78f72", "sighting_of_ref": "indicator--9ea86441-12ea-4dc7-994c-ad131aab29a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2077dad-df60-44e8-8eb9-00414d013aec", "sighting_of_ref": "indicator--0356036d-5848-4d34-9561-e9e30dc26164", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d9f10-ec6b-484a-8173-9063a76d66bb", "sighting_of_ref": "indicator--bc18a2a4-20b6-40ff-aa3d-f47429bd0225", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e920ca79-6a57-43ef-b805-37e716a7a422", "sighting_of_ref": "indicator--eab9fea4-bd7f-444f-923b-deac6e15fae3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf43bc2-4eaf-47a5-8a6b-9428b8e2d9df", "sighting_of_ref": "indicator--003f809a-2134-4c51-adb8-8e930e998327", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82efb25-a80e-46f4-bfb3-a6fc33a9e202", "sighting_of_ref": "indicator--ad8aa4b5-b0a8-41ae-8695-b94b04ff7a86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88c2b5d-6146-4aa9-ad19-29c92581cf7e", "sighting_of_ref": "indicator--5cee8864-7482-4aef-a9f1-a4ea6eeabe90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37487ee7-f4bd-4a66-9b65-8c3fbddab356", "sighting_of_ref": "indicator--b97f5b36-089c-4230-afe2-50b3eee0abb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6fe76e-0535-453f-ac0a-ef2df73366df", "sighting_of_ref": "indicator--2f90289c-db18-4e4f-9be1-325aba9e5eb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5180a056-1b80-4e3b-a36a-bba30e14db8a", "sighting_of_ref": "indicator--b1bf9266-3359-45b2-b3cc-7724f5be45ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a9ab77-ca48-4c28-88f0-c20854857807", "sighting_of_ref": "indicator--58927a3c-0909-4249-befd-12cec7f878d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7004d5-b10e-4395-bbf1-d24dc7dd3d12", "sighting_of_ref": "indicator--14c54f33-6767-44a2-a369-0ca1a9f283a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb6989b-990a-47f9-b541-ff6dff4496b7", "sighting_of_ref": "indicator--9e391207-1a98-4c8f-bbfe-644b76fb536e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9981c73-b459-4d46-99be-d4c6c91d8428", "sighting_of_ref": "indicator--9e391207-1a98-4c8f-bbfe-644b76fb536e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a98158b-da50-443f-9469-862551d49a2a", "sighting_of_ref": "indicator--78c6d998-eec1-419f-929c-ae927c7dba01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9feaee-0fc4-4d1e-8637-8176b224ef8e", "sighting_of_ref": "indicator--2adc513a-d78d-4b00-8319-3ad2053f8303", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5910eab-fbfb-46df-b1c2-b7dfd52c9e39", "sighting_of_ref": "indicator--9eb9b3b7-6cee-40ec-b939-6eed51449656", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54184a2d-b14b-4f4e-afd6-4e6c81cad820", "sighting_of_ref": "indicator--1e3c075c-7c7a-4cb3-85b7-3e968303c66a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4689f02-ad44-42e6-a6c5-973619b38a17", "sighting_of_ref": "indicator--3dea17f8-cb7e-4604-980d-8f42183f7a99", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f1335-880d-421c-9d28-3cba58f27795", "sighting_of_ref": "indicator--312ad6b2-ec66-41fd-af13-077fdc179639", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a803f759-676e-4023-a504-8bad781f1b2b", "sighting_of_ref": "indicator--06519d50-670c-47a8-91a0-89a699bc2036", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d90ae3-624d-492f-a503-d0e6f75ddd3e", "sighting_of_ref": "indicator--06519d50-670c-47a8-91a0-89a699bc2036", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf90365-6810-4d05-9867-e5ddb42e8dcf", "sighting_of_ref": "indicator--f0a210ba-7d41-4b36-9774-5c35a668f056", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef6d10-9d60-405e-9f53-66da8107f45d", "sighting_of_ref": "indicator--d421f644-e3d8-4111-b855-2b33ea75645f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ddca74-8333-45b1-846c-5d108ca64e06", "sighting_of_ref": "indicator--89d907fd-b7ff-45b3-a75a-bf03f9b8c794", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dad086-a935-4974-a9bd-83829c532986", "sighting_of_ref": "indicator--7e9b6f82-f698-4909-8847-192ccc5be867", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d62c22-5ef0-4217-8455-7a2f393ee7ba", "sighting_of_ref": "indicator--8c1ef3f8-26b0-4336-b6ee-d471319bd62c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e28a36-25c4-4cd5-b7fc-fbee3c524634", "sighting_of_ref": "indicator--774cab7b-dfce-4424-b83f-3daae3e5d092", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf41817-6d3f-482d-a426-935f83a940fd", "sighting_of_ref": "indicator--685236c2-210d-4ef6-bb29-ffe4289b3d3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af33bb89-e257-44cf-9b81-3ad42324a438", "sighting_of_ref": "indicator--87f91fb7-12a5-4a8d-bad0-b57a358f1dd0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423a2a21-d81e-4a4a-a558-65caed7106bb", "sighting_of_ref": "indicator--87f91fb7-12a5-4a8d-bad0-b57a358f1dd0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf12d8-a70e-43ad-8fc6-77081105a9f9", "sighting_of_ref": "indicator--042a1e5e-4d9b-45e5-9190-87f89ffca454", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9053852e-2d10-4932-ade4-556aa21cec83", "sighting_of_ref": "indicator--7ccf1a88-c894-4498-a90a-3cc6291ef3b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af412bd-340a-498b-9f3e-5af0186f29dd", "sighting_of_ref": "indicator--1c6ba86a-d370-43dd-846f-236dcde4fa08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71570edf-fc7f-4b18-b71c-4a9269414889", "sighting_of_ref": "indicator--05f2cc46-da0a-4191-a998-df018f153a71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f9bd19-f293-4b71-831f-3f2341f4c474", "sighting_of_ref": "indicator--ab9e5abb-158b-4e1f-b311-6bce138deab5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff189e1c-5e6a-47a8-b123-c3dc81b30dd5", "sighting_of_ref": "indicator--beeb36de-f1c2-4dd7-9073-98dd1c34986c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eab39e8-bffb-40a7-9b90-03f6e5b65717", "sighting_of_ref": "indicator--10555d94-0003-4ece-83dd-9374cdb44233", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2af85d7-c38b-45ce-8416-6594cab56f6d", "sighting_of_ref": "indicator--10dc2a68-cfdf-4d21-b63c-2bbe086e1dc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5397bacf-7d7f-46b2-a2df-dcb5e51dc38f", "sighting_of_ref": "indicator--6ab58963-a125-4466-8b9c-8b3493529602", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090d9176-2d88-46c2-9377-7565a33d7164", "sighting_of_ref": "indicator--6ab58963-a125-4466-8b9c-8b3493529602", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d79795-373c-43b0-8513-18fda9d84a04", "sighting_of_ref": "indicator--47a198e0-6395-48d3-abc6-51f0af83ff63", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa704142-c7e0-4c66-b77a-688abb717e09", "sighting_of_ref": "indicator--412d2dc4-b5b9-4164-9acc-27a9dc6f4833", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26b741c-5bd0-4c2e-9ead-17c49d1faebd", "sighting_of_ref": "indicator--412d2dc4-b5b9-4164-9acc-27a9dc6f4833", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b39dfc7-6561-4392-bb18-3fb6753b5386", "sighting_of_ref": "indicator--f293ff69-69ad-4bd9-9bbf-910cee4b62c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4221b61-4fe2-483f-b172-00e8df7f3b24", "sighting_of_ref": "indicator--f293ff69-69ad-4bd9-9bbf-910cee4b62c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1d2a19-f1eb-45fa-9da0-bee50df4d0dc", "sighting_of_ref": "indicator--14c63a07-f6af-412b-85bd-70e2a9b62ddb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849d4998-2b3d-4b0c-b611-7a5c6fb824e7", "sighting_of_ref": "indicator--60c5aa97-f664-4c56-aa3e-dae2120a52c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8124390f-534a-4484-a663-15360f968397", "sighting_of_ref": "indicator--d27edacc-0101-413c-ac6e-a1371537cd29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019d81dd-e3fe-4499-81cb-df8085c6f616", "sighting_of_ref": "indicator--1f17df55-87e0-478f-8eda-2637fbd01beb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88165623-7bf0-41f7-b9f4-f71a1301c7a9", "sighting_of_ref": "indicator--f1f272d4-09cc-4655-a9fc-b9a08cdc8aa4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2456f7a-118e-46ae-a1ca-3a7b817660cc", "sighting_of_ref": "indicator--d7ed97b6-57dc-4eb9-a0b3-915d8633eb43", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5d184-0d2b-4474-8165-487949e044bf", "sighting_of_ref": "indicator--3c92e756-0e75-4f3a-91df-533a42e7d8fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a43c4-f69a-4a27-9b2c-b4fd7b6d93bd", "sighting_of_ref": "indicator--3c92e756-0e75-4f3a-91df-533a42e7d8fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0f3537-783b-4b2b-8a29-546be37052ed", "sighting_of_ref": "indicator--e4b5511c-dd0a-4379-a389-d6614ed5125e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8b0b93-c584-49a5-b0a6-caa9a969012e", "sighting_of_ref": "indicator--e4b5511c-dd0a-4379-a389-d6614ed5125e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12840776-0dd5-4e13-9c56-e5d9888b0d35", "sighting_of_ref": "indicator--ccc083a1-2d0d-4223-b186-1adcc486c07f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a9f910-ed1b-4d04-a651-c7623fc606c3", "sighting_of_ref": "indicator--5c64b3b1-1a0c-472d-8db9-8e250fb2a96b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98985dab-04fd-445a-9252-25885e3b389e", "sighting_of_ref": "indicator--5c64b3b1-1a0c-472d-8db9-8e250fb2a96b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995f8bc3-09b2-471c-b747-3c5cb2739ac1", "sighting_of_ref": "indicator--9e24c449-c3c7-4e0a-b463-93ebdbc485ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd6096a-51e6-406a-83df-ba8e90cdcc0e", "sighting_of_ref": "indicator--9e24c449-c3c7-4e0a-b463-93ebdbc485ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d57159-ecee-4d59-a16f-35b1a5ae4e41", "sighting_of_ref": "indicator--bc4aebe3-e9d6-42fb-82b0-2e79d3dcdf58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3678085-6020-4936-b111-9b24a370b0d6", "sighting_of_ref": "indicator--95a7b7b1-d121-481c-b121-487c238c4b67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455e1966-9062-4839-be14-209428c5b319", "sighting_of_ref": "indicator--95a7b7b1-d121-481c-b121-487c238c4b67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d35e871-a6c4-4e14-96d0-09ef2e9b6182", "sighting_of_ref": "indicator--7d791ebd-95e5-407e-9b35-0b38d40cb7c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32590996-72e0-4fef-8d00-b6ad589cefc6", "sighting_of_ref": "indicator--37e92c32-e6a6-40f9-a8b5-12aaca72b1a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3413ef-41cb-4b92-be64-47f259093325", "sighting_of_ref": "indicator--37e92c32-e6a6-40f9-a8b5-12aaca72b1a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d62c63-13b5-4f0b-83a1-215e1cc0e65c", "sighting_of_ref": "indicator--f3cfdeaf-1980-4235-8af2-4e932052fd8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06f09f2-ac1b-41d1-8870-d63572f69f17", "sighting_of_ref": "indicator--638c6d62-4532-4437-9f12-efb7efc12426", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b349cb2-8d60-46c8-8276-fa109bd97ce8", "sighting_of_ref": "indicator--db8d44d1-277c-4340-9ac2-087e3c0656d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a33631-f7e4-4e7b-8871-b8efeed6df70", "sighting_of_ref": "indicator--3b586eeb-55f5-4db4-b553-e9d4f217ecfa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46ac76c-5130-4db8-b7a8-d2a162a0f832", "sighting_of_ref": "indicator--9f65da0a-963d-4832-bd29-c38eeb9e6a87", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0f468e-533c-4054-9e76-efbff329be38", "sighting_of_ref": "indicator--9f65da0a-963d-4832-bd29-c38eeb9e6a87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683a882a-71bb-4880-a432-27c605ee617e", "sighting_of_ref": "indicator--5f40d639-f84e-41b3-b375-043126b6fa94", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0941555-e930-497a-a5c7-8595813017f4", "sighting_of_ref": "indicator--e0384209-9479-46de-987d-0629cb5c1b35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36617d2f-8d40-490e-b54b-35899c78cdf2", "sighting_of_ref": "indicator--b337a2a0-9cf9-47f0-94db-cf283344a853", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa391c1f-732b-4730-a064-60cba1d2bbd8", "sighting_of_ref": "indicator--f04adc24-a367-4bbc-9b24-8af76ae56b98", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93be247c-7966-4518-8b9a-44c14d5791d0", "sighting_of_ref": "indicator--dfb02628-fdce-4904-b7eb-a730a226fb43", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71988c41-8dfd-4a45-bd01-f1074fac89f5", "sighting_of_ref": "indicator--ec4b432c-b040-4ff8-b947-26b37bf0ad97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad5ec60-ede0-4573-88c3-52891c113d47", "sighting_of_ref": "indicator--d3f32b8d-9faf-4008-859d-f3a196f01407", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d700db77-f362-45f9-a040-87ad95f7b3c8", "sighting_of_ref": "indicator--c986338c-f5dd-4864-a930-6608aa6459e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e7ff67-85c0-41c7-821e-723adde460e4", "sighting_of_ref": "indicator--bfacadc1-05fc-4b27-9cf8-39fdf8d09b01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d8851b-2833-48ff-a457-9aa38130d864", "sighting_of_ref": "indicator--83c586b6-04c1-49cd-bb4e-a6f62ed8da76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d335b7-e279-499b-b1a4-183e94125719", "sighting_of_ref": "indicator--648658e4-8602-4918-8e3f-65d54a837e7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cf208c-a0b1-46f8-821a-07e15ea832bd", "sighting_of_ref": "indicator--c9cd82e7-c955-418a-81d5-3c6fdb687915", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924f1f44-710a-4369-a70e-7539824eacf1", "sighting_of_ref": "indicator--fc8fd627-77cf-43db-b145-5cf5811f2676", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f10d58-fd8a-47be-944c-3b7c77ce226d", "sighting_of_ref": "indicator--fc8fd627-77cf-43db-b145-5cf5811f2676", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7e9ce5-622f-4fd4-93ea-aa8f415f8dce", "sighting_of_ref": "indicator--7be65112-786b-405f-b1fb-8c3d48918d8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78956a94-4559-4a5b-ae31-8d44ceaa8650", "sighting_of_ref": "indicator--004cd640-1c94-4a8f-bc84-2297fb91cdc3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fcf10b-ed54-483e-a59c-056e0966fb99", "sighting_of_ref": "indicator--baff430d-8439-45ab-8456-9509721f5d67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09387be8-d3e0-4e5f-832a-9d14c79f913a", "sighting_of_ref": "indicator--b7d90a6b-2fdf-4acf-a094-5854762e24f5", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196506b-d5ad-4f9d-97a5-f51d49a37a24", "sighting_of_ref": "indicator--da186b5f-1969-4549-99ef-b20338327d34", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d887073-bb81-40db-ae36-f3acc325ec48", "sighting_of_ref": "indicator--d6e64428-973b-48c5-896c-98891626df25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e19d64-2a93-46b8-ac2a-2832cbafbd1c", "sighting_of_ref": "indicator--3b75a524-ed6f-4809-983e-4cbef79e95cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5c1011-3136-40e9-9e71-f5d82528dfde", "sighting_of_ref": "indicator--7f9d8811-7357-4986-b717-57798863917d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307a0b26-aeb5-4366-9f55-c435297f832b", "sighting_of_ref": "indicator--7f9d8811-7357-4986-b717-57798863917d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534b02f5-5292-4501-936b-de741e24b2a0", "sighting_of_ref": "indicator--cf5414c6-8a99-44a9-8158-82ce48c1f476", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13372b5-6981-410b-80f5-f233df28509b", "sighting_of_ref": "indicator--b3e26e6a-5710-4864-8369-bbabd8b51611", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea27a4ae-4f1d-4ef4-892d-d1cc259a276e", "sighting_of_ref": "indicator--d651b688-dac2-4496-8a9a-ecd6f14a635b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fa8589-6498-4fdf-a9dd-26b8d5879d56", "sighting_of_ref": "indicator--d651b688-dac2-4496-8a9a-ecd6f14a635b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e900e7f-36ad-4f58-a6b8-4ebb8aeae2e0", "sighting_of_ref": "indicator--c90e6f4d-cd62-40ca-90e8-aae536c1e21a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085bca7-5069-4e66-8b4c-292ea2d82a78", "sighting_of_ref": "indicator--5b7814d3-0906-4805-afab-2a22b97b62bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061909ba-eb75-42a3-92bc-caec07a48ac5", "sighting_of_ref": "indicator--fed31042-81be-46b1-9f6f-613aeec94e5f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02310bf9-5b54-4ceb-b403-e6a5ee9b22d4", "sighting_of_ref": "indicator--b879326c-0974-4153-bf69-1f1c6ecffee6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac36384-4be4-466f-a58c-a952ef677948", "sighting_of_ref": "indicator--c573ee16-ee8f-4c0a-b9c0-a05c0c33e9cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee8cc22-375d-47ce-b0de-fdc04d985a8f", "sighting_of_ref": "indicator--6de36277-4492-4074-ba23-d73c9994486c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493dc287-988e-41c4-aa5a-67c1aeebf854", "sighting_of_ref": "indicator--780f6ab8-1603-466f-8a9c-69e62cc31eac", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155ba4d9-311f-437c-a07f-88605576f444", "sighting_of_ref": "indicator--8e626fb4-cf90-4486-86c1-aee837c02ad8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe88b983-cd3a-43f4-85f9-14f5edb532f4", "sighting_of_ref": "indicator--d1ac9d4d-42ed-47c3-9cfe-6e385df00bca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d3683a-bc76-4a23-bf4c-1f32fe2dcce9", "sighting_of_ref": "indicator--bb584787-adf2-4b55-80ae-cbe9b607ee38", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08cfaaa-9dd4-47e7-87c1-865f7a0ec2cc", "sighting_of_ref": "indicator--a7dbddf6-84ea-4ad4-939e-e904e243096d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d056d3-dc47-449f-a0f3-15fd78c3a43e", "sighting_of_ref": "indicator--a7dbddf6-84ea-4ad4-939e-e904e243096d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9154a25c-ccb6-487a-bbd7-e0be5d91b626", "sighting_of_ref": "indicator--1a37a03e-996b-4057-ac3a-398ad9a56f81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7007e5ec-80e5-4d05-96cc-8a853bf472b8", "sighting_of_ref": "indicator--70085545-64c0-4c10-925f-a7a762cb90bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4e587b-e9b8-46c8-8431-07c8a4840c8e", "sighting_of_ref": "indicator--f83e27f2-bebd-43f9-a5b3-15b30a377dd4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60b7424-fe5b-4568-83e6-1a5be41c4edd", "sighting_of_ref": "indicator--b950127d-7b1d-439f-bddc-a971b8f6ec0a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620ace84-ae11-4128-9dfe-d0ce042c9c8f", "sighting_of_ref": "indicator--0fe7740c-f8ae-4188-a6e7-6b7f81f09f7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa6e1f5-c7d9-4234-afe3-457a08654ba7", "sighting_of_ref": "indicator--6e99187e-4fb2-4cc3-b6fd-b2c59ad1f1a3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e7ef07-0211-4928-88df-97275732744c", "sighting_of_ref": "indicator--327437f6-1664-4299-a10d-f4d9d80d86ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a46d9e-c741-4cfe-8763-8a88477677d5", "sighting_of_ref": "indicator--327437f6-1664-4299-a10d-f4d9d80d86ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f95289-4c9f-4bff-8dc6-b633f5c2710c", "sighting_of_ref": "indicator--84dd4741-d9c2-4c52-a4b7-bc027ff87d4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c5037a-83e6-4003-8601-675ec52041aa", "sighting_of_ref": "indicator--d47c97de-2b03-4cb3-b192-69335a9f4510", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e14eff-9905-4c2e-9b4f-03d5a7d90549", "sighting_of_ref": "indicator--644bf7f6-a2d7-4bef-a768-cdcc2393e266", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a59234-0cba-42a4-bea0-9f354be0e20b", "sighting_of_ref": "indicator--6b092212-7bb3-4fbc-b55b-2e19d2392d82", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b27b2bb-4c11-4086-bbb8-7c787dabc617", "sighting_of_ref": "indicator--cec277d5-dea4-4962-8936-d79cf72f69dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494a373c-15d7-4366-8e1d-b613fc5c981d", "sighting_of_ref": "indicator--6be2af5c-b9f2-4651-a3ef-3027649de0f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e71234-efb6-4cca-adfe-4cd713fcb8cc", "sighting_of_ref": "indicator--3b239a9f-0240-43ff-acd5-5ad82573f040", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2480b2a0-fb77-4ce7-8053-7945a439abd0", "sighting_of_ref": "indicator--30f9034d-2ae4-4dc1-b0db-50ac0b8d2e3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e90b08-c5ce-4c37-9ae2-d759c7001306", "sighting_of_ref": "indicator--8c7b647d-e5a1-4c0b-84e8-632ef242fb24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286f1ce5-b1df-4e59-945f-3b0e8c565dd2", "sighting_of_ref": "indicator--8c7b647d-e5a1-4c0b-84e8-632ef242fb24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f50ca0-9b08-4316-a989-c69a4a695e25", "sighting_of_ref": "indicator--df3ebb1c-1940-4e51-bcce-ed9a5a98da56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febfebbe-8095-4e0d-ac41-06e9cfa2885a", "sighting_of_ref": "indicator--df3ebb1c-1940-4e51-bcce-ed9a5a98da56", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d093e972-5860-4f70-9835-6d14d82e90ef", "sighting_of_ref": "indicator--92b535c1-7687-481c-b772-63ff3f4bdcfa", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e7d20d-3e4e-464b-97ee-6cfa4f99d66a", "sighting_of_ref": "indicator--5ce2f9e7-7c46-4eee-83f0-c757d4db7939", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a9031e-db15-4420-b537-bf5fbe6b2631", "sighting_of_ref": "indicator--39143f21-765d-46bc-b5f5-af32c2a50848", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e15d52-b962-48ed-88b6-c9fc1ae429b8", "sighting_of_ref": "indicator--0893784f-5a21-48a0-b96a-2588daa29b90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6e5bb0-ef4a-4861-a762-5897cc00e113", "sighting_of_ref": "indicator--b04dbe48-b651-4bce-92c6-1e46b08adf98", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dc7aa7-0c40-4af2-89cf-6452e05164bf", "sighting_of_ref": "indicator--c82e952c-9e80-4a3a-9bc4-d168bd1eec8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9264f433-1c6c-4426-90a8-4e0866f9ffe8", "sighting_of_ref": "indicator--a7df77bc-ce0c-451d-ab30-fabecab145e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1fd0d2-04ab-4195-9086-fa64be188419", "sighting_of_ref": "indicator--36495068-3a88-4082-9b48-e007d6fa7d47", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fe9519-22ba-4adb-949e-d27d45dc3fd0", "sighting_of_ref": "indicator--c5453b13-bc53-4f51-bd5b-7f07b3b5e3ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7ca3df-9e50-48d2-b155-b953c9b45060", "sighting_of_ref": "indicator--4960b77c-0e21-4244-8c90-3f9426b927f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d23c34-4b7d-4438-9567-dc1fb5d76f89", "sighting_of_ref": "indicator--04de12ac-7925-4d95-a3a3-d986765c4814", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dc5d76-5950-4a5b-bd3e-86a98315e9bd", "sighting_of_ref": "indicator--8265938b-25d1-4841-b5a0-2d13dbc16f8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139f9f4a-8d07-49db-9959-9f1c20d95925", "sighting_of_ref": "indicator--5f2fe960-f9a3-4768-a2ba-cbf650ff9604", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aefccd5-224f-4617-ad05-7e2447a11ff1", "sighting_of_ref": "indicator--fe96e4cd-868a-4115-a94f-54a482e64330", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652bff4c-9664-499a-b153-d04041917af5", "sighting_of_ref": "indicator--10298e23-bfd4-44c9-9803-7edf315cee30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbec4e6-1e0a-4f4c-8628-c3578012b8aa", "sighting_of_ref": "indicator--10298e23-bfd4-44c9-9803-7edf315cee30", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9e8294-a9e0-4937-8ecc-22969e6e9984", "sighting_of_ref": "indicator--3630b15e-8fd9-449d-84b2-6d9dea94f81c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340c9c4e-0a00-4138-894e-7d8f6e3bfde2", "sighting_of_ref": "indicator--52febfeb-914a-404e-acd6-98b80f339826", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbcf915-b8da-4292-a952-eef1104ee8fb", "sighting_of_ref": "indicator--0f842a34-b093-4af9-81ca-dc01e7201257", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3955333c-9a1b-4445-ac5a-6d14bb92316b", "sighting_of_ref": "indicator--add4075f-4573-40a3-afbe-ecebb055bf6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a7d765-60c2-423b-8e99-5db25854e217", "sighting_of_ref": "indicator--70629f38-12e2-433f-b22f-58406c5d3c4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba29e85-172a-47c3-aeec-26fd85420967", "sighting_of_ref": "indicator--70629f38-12e2-433f-b22f-58406c5d3c4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad35613-9c0b-4639-bbf0-1022e312db7d", "sighting_of_ref": "indicator--dc2d4077-1bd3-418a-af8c-2b5c5489909e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb354368-b620-495c-8fcf-a577bd191feb", "sighting_of_ref": "indicator--cc1e71bd-2532-4de6-9bc1-06d24e47a96e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a67fb14-f35b-46ae-aecd-5b38b685c93f", "sighting_of_ref": "indicator--cc1e71bd-2532-4de6-9bc1-06d24e47a96e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad65433-0719-4775-a730-32ebe07acde1", "sighting_of_ref": "indicator--20d72890-643a-4b90-837f-1185a1fa4304", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ed85c9-b193-4173-91d7-461e71ec84d5", "sighting_of_ref": "indicator--8afe529a-c085-405c-aeb9-4d61ef0a1ab9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edde4a1f-6bae-403d-98b7-8f231d706c86", "sighting_of_ref": "indicator--72ae217c-f9c2-4993-af80-aab38a9e98bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b2f140-0cd2-43fa-b036-27dc0f9389a2", "sighting_of_ref": "indicator--4385fbbf-0ccd-4d14-80b1-27dbb56ddf67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da96c31e-58c5-4b61-b876-7d4da5367ac5", "sighting_of_ref": "indicator--9ba7a6da-ea5d-4b0f-ad37-d33817440c35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58316dd-4924-4550-af2a-11b911fbf072", "sighting_of_ref": "indicator--b75f1fb8-c56c-4dfd-b716-c2d65bc4998f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bbd1cc-5845-4f0a-a961-41ad7e498322", "sighting_of_ref": "indicator--eaaefa6f-4535-4dba-9546-7d27ba4c250f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1c6ecf-97cb-4c46-858d-68a5a9827a85", "sighting_of_ref": "indicator--8d3d31ff-dbf1-485b-9c15-7c425c464ba6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70743b6-0852-4a6b-9924-3559c5b0f012", "sighting_of_ref": "indicator--1887a698-67c3-4630-8d3b-6d4c8549d3a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf345bd-b61c-4f67-a2e7-c5a979569ab9", "sighting_of_ref": "indicator--1887a698-67c3-4630-8d3b-6d4c8549d3a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515d43e2-bf7b-4a06-8120-6d067e7be18a", "sighting_of_ref": "indicator--99e70dbf-6d96-4a89-b000-1f145836ce3f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f0fa04-aa0b-4d9b-afa0-c5c25d662620", "sighting_of_ref": "indicator--7e3e92e8-d61b-4a9e-b1e0-39904b68fea9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46637276-18cd-4fa1-9bd5-6828740dc4d3", "sighting_of_ref": "indicator--7e3e92e8-d61b-4a9e-b1e0-39904b68fea9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629a18e1-4610-40b6-8860-cc895017fb17", "sighting_of_ref": "indicator--3d6cdca8-e5e8-4e7f-8502-4c446cd86d75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165b0c11-616d-4333-a07b-fe2b24fcc09c", "sighting_of_ref": "indicator--3d6cdca8-e5e8-4e7f-8502-4c446cd86d75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca29a6d-e7f4-4c01-9d02-1cf5123d391f", "sighting_of_ref": "indicator--c798de12-35dd-4c63-88b4-1567bc573501", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba836279-1ee4-4267-a4d1-9646ba80c816", "sighting_of_ref": "indicator--d80fe810-36e1-43cd-a4c2-95bd0dfb3c8e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdb4040-bb85-4b9f-b0ef-5dc8e7f826cf", "sighting_of_ref": "indicator--0c4beffd-d0e3-42bd-af09-eef0239c82d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da8c2b8-518a-4de2-a40c-19fbb0efbde5", "sighting_of_ref": "indicator--877e0787-c45e-414a-a5ab-897d80983999", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176a6f12-4ad7-457b-bc56-4bbd5bfb9548", "sighting_of_ref": "indicator--972413a4-6f9c-4092-9594-aa594e1b0996", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bff9df1-1a77-43ce-9de4-0264bafb362a", "sighting_of_ref": "indicator--7e4a4495-5a06-4aee-b025-17ae1efe11a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5760bbd-6a33-4512-9bca-c6079b4eb609", "sighting_of_ref": "indicator--4abbc764-a4d0-4424-80a6-021da7b17e04", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d77fb28-8da4-41e5-9be1-c02797f1bee0", "sighting_of_ref": "indicator--ca62907e-d1ee-4cf3-bcda-df8eab23329e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a31950-28b9-4b3d-b1bd-5f49ec73c884", "sighting_of_ref": "indicator--64ddd291-3b18-4db7-ada0-f1c34ce14f02", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3887008-188b-4f00-b10e-612704bc3555", "sighting_of_ref": "indicator--64ddd291-3b18-4db7-ada0-f1c34ce14f02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35eef8e-aa2d-4735-8ce9-b2fbe0e07a8d", "sighting_of_ref": "indicator--f80ecb31-3bf5-4ba9-b7f7-0764fb31adfc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23194638-2dfc-4845-9403-9c348d8797c6", "sighting_of_ref": "indicator--bccc27e1-6372-47f9-ba6d-cf172c603160", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66dba89-5196-45a3-b991-d8bbd88606f6", "sighting_of_ref": "indicator--cf3eff6d-0afe-4880-a88d-3ff00da62e2c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e134dc-2a26-45e6-bc9f-b0946e1b95a6", "sighting_of_ref": "indicator--afae8a99-d8c4-4134-8d35-ac0859d920a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b6f411-520e-4a1c-bb57-ffcd8d0d91ad", "sighting_of_ref": "indicator--1e9e33f9-b9d3-4fe2-b8b0-578d478faf7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459c0d2-9da4-4efb-a8e3-58383d36b038", "sighting_of_ref": "indicator--1e9e33f9-b9d3-4fe2-b8b0-578d478faf7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8939ed01-1ca4-41b8-9880-fa742320198a", "sighting_of_ref": "indicator--d262db82-e1ae-4f99-9bdc-08bd130ade00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8af947-9e70-465e-a638-064eb0fc29b7", "sighting_of_ref": "indicator--0f06d6ba-34a4-4362-85db-7eef66e208b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543526d-5135-4e2c-98ba-8de6d05ad1db", "sighting_of_ref": "indicator--2db77be2-0ec3-408a-ba68-1faa634db722", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1e1e0d-1e74-4fcd-97ca-195cb98d8006", "sighting_of_ref": "indicator--9d6a1590-8506-4aa8-b45b-2ae34f7611f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c9a7a9-70cd-43d0-a29f-4802e8ef17e7", "sighting_of_ref": "indicator--608b2799-3fdb-4351-8e87-f646eb208e39", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123258ec-1258-4c73-b10a-314396e5319f", "sighting_of_ref": "indicator--f5b393c6-f552-41fa-8d9b-c700448aa2ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e39999-8c71-42b0-9be1-94c7802e7a88", "sighting_of_ref": "indicator--9de06358-7f38-4d4d-a4f2-153627b207c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78d4449-624c-4508-ad88-7c39737f1a78", "sighting_of_ref": "indicator--b47d2ddd-c599-457e-9c90-1780c3dd127b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c9c414-3fdf-4cbf-aef9-fdc24f707776", "sighting_of_ref": "indicator--431e69ea-7759-41e9-a24c-415a357fccfd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35b76db-1f6f-4da6-83e3-44130997c954", "sighting_of_ref": "indicator--e1befb43-75ea-44db-830e-df56ba2831a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8e5ade-5d03-4de0-a740-26607a0fd2e6", "sighting_of_ref": "indicator--db941cb9-bada-4b9f-85ff-c2c4bb02cee2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c89d22-b2cc-4e44-be1e-357ae1da6ed9", "sighting_of_ref": "indicator--db941cb9-bada-4b9f-85ff-c2c4bb02cee2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9773b49f-c5a8-4685-8bc7-585b068b1959", "sighting_of_ref": "indicator--184e69f0-b655-4821-9e2e-68c871888542", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440625fb-8443-4f53-af67-0d7e735ad098", "sighting_of_ref": "indicator--db4ef1bd-4132-457d-9e42-6157284aa577", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e37cbfb-5222-4893-93a2-8eeb35d0ccc2", "sighting_of_ref": "indicator--db4ef1bd-4132-457d-9e42-6157284aa577", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf5d865-68aa-4077-a7c6-70aef1c99227", "sighting_of_ref": "indicator--109d5f23-4abb-446c-81d7-cfaa2439871c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2adea2-11da-47cb-83c9-c59e32975ddd", "sighting_of_ref": "indicator--597f5a27-5a45-43c3-aef3-14368c1cf7c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2238a563-74fa-4d43-9503-d405683265db", "sighting_of_ref": "indicator--597f5a27-5a45-43c3-aef3-14368c1cf7c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb8e9f0-1c51-495c-9c1e-9241f7ffb0be", "sighting_of_ref": "indicator--c8d212e9-b066-4045-8349-07d60e5c2475", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149d2d93-959a-4389-9dae-6445ff70371f", "sighting_of_ref": "indicator--7cb13ba5-0d87-4ca1-9bd7-6cfcbe6fcef2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602e64bd-cf2c-40bf-8e50-1f1153f400e9", "sighting_of_ref": "indicator--1487bdce-c8bb-4da9-8999-f20591301ecc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b887ae3-0810-49d0-9483-b70026243d9c", "sighting_of_ref": "indicator--1487bdce-c8bb-4da9-8999-f20591301ecc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fa015e-47d8-4023-ad5b-2e216419a3d8", "sighting_of_ref": "indicator--a7ce1d8d-2e14-48c7-b2ee-7628a7e6f131", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae45fd8-eddf-4afb-a68b-dcd7fc3969e7", "sighting_of_ref": "indicator--14ddf337-e5a0-46df-b0d1-d738e246cfe2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0861194a-5697-4257-b4b8-2208679aac15", "sighting_of_ref": "indicator--24760be9-7254-4e05-9017-c398460dd15a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd45d9c9-abde-4a8d-b16f-29d7436426a3", "sighting_of_ref": "indicator--a8df67de-0af4-4ac4-9b6a-fd0887d94e3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b441ef-ab3e-4a1d-8348-9a407da10c16", "sighting_of_ref": "indicator--0d593111-a96f-4c24-b355-b8aa7d7f77ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68427147-db32-4173-b9db-2f42e215d274", "sighting_of_ref": "indicator--1761270d-28c3-46b1-bb07-3c1d54fd4ef4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d47e2ae-ac72-458e-b965-8e5d36a70d34", "sighting_of_ref": "indicator--9f3187d9-9f11-4f5e-a815-a3b50f08fd22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f73ac9-8b5c-46c5-8ee8-e6a56a0f5c5f", "sighting_of_ref": "indicator--a91b755f-8531-40c9-91b4-e35af1854641", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a603d8f9-5fd5-4b21-9570-7556c9147bde", "sighting_of_ref": "indicator--66932742-2be8-4153-aae9-876fd5fd33dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792f20ea-1f9d-48ac-95db-29ee7a03f104", "sighting_of_ref": "indicator--62808018-9a2e-4f96-8fb0-6da85509e281", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c4be00-9fec-42ec-9a73-ecda33d70b02", "sighting_of_ref": "indicator--f8c45af4-942b-46e0-ba44-9e85c3cd1da9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05114b6e-3055-43f9-92e8-f30ac2d491e1", "sighting_of_ref": "indicator--f8c45af4-942b-46e0-ba44-9e85c3cd1da9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04440f41-254e-4f17-93c5-e5c812dc28fe", "sighting_of_ref": "indicator--f991b5f8-9337-468b-b33c-80ad5498e4ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2dcb20-c6f3-4cf0-9d51-f19da180d695", "sighting_of_ref": "indicator--3034755d-6122-44aa-8324-f1e002e0018e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf9c673-1816-471b-9ce9-1ce3149e6c2f", "sighting_of_ref": "indicator--3034755d-6122-44aa-8324-f1e002e0018e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7d5ad4-4664-4bf9-bcef-a0141753dd8f", "sighting_of_ref": "indicator--907019f7-3375-4186-b25a-4fe2b5a72617", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5a0db3-c840-42ef-a372-8337137b3633", "sighting_of_ref": "indicator--c03252e8-9a37-4055-932f-aae1fc1311b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93530741-20c2-45b9-99cc-433987f61e73", "sighting_of_ref": "indicator--e47db8da-bf29-48ab-adb6-b044991f106a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c24865a-44e7-4ebf-967e-370ff17d2cc7", "sighting_of_ref": "indicator--feee39e1-29f4-4e82-9580-aac81e5eef06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635e0c09-3693-42a2-8584-d81f6c4dd28d", "sighting_of_ref": "indicator--383e9365-aa49-4cc4-a1d2-1de497cb807b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdb1a61-6974-47a1-bdfd-cc753a558792", "sighting_of_ref": "indicator--83afdb72-c2f7-4f40-ab1e-9de9ba47f848", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0b9bc4-51f5-4bda-8def-0e6f4389b2a6", "sighting_of_ref": "indicator--edfadd44-2c8e-4666-bf65-3ec41f81cb49", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29107b52-7264-4962-88c3-4bedb627ec29", "sighting_of_ref": "indicator--edfadd44-2c8e-4666-bf65-3ec41f81cb49", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8d8280-fbac-418a-bfb9-bb4bde0d7f53", "sighting_of_ref": "indicator--7c0ec1d1-fc94-4e5e-ad90-0d6b5ab3da79", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3bb3a7-d94c-4c9f-a457-4dbfd46f5bfb", "sighting_of_ref": "indicator--7c0ec1d1-fc94-4e5e-ad90-0d6b5ab3da79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d92b99d-649f-4c51-9108-ef691dd85daa", "sighting_of_ref": "indicator--1ced9d7b-ca38-4db1-a083-8b0735328680", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f22161-cdf3-4d18-814a-465b2607eec5", "sighting_of_ref": "indicator--ae3a7c35-ca9a-4c33-9d8c-5e14a8aca8b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94389530-d12d-4a18-90b9-f03564afc004", "sighting_of_ref": "indicator--364be398-fbe8-4a69-bfc5-5e83f14c5ccf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48af5647-b5ab-48b3-9bc0-5435cce1363e", "sighting_of_ref": "indicator--364be398-fbe8-4a69-bfc5-5e83f14c5ccf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafb608e-e213-41a4-9b5d-b7b69ae03456", "sighting_of_ref": "indicator--d8deb937-3ccc-4ace-8076-5c48c33b6629", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f2a07e-5222-4d85-8f01-778654a2ebb4", "sighting_of_ref": "indicator--d8deb937-3ccc-4ace-8076-5c48c33b6629", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b54961-2905-4ec2-861a-283879075d69", "sighting_of_ref": "indicator--b2abd1a6-e5c7-4655-a02e-5de6a3067f90", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ac5659-98ff-4a4b-a9ac-6b8da50a2de9", "sighting_of_ref": "indicator--b2abd1a6-e5c7-4655-a02e-5de6a3067f90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f65db-1dff-40e3-ad95-3943bee37e06", "sighting_of_ref": "indicator--6d0059ba-04bd-4f17-b797-b923f6d92c59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b2eeb4-f391-43ed-ab47-3b80266dd9dd", "sighting_of_ref": "indicator--6d0059ba-04bd-4f17-b797-b923f6d92c59", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f875ccc-cfe5-496c-8201-1639221f9fdc", "sighting_of_ref": "indicator--b586314c-599a-4f45-914a-6a72a416bef2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cab6cd-d3d9-4496-bc7c-ff8185339f29", "sighting_of_ref": "indicator--0721f0d2-a164-4dc8-8da5-461693d515ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4afab3-69f3-4ca8-a7bc-957774c6b527", "sighting_of_ref": "indicator--0721f0d2-a164-4dc8-8da5-461693d515ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226fc641-64a7-437a-804d-4db600328a1c", "sighting_of_ref": "indicator--feb45e5c-754f-4973-ac2e-3a4b78546464", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b68af4-c474-4fe8-8ba9-2271c5de4943", "sighting_of_ref": "indicator--feb45e5c-754f-4973-ac2e-3a4b78546464", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8e7521-8d07-489b-852d-090c4b238cef", "sighting_of_ref": "indicator--88b454d9-e85e-4b8a-aee6-2284803009af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e919ec6-de38-433d-b9b5-ca8c36e1cba2", "sighting_of_ref": "indicator--88b454d9-e85e-4b8a-aee6-2284803009af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83dae23-9717-4f9e-9a32-553e4330ec7a", "sighting_of_ref": "indicator--470324a9-8baa-46ef-95a0-c3e5e97ae9d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60579659-1822-4845-baa7-a3687a84e471", "sighting_of_ref": "indicator--03551009-2e74-4008-9251-cb4e0f85f21c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dd2518-7015-4711-b87b-4511bc6a8178", "sighting_of_ref": "indicator--03551009-2e74-4008-9251-cb4e0f85f21c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93bac45-4347-4553-94d6-01760c31b1b5", "sighting_of_ref": "indicator--5971f27d-7f23-43ae-b9e9-10e20fc06a95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6be8171-3e94-48be-a9ba-d82ebc60d022", "sighting_of_ref": "indicator--19441351-e464-4133-952f-2186db6e7d82", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61d500e-f766-4d42-8aa1-20d9ec7ab60f", "sighting_of_ref": "indicator--9343eedb-59e1-46b2-8034-d419235e3103", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddbb9ec-07d8-4ab0-95dc-5b9898443a50", "sighting_of_ref": "indicator--c9922d46-5ac6-4474-9825-a7f73fe45c1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f490b209-f764-4ab2-805b-b20caf806f38", "sighting_of_ref": "indicator--5d946ee7-638e-422c-8ecc-c768916326ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa48e67-4e0d-48b7-a432-fc36b735d1da", "sighting_of_ref": "indicator--b2d8d00c-05e2-4040-b3fe-08c1a20fa750", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0246ef3b-b8fa-4090-8f2c-ec828136bb27", "sighting_of_ref": "indicator--a4747ed0-e2a5-4701-b093-d262cd9dec77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f589a1cf-8e99-4863-9a66-aa6e5aae9f52", "sighting_of_ref": "indicator--a4747ed0-e2a5-4701-b093-d262cd9dec77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7b8d49-f41d-4141-8517-23ca6fcb1df6", "sighting_of_ref": "indicator--2566379f-d59c-489d-bb89-83f94ed043fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5305ad-c311-4d2f-aca2-0084a1aeb138", "sighting_of_ref": "indicator--2566379f-d59c-489d-bb89-83f94ed043fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b17f87-7151-4ff4-a636-9e8a8d937abc", "sighting_of_ref": "indicator--c007a06b-a66c-4d0c-a913-1e78ff536cb5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c6d83f-5ab0-4694-98e8-86db30bfe575", "sighting_of_ref": "indicator--49337ab5-412a-4634-a68f-adf446e6dc40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c5dfe2-5544-4477-903f-777124f77deb", "sighting_of_ref": "indicator--a3b10f69-2474-4637-ab25-c6ec3eac272d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d714a6-f03f-4f1b-a855-93b8a1af132c", "sighting_of_ref": "indicator--0cbbfb99-f4f7-4a7e-80f7-bddd2ea0fe37", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e48ceb-8180-462c-b058-b8de0162afb4", "sighting_of_ref": "indicator--84bccf0a-9201-44a3-b5b4-f3551d4e02eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c476c423-366a-458e-8c5b-74b8b60f56b3", "sighting_of_ref": "indicator--054680b4-ce79-40b2-b8b6-afcbef202aec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead8cb3c-0328-458b-b51e-a8896bf432e7", "sighting_of_ref": "indicator--545ed0c0-d67b-4b79-ad4a-92fb12a8f495", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1471ed9b-a418-427c-b39f-6a60e2d4bb7e", "sighting_of_ref": "indicator--17108653-6b60-4934-b8ea-38f45d7190d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e774a3-c9e2-4ff9-81e4-7c75051d62ea", "sighting_of_ref": "indicator--0c23bebe-ae00-4528-b6ab-6a00bfc2436e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aee1eb-622e-44c9-aa7b-833207c41a8a", "sighting_of_ref": "indicator--0c23bebe-ae00-4528-b6ab-6a00bfc2436e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82d2c2-987d-4c7e-aa73-80bec3146fbe", "sighting_of_ref": "indicator--019c6de7-b979-428f-bcb7-9e7ca47c3aa3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38dd864-d8be-47d4-b912-84d8178e1292", "sighting_of_ref": "indicator--cbdaaec9-a85a-4b8d-ba87-2b3b4a4c3b15", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934a711d-169d-41b8-9b87-f12292e839f7", "sighting_of_ref": "indicator--cbdaaec9-a85a-4b8d-ba87-2b3b4a4c3b15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c083fc-f7b8-4cd7-97db-c71c2ef9275a", "sighting_of_ref": "indicator--7cce5d31-1b71-4145-912e-17d746a25e3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29b6faa-5210-4fab-b284-9d7fedafc98a", "sighting_of_ref": "indicator--a7180cec-324c-4d49-b7ac-3669e7d1cc51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3253a6d2-fe90-4ea0-a449-11ec1aaa75e6", "sighting_of_ref": "indicator--627f47f4-23af-45ee-bf99-6ebca3176553", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3946c111-431d-4404-835b-fa8d4b45aae9", "sighting_of_ref": "indicator--d3f62aed-42b5-4d02-98b4-64c1019df220", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43af750-a8ac-4393-9477-0199695970e2", "sighting_of_ref": "indicator--e6e999fe-e199-4f50-9772-2227b9b4f064", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96de0d89-c762-4a0a-bab5-1bbb9cd6eec8", "sighting_of_ref": "indicator--752efc50-22f3-4b71-8305-4bbe9103feed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ab1967-cf03-4eb4-858c-d07c4b0185d4", "sighting_of_ref": "indicator--8ef0df4f-784a-403b-aca9-27324afb4fd6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a43fdf-39bd-4609-b1ba-00fc283978c7", "sighting_of_ref": "indicator--37e60f76-1bf9-4c19-b689-f7bac7bd6d58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fa2c19-8cbc-4842-8302-129d77485073", "sighting_of_ref": "indicator--37e60f76-1bf9-4c19-b689-f7bac7bd6d58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da4a399-7582-41b8-b58a-5e4047db8122", "sighting_of_ref": "indicator--4d9d449c-60d9-4fd1-a75a-ebfdf832eb38", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b7f7d8-f93f-424a-a67a-8b3d1442431d", "sighting_of_ref": "indicator--61d9543b-7f90-4757-b8a6-06e18ceb9b50", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0c298b-c521-4321-ba35-75b04c461ba9", "sighting_of_ref": "indicator--f00bf86f-31e0-4653-a502-a70240b2ce07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7523bb9a-183b-487f-a901-4420e0e367b2", "sighting_of_ref": "indicator--f00bf86f-31e0-4653-a502-a70240b2ce07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d785aeff-07ca-47b7-9c91-53eac498263b", "sighting_of_ref": "indicator--8469f94f-1261-4f60-8380-50b93dd50545", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ec87a5-0246-4d57-b5b5-25047092de39", "sighting_of_ref": "indicator--8469f94f-1261-4f60-8380-50b93dd50545", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18d0347-a05b-4da5-b882-1e2053580aa2", "sighting_of_ref": "indicator--9e36db5c-2190-43b7-9334-6d7db377810b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7733db91-0f5b-4e31-8741-d55e683131cf", "sighting_of_ref": "indicator--8dfdc6cc-24ea-4dd0-a802-a506539426d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e80b6b-e544-496b-ac9f-91cce9a7cc2c", "sighting_of_ref": "indicator--8dfdc6cc-24ea-4dd0-a802-a506539426d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e354ccfc-b35e-42ed-830b-fb901be3dc10", "sighting_of_ref": "indicator--f8b72827-3a60-4e37-8434-a9e77b4b3ef5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05f35d4-a804-4377-93e9-9a055b576536", "sighting_of_ref": "indicator--f8b72827-3a60-4e37-8434-a9e77b4b3ef5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76c90f8-9823-4c58-9e65-4b30fca4d9b2", "sighting_of_ref": "indicator--2bd6b1d9-8242-45ca-8c7f-4a45ce2858e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40970841-aec6-4986-8311-378f74fb3001", "sighting_of_ref": "indicator--bd5116f6-10ca-4a2c-b5ef-9d9ea06da5e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d76b92-1985-4398-ac1b-1ca33f59f9bd", "sighting_of_ref": "indicator--a1c3b4f9-64e6-485f-9732-468a35079b88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca9ffd3-ada2-4272-bbb1-ec63468629df", "sighting_of_ref": "indicator--a1c3b4f9-64e6-485f-9732-468a35079b88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc14d3-7b73-4f0f-8243-ad642d272855", "sighting_of_ref": "indicator--7227c827-f497-4c45-93ec-8186c7e8ae81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297aef8b-1cd5-4d5d-9d33-59c207a2632b", "sighting_of_ref": "indicator--2c2b5527-d61e-44f2-8cf4-499a9dc4c342", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9718b6-ab85-43f8-b3be-298b5d36e667", "sighting_of_ref": "indicator--2c2b5527-d61e-44f2-8cf4-499a9dc4c342", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c29fcea-6a4d-46d6-806e-751ecd51479a", "sighting_of_ref": "indicator--7c86ee9b-eee2-4861-9cba-f2cc8d17d314", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288aa9d0-cc9f-42fd-934c-8198ec6060b2", "sighting_of_ref": "indicator--721df4d5-b123-4435-9e6c-aacc051e8157", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8ea323-d84a-4c13-b5fb-2bf7ab37a967", "sighting_of_ref": "indicator--a64be73d-b5c7-40f2-8ea4-14dd729463fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36502eef-97e1-4d58-ae25-b3454232deeb", "sighting_of_ref": "indicator--884c934e-a8e7-447d-8919-69fccf9077eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65869461-4685-4f91-ae37-7a57d2440e16", "sighting_of_ref": "indicator--2a16d338-1224-4c2f-afec-3c15210bc558", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e5f4c6-1c55-4b0c-bf8f-455ca83873e3", "sighting_of_ref": "indicator--6abe3956-a371-47c8-83ef-16b20f53751b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0383b510-25a0-4795-b9e1-9240c8dc5e04", "sighting_of_ref": "indicator--6abe3956-a371-47c8-83ef-16b20f53751b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b69b3d9-c4a8-4947-b36d-761873f98582", "sighting_of_ref": "indicator--dd74596b-a2d6-4712-99a9-57254ee80e45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0755fc-a986-488d-8266-13671858daf1", "sighting_of_ref": "indicator--2940e566-4db7-4c16-b928-04fa2c6984c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d216d0d-4607-4b36-b545-58bd4f1f5071", "sighting_of_ref": "indicator--37c1cc31-221e-43b2-ae6e-83fecb00567a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b6c0ba-266f-4e38-9571-fe1636d825bc", "sighting_of_ref": "indicator--31e28643-99cd-4ac9-9f7d-3dfdb95c718a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bec487-3616-49fe-9d07-df246873dc6d", "sighting_of_ref": "indicator--91090490-c808-4b06-9f6c-1b8fc4a2615c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d962c412-ebb1-4602-86c0-36ab80f0764e", "sighting_of_ref": "indicator--24547361-ec18-4b49-afd1-0db7ffe656ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf2b09b-da96-4748-a6a0-2c1b4dc89906", "sighting_of_ref": "indicator--59870e32-a5ae-4aa3-86c9-72a7ce7412f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccea661d-e2da-4213-907f-d146b82e8cb3", "sighting_of_ref": "indicator--59870e32-a5ae-4aa3-86c9-72a7ce7412f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0b3bd6-4092-4f23-bb71-bffeacfcb818", "sighting_of_ref": "indicator--df1bebfa-3d6d-40ea-8579-e071ff31fbdf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8b36d5-4514-48fa-9af9-21f18872975f", "sighting_of_ref": "indicator--df1bebfa-3d6d-40ea-8579-e071ff31fbdf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99ecb3c-4bdb-4411-819a-4dd47039e573", "sighting_of_ref": "indicator--49bcd548-f569-4186-8226-3f27252a5012", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e073e66-28f8-49af-affd-91778dae4bbd", "sighting_of_ref": "indicator--c8c374d3-1aa8-4a2d-bc13-98566a006544", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf147ed6-1cd1-454e-ab76-56b5c402253f", "sighting_of_ref": "indicator--69423ae7-8db7-4141-a07e-8b8fa66a3957", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6304964b-b8aa-4285-b52a-70cc98624c1c", "sighting_of_ref": "indicator--833ceb92-294a-4b96-b4a1-382e15d85100", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35559fdd-53ee-4047-8770-c6f690053b95", "sighting_of_ref": "indicator--833ceb92-294a-4b96-b4a1-382e15d85100", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29b1067-bb04-4e86-9eec-74be88764eac", "sighting_of_ref": "indicator--c32a8256-1a1c-4254-a6e4-b25e9a05b40e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0363e0-94eb-4c10-9329-8faae09b4276", "sighting_of_ref": "indicator--164e719e-2e4f-4719-a02d-0db201ccd120", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f62a1ce-d8c4-4ba7-8840-3c5f24511a99", "sighting_of_ref": "indicator--d592b125-314a-49b1-ad1a-c4eeeb4f2ab0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e92e8a-9898-469d-b0a9-3f6251c33809", "sighting_of_ref": "indicator--7cc6639c-949b-40c5-8874-3d5b2fa42737", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce721f7-5750-4024-9836-a798239f6fad", "sighting_of_ref": "indicator--7cc6639c-949b-40c5-8874-3d5b2fa42737", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06abefcc-ea70-4292-8a00-59b4217e9c34", "sighting_of_ref": "indicator--0df62433-51b4-44fc-8edb-3c5f394f6fe7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca8fe3a-16ce-4e21-b5dd-00a4a2ca1f50", "sighting_of_ref": "indicator--3383c230-3715-40ba-a266-ba2aed088463", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d82ee-1f0a-483f-b2f3-c3524742ef8d", "sighting_of_ref": "indicator--3383c230-3715-40ba-a266-ba2aed088463", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12babd74-41bf-4ac4-b38f-50d0b65400da", "sighting_of_ref": "indicator--37cc7b37-ac37-4316-9574-7ed01c3ec9c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525a35b8-b15c-475f-a7ba-ef59a5bf1054", "sighting_of_ref": "indicator--d5de7856-cbcc-486c-9540-0cd45a71b192", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e88dc-f6f5-46f7-b8fe-13223afd2ad6", "sighting_of_ref": "indicator--9a70aecb-9c78-4722-a058-c58baed8a309", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a274923c-284c-4a71-949f-2567e248b968", "sighting_of_ref": "indicator--2b2c8d28-f8c4-4b2d-ae3c-ce0432031711", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a04f3d-9632-4a56-9675-fc5973b281b6", "sighting_of_ref": "indicator--38397a92-e20a-443b-9f06-9f36828976ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d1fb6-b169-4e7d-b47b-14c0952e906b", "sighting_of_ref": "indicator--14ba7ab5-32b9-4026-bb10-d2aca1b80496", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f38de8a-ebf4-40ae-b68b-d510e9ae2792", "sighting_of_ref": "indicator--14ba7ab5-32b9-4026-bb10-d2aca1b80496", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b7870f-f497-472a-afc5-f9e3faf2492d", "sighting_of_ref": "indicator--3d22a0b9-9c0b-4986-94a3-c6f5a655efb9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00fc293-9b59-4000-9393-fabc9eeb5838", "sighting_of_ref": "indicator--3d22a0b9-9c0b-4986-94a3-c6f5a655efb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99d2e52-abb2-49cd-9b81-208addaa7198", "sighting_of_ref": "indicator--efc6ef0a-9195-4566-b5ae-a17d583d4da4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac4221d-c6c0-4781-a727-c1b03e6111b3", "sighting_of_ref": "indicator--0b758661-1167-4a70-ada5-efa41569346d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb36596-9c6e-4955-b2be-5315cf613039", "sighting_of_ref": "indicator--c73569ba-9841-45ab-b249-f4a0ac156be0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8afeee-74f8-44ec-a7e6-3bd45a810bad", "sighting_of_ref": "indicator--273411b8-3fd0-426f-8d27-1ca8a3c26d28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d2481f-d951-445b-9c4c-ce9e2fc5e43d", "sighting_of_ref": "indicator--c09ceb71-0b0a-4223-935a-cd012df6dde5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8df37f1-7a78-4f65-a4d9-d8ad14962bd4", "sighting_of_ref": "indicator--e6b21a4a-b4a6-4d11-88a9-86b66af12382", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d82c74-de7c-42c8-98dd-f749b7177621", "sighting_of_ref": "indicator--e6b21a4a-b4a6-4d11-88a9-86b66af12382", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e869ac5d-34c4-4874-ae40-1e00c2c00364", "sighting_of_ref": "indicator--c9fe1c24-be65-43c3-a1c7-e3c2bb301f95", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768ec4db-b7ca-45f6-ae3a-c2094f931181", "sighting_of_ref": "indicator--221e2614-4c45-40f2-ba59-a711267c7687", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b8b60-9120-42e6-8bac-20ae63484a62", "sighting_of_ref": "indicator--1c5a5efd-8e3e-4f42-968c-a7ee6207f4a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543e6485-fd92-4c52-824c-56cab8f8efbe", "sighting_of_ref": "indicator--c8896ab1-aba8-4a77-b46c-cf5130a66742", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc7325d-21ef-4f00-8d6c-f3a1652aad36", "sighting_of_ref": "indicator--5bbb7bbf-3d63-4f49-a62a-b78c71880cae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec2392d-d86c-4b85-9049-2a10939954b5", "sighting_of_ref": "indicator--5bbb7bbf-3d63-4f49-a62a-b78c71880cae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d44fe5-9d48-449f-af23-eb442407251c", "sighting_of_ref": "indicator--7c0727ff-6033-40a2-ac54-d1983837392f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bf79aa-0554-41f2-ad48-730a8fc91dbb", "sighting_of_ref": "indicator--c3ceb2ce-37f6-467f-bcb8-ec5c9e627290", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da9a0ab-8e18-4aac-a33d-b8aa215afc0e", "sighting_of_ref": "indicator--608b73f5-201d-4ccf-8e38-d0ec87cba1d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5cd452-a629-4065-a125-cdfd665f264a", "sighting_of_ref": "indicator--8c17edff-92b9-426d-b280-52da56a194c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57597abe-3721-45ae-8f0a-59755542c716", "sighting_of_ref": "indicator--2ace6113-9a70-43bf-b3a2-652a606f48e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c76a6-5eed-43c5-bcf4-d1954fdcf547", "sighting_of_ref": "indicator--8fd2fdb4-2925-4955-bcc5-5711f4b90fe4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84030c6-37fe-4921-b430-3bdce2c3f5bd", "sighting_of_ref": "indicator--f45cbe62-0824-48ac-b624-7de8c2356600", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f6c02c-a618-468b-aef1-e14fd2621e9e", "sighting_of_ref": "indicator--f45cbe62-0824-48ac-b624-7de8c2356600", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e67a3ee-696a-4d47-863e-38fe8fd9a587", "sighting_of_ref": "indicator--8b3dba9a-8ce5-465c-9bed-6dbb7bed0857", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5811f162-51a3-4dd9-bac7-12c35951ca2e", "sighting_of_ref": "indicator--03dbe76b-43fd-4b75-a732-7150c4f18939", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f50243-bf07-443d-9331-03f9d061a9b3", "sighting_of_ref": "indicator--03dbe76b-43fd-4b75-a732-7150c4f18939", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7769a1-5d76-4665-a176-7c333e47254f", "sighting_of_ref": "indicator--abcd3c9d-3d08-407e-bf92-a3cba818f372", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8714551-e2d4-49b9-a99e-f1e4a86e27c1", "sighting_of_ref": "indicator--d4f78de5-a3c2-47d2-9cb8-e2fe7f43bf74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df1e338-b340-43a3-a802-ea1f60134f31", "sighting_of_ref": "indicator--d29fda79-5502-42b8-9f77-2f7129a030b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90d5efe-06b5-45df-b168-e6020fd7bafe", "sighting_of_ref": "indicator--8a80d231-701f-4a98-9a5d-6dbddb7aeb36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c890a41-343a-446f-822e-d9d6ad0881a4", "sighting_of_ref": "indicator--8a80d231-701f-4a98-9a5d-6dbddb7aeb36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a025cf2-037b-4ec4-8204-07f5173d2b86", "sighting_of_ref": "indicator--2c86519f-001d-4cd4-90ba-f727dc9b1478", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36374f3-5079-4103-a03e-260c56411778", "sighting_of_ref": "indicator--c6140680-2029-4f97-9f44-bd2c1716cb8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8153f432-853a-4632-bc96-db46f5308da2", "sighting_of_ref": "indicator--616ad43a-5e6e-4d16-bfd3-5fbaa4022af9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2681a876-34c4-41ef-b78d-dcf010a410e7", "sighting_of_ref": "indicator--0149ea50-549f-4288-a9a1-322e569ed4d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60799d26-9013-4c5e-a189-e61587fd98f4", "sighting_of_ref": "indicator--dd91d882-e7b7-4cec-a1fb-f7f935bb1463", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9744235-4a2a-47a7-91d3-94b691093dc7", "sighting_of_ref": "indicator--70dc516c-f663-4fd0-ade2-d44954f7f30f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a366f6a4-4855-4b58-9267-6465b4c4a80b", "sighting_of_ref": "indicator--ea8968ec-5ed6-455d-a5c5-27207b9d76b6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8750b01d-6167-4d5c-8887-9efcc1d11afa", "sighting_of_ref": "indicator--66dfea67-d392-43c7-9dd1-d7d42e3a28f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d3a749-e7fd-4de5-913a-2c8cd6c4945c", "sighting_of_ref": "indicator--d5eb5e7d-ab67-4be9-a282-1b848f2ad67a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec36c34-ee5a-40b5-be75-2fc4efc7db3e", "sighting_of_ref": "indicator--328a6571-c4dd-424a-ad11-5a73f1c93647", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d403e5e-3390-4ab4-b5c0-b4672cc873b3", "sighting_of_ref": "indicator--328a6571-c4dd-424a-ad11-5a73f1c93647", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28739a7-9bac-4f21-876d-dfb5c6f973ef", "sighting_of_ref": "indicator--57b13eba-d168-4b4b-9045-d76c987d0886", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e299fd-3a3b-4fd1-ac10-8503b75e21c6", "sighting_of_ref": "indicator--690e54fc-9fb3-4076-b6f4-d55813465eed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8595320-0192-4658-9b3a-b0b73b91974d", "sighting_of_ref": "indicator--690e54fc-9fb3-4076-b6f4-d55813465eed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787a435b-ac82-416d-820e-44189f2392ac", "sighting_of_ref": "indicator--eac246db-e75c-4167-839e-cf1a663d2495", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6408fc-2b16-40d1-ab6d-720066941b3d", "sighting_of_ref": "indicator--6e20eeaa-44f5-4d6e-beac-f6536147131d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612519fc-f95e-4d94-bc98-0b09ccc06474", "sighting_of_ref": "indicator--6e20eeaa-44f5-4d6e-beac-f6536147131d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff8e17d-5cb9-4996-9f7b-02ff3ee44228", "sighting_of_ref": "indicator--99ee16f5-f272-422b-bb4e-592121c2415b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ea3358-b5cf-48c4-b157-add5dc02ebd9", "sighting_of_ref": "indicator--c80dc0d8-4d41-4a2f-9d93-538dbffadccb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34969ced-1c51-410c-9d04-dd0c6219b9c4", "sighting_of_ref": "indicator--7b6255ff-a640-473a-a519-ea6310509948", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b62a1d-ed26-4021-94d8-c655e9e87821", "sighting_of_ref": "indicator--2dd94f58-ae3b-4b10-9ac9-56400b71ef0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a010c80a-9445-4c62-951b-80630c74043d", "sighting_of_ref": "indicator--b0d7fb64-c77e-4c5d-ab25-14064066c2f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b48a46-916e-4c19-870e-de32e45a3a3a", "sighting_of_ref": "indicator--60a97a57-1c58-43ad-b774-44e8ef76c07c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd8506-6aa7-4fe5-abab-4d96f8e87d64", "sighting_of_ref": "indicator--60a97a57-1c58-43ad-b774-44e8ef76c07c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dc02ea-7f9b-4bed-bc49-b03306ba1093", "sighting_of_ref": "indicator--c1ea164c-8adc-4d64-a5ae-74f9e0606a1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e21feb-32a0-47c0-8a26-5b9f98971127", "sighting_of_ref": "indicator--6a7a8602-7b3d-4b86-874b-1b82d4f7270e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18870fa8-15c7-4b3b-994c-43d4ebede638", "sighting_of_ref": "indicator--5e03c5ec-37b7-494b-a968-0f7643193ebc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9476cf-698d-4cf4-ad76-28304c899a74", "sighting_of_ref": "indicator--72cb9e4d-d604-48e0-be15-07e51dc745e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5fc089-dee1-448f-8b8a-ecd6475a7be7", "sighting_of_ref": "indicator--06cf6d26-8e84-4778-b45c-f9c9cec5e5c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be1d860-f4e2-45fa-926c-aa035c373b78", "sighting_of_ref": "indicator--e49e005c-c3f7-4c86-8e69-21e470449223", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a4b1fd-2629-45fa-a53f-3b589f15463e", "sighting_of_ref": "indicator--3a5bce94-c8e0-4886-ac4e-89a273da1897", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2394caf2-7621-4510-940c-c6f4ea9ed2c4", "sighting_of_ref": "indicator--47414440-3c49-4f36-a4ed-027acc0c0b71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8192389-bbb6-4661-9ab7-717bdc58b3ed", "sighting_of_ref": "indicator--47414440-3c49-4f36-a4ed-027acc0c0b71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d8a989-4f0e-4883-8d61-93ef9200f189", "sighting_of_ref": "indicator--37efee37-7153-4c2c-b886-fc3a65d7c227", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0159c2-867a-4085-bf99-f6be67683ef4", "sighting_of_ref": "indicator--e2db17b0-c5ad-4912-b3c7-61d0a5e44c2a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c892fe98-3a06-418c-a04b-c1d8beab287a", "sighting_of_ref": "indicator--46432d0e-c138-49cc-9d5d-66153a5f9539", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c7a114-bd40-48bf-8740-8383fc59e102", "sighting_of_ref": "indicator--8e4bf084-0aad-4a01-bf05-c00b27e429a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddea6d1-1e6e-4bd6-84b0-1fb0e8cbeccb", "sighting_of_ref": "indicator--5c3d52e5-cf39-4d5a-901f-49c437eeece4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87405015-8ea4-4a48-88bd-5c78627b06f1", "sighting_of_ref": "indicator--5c3d52e5-cf39-4d5a-901f-49c437eeece4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780a4e50-9748-4ef7-9a6b-65d3a65564c8", "sighting_of_ref": "indicator--1af98bbf-45a4-4f9f-802a-a0a33ccdda48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0053bcc5-f72f-41a8-80c7-25f0ca290dbc", "sighting_of_ref": "indicator--64032cde-f852-4bb4-8191-549e3f6be428", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e2e88b-fd4d-4339-8171-a52c7f1394e9", "sighting_of_ref": "indicator--64032cde-f852-4bb4-8191-549e3f6be428", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b38c60-ed1a-4018-b268-2fdcf264029c", "sighting_of_ref": "indicator--ec57a1fe-2737-4d67-ac82-7bf04bca774b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b14919-5909-41ac-b2bf-70efed045ff5", "sighting_of_ref": "indicator--ec57a1fe-2737-4d67-ac82-7bf04bca774b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e890796e-fe99-4113-9d2f-9b0e3e69f111", "sighting_of_ref": "indicator--cec9904b-1b2c-49e5-a19f-3219a08a8551", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffca36c-3499-472e-8da5-ee7ade35aed3", "sighting_of_ref": "indicator--cec9904b-1b2c-49e5-a19f-3219a08a8551", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80697ed-39c3-4c56-a010-36bd8c37e476", "sighting_of_ref": "indicator--133f77f6-ec0f-496e-9e2e-a92c0fdb0487", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431a7fd3-5dd6-40ab-8d45-e30d63985aab", "sighting_of_ref": "indicator--ab77dfb4-bb37-4a9b-95d8-93eb7d7d11cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4471edd2-4c09-45fb-89f1-88b14cd1a4e1", "sighting_of_ref": "indicator--d4c77969-3484-49bc-975b-0fa27d8ae0ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b0b4f-5633-433d-9ae1-6b363eeda58b", "sighting_of_ref": "indicator--18e6360a-977f-4f8d-a365-38f60e09c647", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71033348-f56e-4767-885b-541d5644216b", "sighting_of_ref": "indicator--18e6360a-977f-4f8d-a365-38f60e09c647", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c8867-15d8-45e4-8e24-f9c98b61f135", "sighting_of_ref": "indicator--12c30e90-fed8-423f-ad41-ec6e681cd6c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7596784b-e90a-4c79-904e-90291edc8ae2", "sighting_of_ref": "indicator--073abfb4-1a54-4fd9-bb17-076dde9a9e3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85516616-a523-428f-8d3e-44477b177c1c", "sighting_of_ref": "indicator--073abfb4-1a54-4fd9-bb17-076dde9a9e3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21793827-a437-4106-8c7f-733ef3305ef7", "sighting_of_ref": "indicator--9e3e9d45-691f-4093-a0d3-8227838a93de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1992d4-eba7-4172-a76c-debd0dd8ea7e", "sighting_of_ref": "indicator--67a4b464-9ea2-4511-b799-3bc82c88c71f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a167f7-1499-4484-a4b4-7adb6d58e454", "sighting_of_ref": "indicator--c675d5a1-eafc-4e1b-89b4-8668d2d7f505", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305eccd4-53d2-4317-9ded-c9f339498243", "sighting_of_ref": "indicator--91890fd4-f211-4456-8c32-7fc05a035287", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555f64f8-c851-4029-aa73-cd8a03ad0a98", "sighting_of_ref": "indicator--70baf771-5868-4ec2-b366-990b61c135af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0f199b-afbf-438a-acc3-6e8f9ccdc3a6", "sighting_of_ref": "indicator--8d4b578f-ce16-48cd-96d4-82655f335b86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff32825-3770-4371-805d-ae8d7f78b781", "sighting_of_ref": "indicator--8d4b578f-ce16-48cd-96d4-82655f335b86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e59816-264c-4712-9814-ef7c4167dd3d", "sighting_of_ref": "indicator--46f378a6-aa14-409c-90e2-2421a5cfbe5a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cace875-0f1b-4db2-988a-b9658580cd46", "sighting_of_ref": "indicator--bbc70e10-f7ab-4591-b77d-d7f4295e5e71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c2c213-7fcd-402c-b1aa-684ff31de0f8", "sighting_of_ref": "indicator--bbc70e10-f7ab-4591-b77d-d7f4295e5e71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c725d2de-25d6-4be2-84ba-510f690364c3", "sighting_of_ref": "indicator--8099abb4-bb53-4867-bcd4-69c804837c5c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfcedb7-6585-4ac1-9361-2728001d6eb4", "sighting_of_ref": "indicator--8099abb4-bb53-4867-bcd4-69c804837c5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccb39c9-c1ab-4133-bf39-1368ef161c97", "sighting_of_ref": "indicator--cb782bc3-0000-47ee-a883-b4268a928cd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0c1a43-bde7-49a1-bb9f-e3db87886319", "sighting_of_ref": "indicator--047729f8-c2af-4b2f-95cb-162f4303ecdb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd952f48-7d2c-4345-a3de-c2a41c355545", "sighting_of_ref": "indicator--7f6c0190-055e-4ebb-91c6-f6bb01080073", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ffe764-69ef-42ad-b83f-cc7852a72e5c", "sighting_of_ref": "indicator--94ba43a3-4c68-405a-98a4-2ccec6f865c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9b2f3f-213e-4066-aee2-c8ec30a76ee9", "sighting_of_ref": "indicator--94ba43a3-4c68-405a-98a4-2ccec6f865c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00dd1d8-25e0-40e7-aafc-d64421f93669", "sighting_of_ref": "indicator--3ed0d7ae-3e21-4c4a-902e-fab74dac65dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86f7520-48ff-48f1-b656-ffb4e4c7962c", "sighting_of_ref": "indicator--3a2e4f12-fcd7-4702-a0ba-8b277dd4cca8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1047081-4df6-4fe4-86cc-6224b85ff839", "sighting_of_ref": "indicator--d5929cc4-7e83-40da-bf55-a9eed3bc8667", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b10ae2c-dedc-4578-bb2c-c81727d3b438", "sighting_of_ref": "indicator--d5929cc4-7e83-40da-bf55-a9eed3bc8667", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ab241-35f2-4996-aec3-69b22ac3c147", "sighting_of_ref": "indicator--e56ac5ae-1345-41d9-9dca-8083177529cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8d43dd-bfa3-45f3-91c8-e5f5b127d9be", "sighting_of_ref": "indicator--1ea4aefe-72a9-4114-9e8e-cda84a55fc39", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a110e80e-f541-4fc0-8fd7-0e0a99ed9201", "sighting_of_ref": "indicator--e536fe02-8eb3-444c-9107-4adbefaeac1b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96acf6ac-8191-42ce-9713-d62fa8924669", "sighting_of_ref": "indicator--fdcd2015-aee9-4d8d-9b95-951c09b858cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ddad6d-1b81-4ef2-8bfd-c4270ceebb00", "sighting_of_ref": "indicator--fdcd2015-aee9-4d8d-9b95-951c09b858cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57a49d5-9272-458c-808a-b899c3bb1415", "sighting_of_ref": "indicator--1e9bd408-3c7d-4d5e-8681-d34e6b0e00d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d2593-6563-41a3-b81c-b6a7eda9d26e", "sighting_of_ref": "indicator--cf23fe7b-50f4-4fd4-9146-506fcc71372a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e47746-5eb4-4a0c-b75b-f10efc160d30", "sighting_of_ref": "indicator--1ece650f-5e3a-4f3a-bb49-89963fbe9025", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81aebaf8-ef56-4004-a0b2-9af415b64bb3", "sighting_of_ref": "indicator--1ece650f-5e3a-4f3a-bb49-89963fbe9025", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bd1915-e761-42fb-8629-acd1f980491a", "sighting_of_ref": "indicator--ce62f9fa-8fb3-44e5-936d-9ba097386099", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae164f4a-169e-45e7-b282-101192d0ba22", "sighting_of_ref": "indicator--dd8dd0ec-0a08-49f3-bcdd-ac3e630b2109", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82d7d6c-a877-4a94-869b-59e96316be3e", "sighting_of_ref": "indicator--dd8dd0ec-0a08-49f3-bcdd-ac3e630b2109", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29a222c-4638-4910-8fb7-42d46bd79440", "sighting_of_ref": "indicator--6280b61e-bf91-4199-b649-9e91322f96ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac45e07e-b963-4bb4-8110-1661778a992d", "sighting_of_ref": "indicator--6280b61e-bf91-4199-b649-9e91322f96ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2745226a-572c-4b4a-8d28-1958b8f331a3", "sighting_of_ref": "indicator--f03821ef-7397-4b8b-89a0-b356da4d083e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75fc16e-71d6-425c-bade-2e86d6361cc5", "sighting_of_ref": "indicator--f03821ef-7397-4b8b-89a0-b356da4d083e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d732ba-dca2-490d-9d8a-118df2965abd", "sighting_of_ref": "indicator--371d69d2-ed5b-4240-94a0-653950693222", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec1c519-6b6a-487f-b6ed-7776e18ef7a5", "sighting_of_ref": "indicator--371d69d2-ed5b-4240-94a0-653950693222", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b510a4-70d2-4493-9c9c-1720f7778b8c", "sighting_of_ref": "indicator--06f76dcd-9354-423a-a035-135ec1e5491c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87549f9-0016-4895-b65f-e68fde85c4cd", "sighting_of_ref": "indicator--06f76dcd-9354-423a-a035-135ec1e5491c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8b59d1-6454-4d6a-a8e4-c8b66bcc4662", "sighting_of_ref": "indicator--f8b65e90-a6ee-4ac3-a085-0477aef4c75d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc36c584-3d0c-46fc-a2e3-b4832a9f50f1", "sighting_of_ref": "indicator--6c0bcfec-c026-4efb-945c-5f837af08743", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee132394-1c78-4af8-8bab-209f8f22a317", "sighting_of_ref": "indicator--6c0bcfec-c026-4efb-945c-5f837af08743", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b826604-086b-4076-b852-420479c6a7f6", "sighting_of_ref": "indicator--810a3b90-acb5-45eb-b638-648f60504912", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e378e66e-0696-4618-9bae-d24c6a93490c", "sighting_of_ref": "indicator--810a3b90-acb5-45eb-b638-648f60504912", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e6caf8-7830-4493-98aa-0d5fd69757bc", "sighting_of_ref": "indicator--3d6abe3b-1c99-458b-9a25-ff5e7710b5c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32717e84-251f-4f32-94c7-360e9234547e", "sighting_of_ref": "indicator--27eb8e82-9989-49d9-b876-548a77667b73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d663407-3219-4532-8bde-5f775f09d161", "sighting_of_ref": "indicator--27eb8e82-9989-49d9-b876-548a77667b73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f674f3e-1c77-444c-b9ef-a8189a646836", "sighting_of_ref": "indicator--491f4c67-21aa-4959-810f-150a78cda789", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff15260-a94f-406a-8aac-0667608e427b", "sighting_of_ref": "indicator--e276d42d-e4cd-434b-b2e8-3b1050bc8646", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbd2aa7-942f-4064-a1ae-93041dcec3c2", "sighting_of_ref": "indicator--e276d42d-e4cd-434b-b2e8-3b1050bc8646", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce321557-0e35-47c4-8894-b3021f3177ff", "sighting_of_ref": "indicator--31ccc500-524a-4139-8714-fe156152048a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d507e15-7afd-4a77-9709-78499a2b439f", "sighting_of_ref": "indicator--ec94786c-008c-4a24-948f-719924662e1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dd7a57-867c-40a1-b7c7-0fb482c5ff6a", "sighting_of_ref": "indicator--6ea90295-bf12-496d-aedc-69640b17c391", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01cb36-5244-40c1-b3ce-2c36116e0dc3", "sighting_of_ref": "indicator--37924ed8-4cf9-43a1-b247-034bc47fe8d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271ec3a8-5ebf-4948-9bd2-70b0d90fc328", "sighting_of_ref": "indicator--37924ed8-4cf9-43a1-b247-034bc47fe8d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9354166-ceac-4703-a592-4b25c4135279", "sighting_of_ref": "indicator--cf64bb4f-6676-4fea-a8e7-bdb37406882b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37291161-e13d-4e49-8d01-b737f4da1644", "sighting_of_ref": "indicator--3232fbcc-565b-4c6e-a517-ee78418f41c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63178fac-843b-4ea6-8dad-24e6e84a5b08", "sighting_of_ref": "indicator--ae454e12-54b9-4dfa-bc60-40c07a0c6382", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ade22c-2a92-438c-b26a-79cdce9f3b52", "sighting_of_ref": "indicator--ae454e12-54b9-4dfa-bc60-40c07a0c6382", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f2c123-5dab-44ae-b046-9fa1c13c5b47", "sighting_of_ref": "indicator--a4a893d6-9e41-4ff7-b061-8b05be85c57e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343f894d-8265-4124-8fd9-7e9805c39b3f", "sighting_of_ref": "indicator--a4a893d6-9e41-4ff7-b061-8b05be85c57e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a608767-9fbe-4f2b-87db-b806e656efe5", "sighting_of_ref": "indicator--dc1dadc8-26ba-4a94-b6ae-a16400653431", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6661ca-3de9-40eb-bcd9-e50dd848a88f", "sighting_of_ref": "indicator--af2fb8de-2eef-454e-bdd7-53576069b8d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bc1c61-1172-4fae-84cf-b74c432f8ded", "sighting_of_ref": "indicator--9c455e05-ed24-456d-9b01-b52bd236efe4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceafe3a-e157-4a6f-b628-24eeb1f6d588", "sighting_of_ref": "indicator--c6d46c95-cf2b-44ae-ac38-d072f4cc70bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f721ff7-7fae-4368-8d67-cf35b0916533", "sighting_of_ref": "indicator--c6d46c95-cf2b-44ae-ac38-d072f4cc70bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c73fea-a0cf-4174-819f-e23a143c8963", "sighting_of_ref": "indicator--a3a0934b-e7e5-4f93-a3e4-3e77f9844480", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c449bbf9-6d0e-4bef-b0c3-a886a449bd94", "sighting_of_ref": "indicator--aaaa8f38-1f30-4bb2-a74f-f341565a6dfa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc5ba2a-f1b7-4431-a389-bb0a9a119c37", "sighting_of_ref": "indicator--6cda6f19-47e7-4c37-bd3e-67f7ad69c9ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0ee8cb-5f6e-4200-a709-1fa2fa77112c", "sighting_of_ref": "indicator--875c3a61-c823-434c-87a9-775ce9f9ab01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c47594-08f4-4b7a-b7d6-eef6fd07e5d0", "sighting_of_ref": "indicator--d7285dfc-8966-4129-a005-49be3d865911", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4d295a-d2ab-40f3-a958-64c683ec8ca1", "sighting_of_ref": "indicator--d7285dfc-8966-4129-a005-49be3d865911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98059082-1309-4a55-9621-14a8f9888841", "sighting_of_ref": "indicator--d7084d20-131f-422f-9f2d-f85421e8e46f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88be0d6b-d78f-436e-b41d-453979c6261b", "sighting_of_ref": "indicator--d7084d20-131f-422f-9f2d-f85421e8e46f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868b5f2c-fa19-4315-9cef-571d2d053d68", "sighting_of_ref": "indicator--7b0a43e9-c2b5-4588-972c-102dd2239328", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f45f6e-0cc7-472d-9e88-e08fb1790cd3", "sighting_of_ref": "indicator--7b0a43e9-c2b5-4588-972c-102dd2239328", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb42052-598f-41a0-a9a1-519135fad116", "sighting_of_ref": "indicator--bc0fd272-7cf0-48df-bf2b-36d7cff46ea9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e678e7-50f6-494e-aeb3-c341e51940a2", "sighting_of_ref": "indicator--bc0fd272-7cf0-48df-bf2b-36d7cff46ea9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0b4129-1802-4b1c-9b2b-7067d99a0985", "sighting_of_ref": "indicator--378c6c21-9bec-4115-b537-928d6b424b0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6e1b81-3267-4de9-9c3a-8bf6ab5e8253", "sighting_of_ref": "indicator--378c6c21-9bec-4115-b537-928d6b424b0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51012674-ab9b-465f-9489-3415a25c44ae", "sighting_of_ref": "indicator--ea507cc4-9725-47c7-8738-9bc48727c49e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27489bbe-9e4e-462d-af13-62f2acc53b8e", "sighting_of_ref": "indicator--ea507cc4-9725-47c7-8738-9bc48727c49e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d03670-c365-444e-890a-a0f9a76f7c24", "sighting_of_ref": "indicator--06e6e3ef-b8d7-41bb-9c74-d26ff905de3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4071156d-3084-451e-a16e-9fe1249cad9b", "sighting_of_ref": "indicator--b3b5fd82-6fd4-456d-8959-81878eb3f9b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9f4fdd-eaf8-4e13-8b90-99365a2812e1", "sighting_of_ref": "indicator--98fdc286-cde9-41c9-bec7-8bb6a1628277", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba40bab9-d7c7-438a-a189-a8f045279087", "sighting_of_ref": "indicator--98fdc286-cde9-41c9-bec7-8bb6a1628277", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46907dc2-145e-43e4-960b-92c15a9a44f0", "sighting_of_ref": "indicator--1d0f0a1a-d353-415a-a90b-4efc84a4e534", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7553ce1-d290-4572-b12f-d04b993f53f8", "sighting_of_ref": "indicator--dd60701f-2873-446a-9e3a-0bc0d8b9f91c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a003c5-68ec-4efa-8c40-dd1ceb953d29", "sighting_of_ref": "indicator--dd60701f-2873-446a-9e3a-0bc0d8b9f91c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5ca90b-3477-433f-b822-c7bb0e3c3a32", "sighting_of_ref": "indicator--1ca88c18-5012-4a2b-b711-fddecbedcb6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e364c2bf-c80d-4240-a011-35b118392c63", "sighting_of_ref": "indicator--d9d90265-b43f-4d85-9e06-e6b0d898292b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4722fa4c-7462-4ed4-bb4b-dd517d9fe82e", "sighting_of_ref": "indicator--615bebda-1cb0-4b0c-96a8-181425e869ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6180857b-54c3-4848-b348-ff1279c00970", "sighting_of_ref": "indicator--a12cf6e2-b6a7-40f0-a454-8be1ff612ae6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a7c94e-3975-4515-9ab0-9c604a99669f", "sighting_of_ref": "indicator--01d2a447-08a4-48bd-b738-311dd20780d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae27f54-9942-4537-9235-6ccf5d027555", "sighting_of_ref": "indicator--98690ebf-ca15-460e-b7d8-cc6d0b43bb8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614ad42-f360-4867-833c-5fb380924075", "sighting_of_ref": "indicator--98690ebf-ca15-460e-b7d8-cc6d0b43bb8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad9d78a-09b4-4b18-96fd-ca948d11535a", "sighting_of_ref": "indicator--6e1bc21e-493c-482b-87e8-b306ccee7fc4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78f5341-8825-4da6-bad9-dabcd1c86dfd", "sighting_of_ref": "indicator--360767d3-1617-4f11-8cbd-3ea643552803", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36259ab-9741-4973-8035-d72884b99afd", "sighting_of_ref": "indicator--360767d3-1617-4f11-8cbd-3ea643552803", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc19819-b1f5-4c58-810a-a161bc361646", "sighting_of_ref": "indicator--9f65ab35-5588-4eca-a63e-c6d1c7ef9e84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabfb2de-b6b1-4fd9-b81d-e4c90d73af83", "sighting_of_ref": "indicator--9f65ab35-5588-4eca-a63e-c6d1c7ef9e84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cc9884-e72d-484b-95e3-51be681d1f35", "sighting_of_ref": "indicator--d920efb7-cdfa-45a4-99cc-5f90947183f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f0d66d-c573-4dbc-9444-c7871000d5e7", "sighting_of_ref": "indicator--d920efb7-cdfa-45a4-99cc-5f90947183f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb2b014-dfda-4437-bd76-e1eed19509f2", "sighting_of_ref": "indicator--9b43a386-5a49-4348-9b00-fd63851b653e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259fd83d-559b-4c2f-b092-04be604ed500", "sighting_of_ref": "indicator--9b43a386-5a49-4348-9b00-fd63851b653e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e9dffc-ca52-4b94-bbeb-e4c8018006ac", "sighting_of_ref": "indicator--6eb2d93e-2f1f-437a-954d-ebffd2f93aaf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c071a9fe-5b2a-47dc-85cb-1be74ede8a2e", "sighting_of_ref": "indicator--b39757b3-cb27-412e-ae14-cded96796d00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f84e691-e7f8-44d2-9307-2ee14b690202", "sighting_of_ref": "indicator--a3749208-a533-45be-b812-6185165acd28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7690ca2-7a05-4cd5-bca4-6589bfb5686e", "sighting_of_ref": "indicator--9cdb4823-c367-48d3-a944-728c1867b38e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cfaf63-99a7-4336-915f-a2b1d1e637ed", "sighting_of_ref": "indicator--9cdb4823-c367-48d3-a944-728c1867b38e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f1b34-0584-4b8d-aae7-3e407fe71173", "sighting_of_ref": "indicator--aede7982-877d-4617-a221-d3b74ebedbd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932d3f3e-2507-41d5-9db7-14299d92c65c", "sighting_of_ref": "indicator--76ab8833-9471-47be-a21d-02296e4dba5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5449fe7d-aa03-41b2-91d4-1602751fb878", "sighting_of_ref": "indicator--3951d180-fc75-460e-80eb-7dcd9a672f51", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020a40bb-a3ed-478b-a249-2a0916bc821d", "sighting_of_ref": "indicator--3951d180-fc75-460e-80eb-7dcd9a672f51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73a820d-4174-4946-a055-eda0681f0e9e", "sighting_of_ref": "indicator--c14ca2fe-546a-46f6-a0d1-578bb81a649e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e27ea89-2beb-4af8-9a56-3d114c4fca1b", "sighting_of_ref": "indicator--02eb56ce-f9e2-4fc4-a428-83c6aa241ca0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8eeeb32-f28e-40be-b751-6d42d0df5add", "sighting_of_ref": "indicator--526dca26-c645-4809-990d-8995a810d176", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54b95ec-d59b-4773-9614-61042e679d3b", "sighting_of_ref": "indicator--526dca26-c645-4809-990d-8995a810d176", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5de25fa-19c2-49e6-be38-b4fc53bd7518", "sighting_of_ref": "indicator--9b76bd4d-3ce0-4217-a794-3a8b6e22dbaf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cf6b0a-ca19-475c-ae2b-e62a45e5f8f0", "sighting_of_ref": "indicator--1f208b50-51bb-4c61-becb-ca1d9854dc29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca2f886-8b15-4289-beee-4f59c8c2cb18", "sighting_of_ref": "indicator--89dc6be8-aae3-4c94-a764-223118d39b3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b97e3ba-2bfd-42eb-bac8-abe8343bb67e", "sighting_of_ref": "indicator--167f7829-4569-4813-8a8d-5a70a2b93913", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6052e99d-4178-4b53-89a7-a66e46be78a1", "sighting_of_ref": "indicator--11e751dd-8f20-4c8d-a3ad-b821beb1f4f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d857b570-1f80-4d1d-9431-c57a1d834d64", "sighting_of_ref": "indicator--ae95a721-537c-4803-86e8-4757c73cc4fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22cc2a9-3331-48bb-98e6-e3ddbe7ae146", "sighting_of_ref": "indicator--10cb3808-ca11-4da1-affc-7666a03a7655", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f3ff7f-d599-4359-b1e0-5380782ad039", "sighting_of_ref": "indicator--ebcf8d76-1eda-471d-aa6e-c12edfd499a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bd5c19-0a69-4973-8a4e-9fc506110bd4", "sighting_of_ref": "indicator--ebcf8d76-1eda-471d-aa6e-c12edfd499a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2b59dc-d92b-49bc-9360-ea063bf03069", "sighting_of_ref": "indicator--cd42b210-588e-4647-91e3-368c09a73a5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e91279-3817-4aac-aa98-7d83c13c15e6", "sighting_of_ref": "indicator--025b3954-982a-4a07-b6a7-48fd1ac57833", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19f0454-8b83-4fea-8126-8ddf64e33ef8", "sighting_of_ref": "indicator--29194895-75ab-4f20-885e-8874fbe45d99", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c784cbd0-7f4e-41d7-9300-4b55df38d0af", "sighting_of_ref": "indicator--29194895-75ab-4f20-885e-8874fbe45d99", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e8af7d-2803-48af-8c75-768c95d4b22c", "sighting_of_ref": "indicator--e182a465-d452-4353-a73c-15fc84547265", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177aa23c-ccb0-4f7a-93f2-2df9b839661d", "sighting_of_ref": "indicator--18c9fd95-be58-4c0a-8205-8efe9759922d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f858d686-1df6-4607-b274-31a31a5ed931", "sighting_of_ref": "indicator--e571041a-c2c0-42a0-81c9-97d5f163f642", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321d8889-0769-453e-8c27-0c47c2430740", "sighting_of_ref": "indicator--e571041a-c2c0-42a0-81c9-97d5f163f642", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f90aea1-057f-411b-b422-e3a1a552239b", "sighting_of_ref": "indicator--b82bc0a7-470b-44d1-875a-7041e3cc75e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c640e7-9000-443b-bf6e-57325f7bb476", "sighting_of_ref": "indicator--2b7a7f1b-1057-4ddd-a71a-e0982cdd752c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020c9f5d-c5df-4399-8fdb-d15c6ebf88a9", "sighting_of_ref": "indicator--2b7a7f1b-1057-4ddd-a71a-e0982cdd752c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7fc1f6-c8f4-4d1d-9d51-814df0366e04", "sighting_of_ref": "indicator--2b25d760-17ea-4f04-b1e4-ba92a17d99b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0561525-915f-4cc2-8561-35527c388dae", "sighting_of_ref": "indicator--ef122ee1-9606-42a7-8564-b29b96e1c282", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef83271-51f1-483f-b9b6-e2ae1b34ccfb", "sighting_of_ref": "indicator--ef122ee1-9606-42a7-8564-b29b96e1c282", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e2a5ac-95d0-4f16-bedb-23dc1ae40e38", "sighting_of_ref": "indicator--c4654a76-46ae-491b-a915-99fc1be694c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7ed03b-0ee1-471a-95f4-7e410569f35f", "sighting_of_ref": "indicator--cfbb5017-fee8-4100-845a-728585029dda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e51fff-2076-489e-bf95-3374eaab3ab2", "sighting_of_ref": "indicator--cfbb5017-fee8-4100-845a-728585029dda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e04651a-6a70-4b6b-b74f-7cbab54afa16", "sighting_of_ref": "indicator--08925654-bad2-4869-8485-5f5c4b90f007", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeb1320-83bf-4e23-ab88-acf53b6f270e", "sighting_of_ref": "indicator--0d4eb196-8c03-47fb-a759-33cec5c5cf84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feec66b-3d3f-4769-aca7-677b3cc8c7a3", "sighting_of_ref": "indicator--0d4eb196-8c03-47fb-a759-33cec5c5cf84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfada42-81b1-4725-ab97-9931028f8ee8", "sighting_of_ref": "indicator--5e8f89ca-2c2e-46cc-a48d-2119a33c829b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691e0bf5-f915-4c3f-bd2f-23dbeb4d9ed2", "sighting_of_ref": "indicator--5e8f89ca-2c2e-46cc-a48d-2119a33c829b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b69a4-c32c-4fa2-9834-8a37d1abef72", "sighting_of_ref": "indicator--a8de45e8-5bb1-4446-a4d9-4fd0af1e71b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91465014-9a51-4923-ac0e-3fa456260ee7", "sighting_of_ref": "indicator--a8de45e8-5bb1-4446-a4d9-4fd0af1e71b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5337bb54-4678-4e78-8af6-02357d587940", "sighting_of_ref": "indicator--c50e9ca4-6900-4d9a-8e0b-8c65b4c808f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b36b57-5640-4fa3-97d9-9cceefe39a01", "sighting_of_ref": "indicator--be66dc24-9db1-4927-a6d8-5c01f84fd9c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad66dcd-624f-44ce-bb90-cfef1ce357d0", "sighting_of_ref": "indicator--afc0d93a-0942-4f06-bf6a-bcb21947c4ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a20ad-1345-44a9-b2b3-9907cb376886", "sighting_of_ref": "indicator--67380697-721e-4f14-abea-c268225068a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aca692c-9b0a-49b1-8f30-99e9cc227843", "sighting_of_ref": "indicator--3a34d1f7-625c-4cc9-aea4-8ec6e2f9f523", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b332fd4-0a97-4d9c-b683-8f654f34cb4d", "sighting_of_ref": "indicator--9d872780-3812-46c9-a6a9-57f5f75f8aea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fef1924-b951-4093-82c8-4588225a2cc3", "sighting_of_ref": "indicator--b5906c1a-a458-45ba-a3a9-ff34296cdac1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898b3a50-b6cb-4ecd-9522-f6d68fe7ad24", "sighting_of_ref": "indicator--b5906c1a-a458-45ba-a3a9-ff34296cdac1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036871f1-b07e-4d80-a4b4-574051cd6698", "sighting_of_ref": "indicator--959f9d06-dc13-41ab-8fb6-9014e28e3745", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9363821-fb91-412b-af08-b6281144b4ad", "sighting_of_ref": "indicator--959f9d06-dc13-41ab-8fb6-9014e28e3745", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c71a05-3e3e-4f96-8760-265c04e6cca1", "sighting_of_ref": "indicator--dbb8ac02-32ec-438a-9fdd-6d432062362b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3841dc-bf2a-4d7b-bede-79de07909d68", "sighting_of_ref": "indicator--372fad6e-c7cf-4356-aa74-fbbf57228c72", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9a72b0-0c9d-4108-addd-9ef45ec3047a", "sighting_of_ref": "indicator--372fad6e-c7cf-4356-aa74-fbbf57228c72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f0db5c-fc49-4b8d-af0d-08ce2672c277", "sighting_of_ref": "indicator--dcbbc502-63f0-4b3a-9f44-aeaefcb09132", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2ee57c-ae76-4b21-8b3e-06a7ce14668c", "sighting_of_ref": "indicator--723eddc2-1142-4bbe-9f0c-23c2f021a8d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bbb4fc-c4ac-41ca-8d21-f903a45a8703", "sighting_of_ref": "indicator--723eddc2-1142-4bbe-9f0c-23c2f021a8d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4687c5-9f90-4a01-aa6e-45ec1a97d48f", "sighting_of_ref": "indicator--b1fc4b7c-b73e-483b-8c06-20db83106966", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a643d7-0447-4e2c-bb60-3929c7ca231a", "sighting_of_ref": "indicator--b684efd8-3b5f-4a5e-8668-555a174ddbc3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f091e16-511f-4dd2-9ff2-4b41d9e6d22d", "sighting_of_ref": "indicator--bc0411bc-e329-408b-92cc-f98a87d36aa6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb9ab4d-54f6-4422-992a-a07c757fb8f3", "sighting_of_ref": "indicator--d1f9fc88-2c46-4ada-83f1-42070dcdfb4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e0b717-a9f7-47bb-ab6d-2c5ba298790a", "sighting_of_ref": "indicator--03c0d04f-7e6e-4185-8956-2720b267e73b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1686dfae-8376-4921-8887-3b3bba97675e", "sighting_of_ref": "indicator--47bad482-5098-4620-9a7b-50b8b583997d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33af70f-060b-494f-ab78-a2450e82c26d", "sighting_of_ref": "indicator--384daa77-d6a7-43a8-b1f3-f80ec1d81373", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55190115-b738-4977-90bb-0373adb9e828", "sighting_of_ref": "indicator--384daa77-d6a7-43a8-b1f3-f80ec1d81373", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8bf1d5-c236-4103-a9c9-470c935a99a1", "sighting_of_ref": "indicator--bf17fde2-8d4a-464d-8222-6a8314d00013", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e12fb2b-19e9-4cc5-8e23-b05cb2e58f3d", "sighting_of_ref": "indicator--9d315cc0-2857-42f8-a45a-3850e79ac83d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e652d1f8-333c-42ca-8b00-2d48a99f161d", "sighting_of_ref": "indicator--7fd536b5-a31d-4c9e-a471-69cb4a82ca83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf4aa2c-4055-4798-9ea6-958b127a62c3", "sighting_of_ref": "indicator--a6742674-35f3-4b47-afa0-444c2ebe9b9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bfee22-b1e0-425e-b5eb-c8237ddde287", "sighting_of_ref": "indicator--a6742674-35f3-4b47-afa0-444c2ebe9b9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354ed8eb-08a9-4640-8d77-72c37a51bb34", "sighting_of_ref": "indicator--94070b4b-56be-4979-8fb2-48ae1defe1f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c69c3-2452-4e6c-a802-c2da75718321", "sighting_of_ref": "indicator--63850021-2517-4ce6-b8a2-481889f1f459", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf99a3de-46af-4d39-9cec-f6e986e12b96", "sighting_of_ref": "indicator--ae588bb1-b000-4e21-9583-b62095f72323", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b5418c-ad27-431a-ae88-ac9912870f80", "sighting_of_ref": "indicator--ae588bb1-b000-4e21-9583-b62095f72323", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e94949-038f-438c-8776-b05af32c93f7", "sighting_of_ref": "indicator--11498807-3cdf-4670-b4d5-a34a46052bb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3138d435-d995-4953-b2f5-5c85ef326986", "sighting_of_ref": "indicator--f639890d-99d0-43f6-8191-0c5d23a0ac96", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a712c617-61ce-4d96-a8f8-a8142c8376d5", "sighting_of_ref": "indicator--8a189611-d3f4-4828-9e22-7a1c31efdbe1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2375b7e9-0b35-4b61-93c8-6622009a7e10", "sighting_of_ref": "indicator--8a189611-d3f4-4828-9e22-7a1c31efdbe1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1ca505-0b97-4965-ac47-149675544e5f", "sighting_of_ref": "indicator--0d6bd050-76ee-417f-bb76-828784edaf1b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503a9b81-f2a6-4244-bc1b-8b72ce118f1e", "sighting_of_ref": "indicator--4b65de9f-5ff3-401c-825a-5057e1bbfd30", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3fd6b1-39c3-4edd-ba99-54000d392e2c", "sighting_of_ref": "indicator--81334031-dc03-46f2-8efe-3814e6c6f332", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed2949-139c-46b7-a604-dab9f28ee36a", "sighting_of_ref": "indicator--81334031-dc03-46f2-8efe-3814e6c6f332", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece8783e-be6e-46f2-9b41-78edf6b7132b", "sighting_of_ref": "indicator--4561fac1-743a-4e1a-be90-8b7f58d5689a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfdad2f-79c0-42e5-a9d3-c37c82bd2db1", "sighting_of_ref": "indicator--36225a07-744b-4443-a9d3-d4b11e5337e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6230c25-e185-4616-a24d-896510946a92", "sighting_of_ref": "indicator--7a783ad3-1684-4013-b474-c9f2d8a15e8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543f03a8-b3c6-45f2-a54c-31559c24b110", "sighting_of_ref": "indicator--7a783ad3-1684-4013-b474-c9f2d8a15e8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d2eb36-8c35-4453-99b8-831c7129e737", "sighting_of_ref": "indicator--b21001ef-535d-46cc-be3c-007fdd8ca8db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1706d1-8ee5-44ca-a5fe-b9b86675435a", "sighting_of_ref": "indicator--82bc8461-3263-4060-8457-8cad7f7d714d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5780fda4-d7a1-493a-9032-8bbe10fabdf9", "sighting_of_ref": "indicator--a94df3ab-dae3-4ce5-9587-02be650ad445", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e2e3ad-4069-4350-b056-ba173adee119", "sighting_of_ref": "indicator--f8e3ad09-8b1a-4fe7-b144-150bb76d9078", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf8883d-d03a-4920-998d-63704eea026d", "sighting_of_ref": "indicator--bb17a5bd-652f-4bd9-8222-669373790233", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3140b5fa-3768-451d-892a-e32a760ceadc", "sighting_of_ref": "indicator--c42c4efe-13ff-47e8-a3cc-dc38c55b5a11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d552e34d-de2d-4f7a-8a57-3c0b546bcd7a", "sighting_of_ref": "indicator--c594a188-f87e-4b94-912d-583887ffdc3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c5566d-aa2a-4640-81ec-995363aa7ff9", "sighting_of_ref": "indicator--de1777e4-28b2-44ed-bc7a-1ce2a1bb7767", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56bd23f-377f-4c12-840f-76de7d3340d1", "sighting_of_ref": "indicator--de1777e4-28b2-44ed-bc7a-1ce2a1bb7767", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f66051b-71c7-4c0a-a4be-8cdae551f9f1", "sighting_of_ref": "indicator--0ff1dec3-d9db-4d8a-aa43-9daedd05186f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be95d3f0-9b83-4f69-800f-d44efab861bb", "sighting_of_ref": "indicator--0ff1dec3-d9db-4d8a-aa43-9daedd05186f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9a3e3f-aa05-4589-8253-70a57061acd5", "sighting_of_ref": "indicator--632acbed-0ebe-43a3-9361-2836b33710d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d72bcae-ab06-4537-93f6-40ef721abed5", "sighting_of_ref": "indicator--a5f57997-b681-4453-91cc-6369b6773aa6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09a2142-433a-48a6-8d19-bcf1068642ff", "sighting_of_ref": "indicator--e3a64ebb-1722-4a91-a8f2-6c9950f6f438", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9535243-092f-4a9f-b75e-8a662f896302", "sighting_of_ref": "indicator--09b1f153-e3b8-482b-bc16-d1d102ea235f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704eeccd-d821-406a-95fb-01ee4d9aeb3c", "sighting_of_ref": "indicator--09b1c8f9-ac6d-4871-9003-8177c4d7ae25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c86d2d0-75ae-4d2e-a6c1-f6cbf7be7482", "sighting_of_ref": "indicator--8de53554-0b0a-4003-a46d-9f152881cd93", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64964246-9d49-406a-a788-b836a05cd50f", "sighting_of_ref": "indicator--360ff417-44ab-439b-b3ee-eb0abc6cc7e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0434238-075f-447f-890d-4470750e1a8a", "sighting_of_ref": "indicator--52649f20-a82a-4036-8426-6fa0d9c3b3f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f03900-4756-4ddc-a965-6191488eac70", "sighting_of_ref": "indicator--fba4b78d-ee0a-4f03-875c-31b55bcc7eea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74d83a2-6fbc-46b8-b4c2-3ff820705ec4", "sighting_of_ref": "indicator--b2cb9a04-7c1f-49f2-8f5b-6e6634f66cb2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df53dee9-25c4-4088-8b14-2f965952efad", "sighting_of_ref": "indicator--db0c31e8-f174-44cf-94d2-26b9268e2bb1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a616aa2-1c2c-41ad-8a88-d8f73271b388", "sighting_of_ref": "indicator--92d32770-1e29-4cea-b4ba-8bfd2d1461b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8642f55-6fe5-40d5-af34-f8115b2d0908", "sighting_of_ref": "indicator--ebef4d46-4341-4eb3-8cdf-981f8bd326b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aa0adb-354b-4cba-8318-0a8c9a9f0a5f", "sighting_of_ref": "indicator--525cbfb1-1307-4cf2-b931-886ac0e98b7a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f40da52-c3cf-4ec3-8a57-d93dc327f395", "sighting_of_ref": "indicator--3d151989-7d62-4bf9-918b-2735aca92ed4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea3f089-7856-4cd2-962f-4c988f042efd", "sighting_of_ref": "indicator--dcd5e23f-4166-4a2a-9506-25941764b2bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38229200-cd4a-4b14-83b3-2fa1c7dfcebd", "sighting_of_ref": "indicator--fd6791e8-f84c-4cff-9fcc-7463652ed8cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ba2449-b995-4164-9a46-9d9a02f75cc5", "sighting_of_ref": "indicator--fd6791e8-f84c-4cff-9fcc-7463652ed8cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a13744-c6cc-4550-b577-d7b76e8f8a07", "sighting_of_ref": "indicator--051eaab3-0100-484a-b194-b70d9a328d0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602ebb7a-a9d9-46a2-9e6a-56170e593ec9", "sighting_of_ref": "indicator--b485d902-3ebb-477f-b74d-c54aa8fff3e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5490caa6-226c-445d-9d09-cb7dbb009e46", "sighting_of_ref": "indicator--b485d902-3ebb-477f-b74d-c54aa8fff3e2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e9348c-c288-4bfd-8112-1a64d271ea73", "sighting_of_ref": "indicator--1c0ba3f5-51bc-43ee-92c9-4dcbf83d061d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b525cfbc-90ff-4850-843a-fd790305f80a", "sighting_of_ref": "indicator--1c0ba3f5-51bc-43ee-92c9-4dcbf83d061d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adb2081-ef43-442a-895c-840b4fdfbaad", "sighting_of_ref": "indicator--ee22574f-4497-4ac0-a4a3-5ffd1f5fad27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaf60e0-a491-4a8c-a491-e1f1e6f96f7a", "sighting_of_ref": "indicator--bdf66543-76c2-4b61-bc17-b53ce7a6abad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb60790-f3f5-4fb4-83c1-8ba4f01e7897", "sighting_of_ref": "indicator--a2ebd815-4b33-4f5f-82a4-ed578b1cabfc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ae98f0-3f39-4ad7-968b-5e9589911c8b", "sighting_of_ref": "indicator--ce59b631-7d8d-41b9-9670-49f01ac7b307", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0012d88-e8f8-4bd0-aedc-5956c11fd72f", "sighting_of_ref": "indicator--33e7c645-4b36-48b2-828a-761ef0cc98ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a575fdb-6c3a-49fa-99cd-dc3cc1651b34", "sighting_of_ref": "indicator--a096f1d8-6790-4a2c-a8a2-9922ca946b4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43241d62-8baa-4838-8311-f7deabdaaaab", "sighting_of_ref": "indicator--a096f1d8-6790-4a2c-a8a2-9922ca946b4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bfcb7f-1b19-4a28-8b24-dc4783c2da96", "sighting_of_ref": "indicator--7385475c-0a6f-4514-846e-51c1a5df2143", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f13ed71-3dca-4e13-ba6b-aec55ae8a62a", "sighting_of_ref": "indicator--7385475c-0a6f-4514-846e-51c1a5df2143", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e84695e-1445-45f8-958c-b626d068bb80", "sighting_of_ref": "indicator--9182230d-9f95-496d-832e-4cfd8637f583", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a05dba-698f-4dae-920a-133a9eaed88b", "sighting_of_ref": "indicator--5e8234bd-aa91-44fa-81c4-2c6baebfd787", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df412fd-8da7-410b-8924-e4fd572d16c8", "sighting_of_ref": "indicator--5e8234bd-aa91-44fa-81c4-2c6baebfd787", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe57215d-080b-47d8-b01f-36a1e47175f8", "sighting_of_ref": "indicator--ffcbbd32-740f-49b2-ac62-a89257b75338", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d663afa-5c78-42b6-a7ef-604ce7fb3377", "sighting_of_ref": "indicator--f2b14c1c-1ee2-408a-8ab5-1074818d11a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7a8e2-b431-484d-949f-46b75266b7eb", "sighting_of_ref": "indicator--4910d295-7481-4a38-93d2-384514177c91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3abfb3-d07b-4f42-8367-fb0515d95d80", "sighting_of_ref": "indicator--694c2858-3ef9-4ae8-9ceb-5f251439aa16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b294b0a-da46-4cc8-accf-5aac51f7e5da", "sighting_of_ref": "indicator--0353977b-36ff-41d1-911b-eeb1b6cb9cf8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c25156c-55f0-42fb-b923-20ecde72c095", "sighting_of_ref": "indicator--a1ab9c2a-aea2-4ce5-8055-127475fd4693", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77516271-22db-4198-ab6c-5abc54cb7e8c", "sighting_of_ref": "indicator--a1ab9c2a-aea2-4ce5-8055-127475fd4693", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bafb204-338a-4895-8eca-f25a50ec5465", "sighting_of_ref": "indicator--0b0c0c29-d50f-48b6-a273-3650b4ed2f4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c18da66-ca54-4a0e-9ba2-835159e45b3d", "sighting_of_ref": "indicator--e197532c-62de-4c14-91fe-46581a86355e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7705702-97bc-4d56-b31b-fcbe985dbeec", "sighting_of_ref": "indicator--e218ee33-d9ae-4744-a3a1-704e42fbaedc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6488866-09f2-4a1c-a586-7e24b94da3ab", "sighting_of_ref": "indicator--e218ee33-d9ae-4744-a3a1-704e42fbaedc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8466c8bc-f517-458b-adce-21e861c5e375", "sighting_of_ref": "indicator--f4f8a388-7939-4577-939a-0c8f65f33285", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef3fc4d-16cb-4e05-ab00-4c77c55fc2ac", "sighting_of_ref": "indicator--90b8a56c-a30b-40fd-83ba-d9e21bb64b05", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2017bec-f3ee-48eb-a5e2-f65fcf5d9c5f", "sighting_of_ref": "indicator--12c776b1-8dbb-4b58-888f-381b27e3daac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79f6ed9-8bf6-4875-88fe-1868660c9ecb", "sighting_of_ref": "indicator--12c776b1-8dbb-4b58-888f-381b27e3daac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c8ceaf-5dd4-47fe-8092-0673c1851f60", "sighting_of_ref": "indicator--1a861f72-fc27-4d13-b915-4b0c2c74fdf0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e81f06-f00c-45e5-ac79-2ab768e8ac5e", "sighting_of_ref": "indicator--fc21dfc0-e8a1-494e-8cee-41b912166a6e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7561758b-1f82-4735-af1f-a604ce93c6c3", "sighting_of_ref": "indicator--fc21dfc0-e8a1-494e-8cee-41b912166a6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe6d27b-0e6a-4a88-9a62-c08dd5544cdc", "sighting_of_ref": "indicator--c20098ae-e352-4434-845e-ffd7e93cb923", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da1a871-4b14-48ee-8721-0b16096e0ba1", "sighting_of_ref": "indicator--c20098ae-e352-4434-845e-ffd7e93cb923", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca6a3ea-61a1-45d4-acba-6d29e1d30fec", "sighting_of_ref": "indicator--531f1186-4692-4f8b-b658-13d78cf49d59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76245bd6-9902-4272-a1f6-a0d34528e2b7", "sighting_of_ref": "indicator--a4f6e1f7-8a3f-4fce-810e-2fa2150886ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46847186-2ea1-4217-8817-61ad377a1628", "sighting_of_ref": "indicator--a4f6e1f7-8a3f-4fce-810e-2fa2150886ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929a5f73-9f02-4039-9a69-b861d000f1c0", "sighting_of_ref": "indicator--9a0e229f-569d-4a62-a456-5fcf60519c8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0d7eb-fcaa-49bc-9cce-6252e25ccb1b", "sighting_of_ref": "indicator--485f083d-491a-4289-b723-73beb37dcd6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e62f7b-218f-412c-bdd5-69723f77c8f9", "sighting_of_ref": "indicator--4ddcf60a-2b91-43c3-bf82-bebd31c7c33f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ef024-3f74-48aa-bd05-934ab033c7fb", "sighting_of_ref": "indicator--a2580a02-2871-434f-a5f7-327706bec881", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a29d5-54f8-4e96-b63b-f988b5c184e8", "sighting_of_ref": "indicator--a2580a02-2871-434f-a5f7-327706bec881", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf61231-955f-4326-a2d3-a25b7d2bea08", "sighting_of_ref": "indicator--598a4100-6df5-42b9-880f-3f4961b1796d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a522fa47-4ae0-452e-b7ca-15e452e20f8d", "sighting_of_ref": "indicator--7bb66e1a-ba8a-4fad-9a0b-a15dd5366afb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e0068c-1deb-4606-bf0a-cd021ca4ef5b", "sighting_of_ref": "indicator--ec5dfc87-2428-4453-8f36-416edc3b4d2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc07051-54f6-4863-bc30-d16327ad54d2", "sighting_of_ref": "indicator--24dd8ad8-ee79-46b2-8c98-ecd2eb932262", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ac69ca-1705-4d09-a8de-1181fb350956", "sighting_of_ref": "indicator--56c10c40-e323-4986-aee0-774173bef040", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c3af82-71d0-43b8-852b-d9aada912865", "sighting_of_ref": "indicator--fd628ef5-411c-4878-9f8a-dc16ff12d9b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b53c0c-66b6-4335-a7ac-e85071c87cdb", "sighting_of_ref": "indicator--a7db655c-ec8e-414d-a2ed-51ca85680434", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa7ce8f-c56e-492b-8737-ca5da5bf9754", "sighting_of_ref": "indicator--b99957a1-2689-42b6-ab25-781669c20abb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c95f3b6-4004-400e-b08c-4e47af41e0f0", "sighting_of_ref": "indicator--5e354a3c-5fa1-4d69-916d-033c0f00772b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a5aa6a-5099-4d33-a4f3-0aff9a221592", "sighting_of_ref": "indicator--7351de90-bf4a-4e08-b72d-2926915385b3", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c393266-1ce2-42e8-98e5-60d46a99f79c", "sighting_of_ref": "indicator--7351de90-bf4a-4e08-b72d-2926915385b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37a7668-94c3-4e54-ab01-9ab3469adcb3", "sighting_of_ref": "indicator--06050a3b-f645-4aa1-98e3-dfb096458789", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560a04a2-948e-45b5-a562-7291845b3c69", "sighting_of_ref": "indicator--e8b165b8-6dad-404c-93be-dea2d3e6bd0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2da227-4cf6-4ee9-9a3f-3e6af4cd2b24", "sighting_of_ref": "indicator--bae8bcc9-760d-44bf-8367-97c20fbfc8f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159331d2-ca08-4cca-9888-4cd5ccc045e3", "sighting_of_ref": "indicator--7e1a5254-3878-48ca-8591-6db7b69e5e68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8f99d9-f38f-4a44-89f3-b7fc7268c4ff", "sighting_of_ref": "indicator--93f330d8-d5b1-406d-bdc8-c36faf5b8ec4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895efb6f-0bb7-49ff-bb0c-ad7ed73f8150", "sighting_of_ref": "indicator--8bca58a4-44ef-4c7e-81da-fa2bb7617ff7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f734ccf-9702-4f60-8705-da177b9c4060", "sighting_of_ref": "indicator--6ddd8851-018d-4b35-b835-a96f0352c2ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca415126-0f68-4688-bfa3-3ef869d7992f", "sighting_of_ref": "indicator--de4aabd1-8c4a-4589-843d-9ac172fb4ccc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81839209-fc3e-4128-8277-b507bd578957", "sighting_of_ref": "indicator--34441052-a27a-4d97-a1b6-1d63fac1c357", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4adf62f-d278-4fe4-8038-c4622357e8ad", "sighting_of_ref": "indicator--837f69a4-b1d8-4478-93a6-9cd53fc1312a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd79492-9558-4e33-a3fd-d1832a2330a1", "sighting_of_ref": "indicator--607df633-e0ad-4644-a468-ac35692cb8dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745ca5f8-ce05-4b3d-bfdb-759d10a547a0", "sighting_of_ref": "indicator--7049df1d-a3ae-4593-af91-dc97770b3328", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0279b407-ea97-443e-8b4d-cff1ec5b7298", "sighting_of_ref": "indicator--f447eb51-04a8-4ed3-b3f4-cf6417d58821", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e98da5f-f58d-4d3f-b8e8-ff9f7e7c4909", "sighting_of_ref": "indicator--62326cfc-366b-47d8-acd8-b3311c0f31f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be38c705-946a-4ed7-b854-91a197772280", "sighting_of_ref": "indicator--62326cfc-366b-47d8-acd8-b3311c0f31f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb1ddff-8181-4148-a27f-86a31ba3c4ff", "sighting_of_ref": "indicator--0b85cae1-1784-4e4a-a234-846e3d468001", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3224600e-b43a-4b16-ad46-6c2dc8a8ecac", "sighting_of_ref": "indicator--c237149b-dd91-4046-b07f-dcc55b36f9c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f1334a-419c-429c-adbf-ffe46599bb98", "sighting_of_ref": "indicator--3e527db9-4f56-4ec8-b965-a1c91bafd5ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c888a3a-f808-480a-b6e2-60e47a181772", "sighting_of_ref": "indicator--85f1bf7d-a4af-4f80-8fdf-4891915435d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecba1fa-7c1a-4aab-ab5c-b1788d70c176", "sighting_of_ref": "indicator--8ae321c2-4f69-4d45-a11e-90fb5ca19434", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d4ac7e-67bd-4e03-83cd-2243fb55c6bc", "sighting_of_ref": "indicator--8ae321c2-4f69-4d45-a11e-90fb5ca19434", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09efdb5-5197-4e81-930a-ba51a892fb60", "sighting_of_ref": "indicator--784ee24e-d6b1-486e-b535-f8ec8c5a5cb5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059bf88c-352e-48d6-bb8b-d4b8f086f19a", "sighting_of_ref": "indicator--36a0360a-7df9-496f-9c55-0f57b3d9fada", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a1d8b0-5c9a-4dc7-8b94-ea54de8de8d0", "sighting_of_ref": "indicator--6a94d4dc-5097-4395-8140-c3c745428f16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05293799-068c-415c-8efb-38efae9ad851", "sighting_of_ref": "indicator--6a94d4dc-5097-4395-8140-c3c745428f16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d731b55-e224-425e-b660-5abd5aa7a31c", "sighting_of_ref": "indicator--2824569a-c287-4745-9f8b-e48d7e2ede88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6013b046-bace-4b67-b3ed-439d4fa84515", "sighting_of_ref": "indicator--49892ce6-ef36-42e4-bd96-e5fafaaec4b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c5ecb5-5e45-43bf-943d-09292fcceb6f", "sighting_of_ref": "indicator--361b9ce6-1765-4e41-b5f8-3e603df3d287", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eb9383-657a-4d94-9892-b366e6d905ef", "sighting_of_ref": "indicator--361b9ce6-1765-4e41-b5f8-3e603df3d287", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4faf25f-a54e-447c-86db-9a7eb9e93ee3", "sighting_of_ref": "indicator--b4bc4db6-c845-4938-b687-ee37fad4da0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4390d093-692f-4b1b-be01-9bb12abba7cc", "sighting_of_ref": "indicator--40a97133-b1c5-42c0-9aa5-cb7309a30c45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c89f17-796e-41b3-83f6-a0ad0fd36e1b", "sighting_of_ref": "indicator--2713a0fc-6fb8-4295-8e6b-6fb658785ffb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a6b80b-e5a5-4fd6-8f83-e5aee7a6b651", "sighting_of_ref": "indicator--416717b9-e160-4eab-9846-9697badaf0e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8480f-8079-4547-b284-59f5f893f879", "sighting_of_ref": "indicator--f2121d9c-c413-469f-87ff-a4a8007f052a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0414aa69-9b91-40a4-a203-186e69312e81", "sighting_of_ref": "indicator--9a7bcd61-f311-487e-902d-e8829cedd7aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d9434-05ed-4dcb-9bdc-499ba99081cc", "sighting_of_ref": "indicator--9a7bcd61-f311-487e-902d-e8829cedd7aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a6d03d-b422-4f75-9980-d856064f0057", "sighting_of_ref": "indicator--4ee3c114-59e5-43a5-a014-f158c17c5f4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712af673-8a05-4667-8d1c-bd7b5d5c2bd8", "sighting_of_ref": "indicator--4ee3c114-59e5-43a5-a014-f158c17c5f4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3d7cf6-7607-4083-9fb0-2a5d4c512e5d", "sighting_of_ref": "indicator--a6028024-d7d1-4714-b072-ae13b6d3877e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79419dc6-e508-4faf-a472-9a9c0ceb39a9", "sighting_of_ref": "indicator--94f13f8f-c804-4d77-b109-0683a837d914", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a6c515-0b96-4918-afc0-fc0750ee9e6d", "sighting_of_ref": "indicator--d187cf50-fec3-4cf7-9bd7-51252564acd6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c19644-0dcc-478c-92d8-fa1729b097b8", "sighting_of_ref": "indicator--5cfe7a5a-4494-41ad-a1f2-2f613931d69c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fb1a77-cf0c-4b23-a854-1cf9678d5256", "sighting_of_ref": "indicator--4c457c1a-644f-4cb1-86e8-c73d8d09d6b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc37a02-391c-4dc4-888d-0eab10e19c29", "sighting_of_ref": "indicator--4c457c1a-644f-4cb1-86e8-c73d8d09d6b4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daff4f3c-d46c-4eb6-a7f0-4dd78f7db98c", "sighting_of_ref": "indicator--df4c1371-406d-43d5-a60f-b1afc81fb3fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffae6ad-ea78-4489-822c-e117901276d5", "sighting_of_ref": "indicator--9b9d67f1-cd4e-42b5-a0e8-0efc7e080caa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7f7112-f247-4ee5-bb72-72946ab2277e", "sighting_of_ref": "indicator--93cc23a2-ae49-404d-91fc-197ac5f4476a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118350ef-488c-46ee-bb43-655921d0ab36", "sighting_of_ref": "indicator--93cc23a2-ae49-404d-91fc-197ac5f4476a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60decad9-fd6f-4503-96a8-08fc002b5692", "sighting_of_ref": "indicator--90f3dab8-41a3-4d43-a6fe-c841241a7aea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc58849-cde9-4bd0-bb15-be9bd56eee25", "sighting_of_ref": "indicator--8c4803df-08fe-4489-9e84-3f248eda47a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc424a5-43ac-465a-923d-bfa60e7f02a3", "sighting_of_ref": "indicator--68b24c9d-ef11-4670-a6a4-dc84c11ebf06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63de7d8-8d9a-4ddf-a517-8c1874ec827d", "sighting_of_ref": "indicator--68b24c9d-ef11-4670-a6a4-dc84c11ebf06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace97099-cca4-4981-8fd0-402a050047a1", "sighting_of_ref": "indicator--ad910da2-77cd-40ee-b9df-8e0c91444841", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024d6189-b884-45b6-a383-9cd684386940", "sighting_of_ref": "indicator--d956b585-4dbd-47a9-a050-b9f54004e16c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c65b393-9ff8-4500-a635-a844ba362fe1", "sighting_of_ref": "indicator--6d6a65c3-fec3-47cc-a902-cf01de32e4e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebcc1c3-9a70-4d10-86c4-84f9e8832dc5", "sighting_of_ref": "indicator--3114b17f-81b1-478d-a76f-89dd7defcf9e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85c6a46-9ab3-495e-a179-7f884d5bb576", "sighting_of_ref": "indicator--3dbbf562-d02b-4c39-86eb-711536003c9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72152f40-f7a1-492c-9459-1f731dc67176", "sighting_of_ref": "indicator--1efe07c6-1899-445f-8dd5-9de3dd7addb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c529d34b-9518-4d78-ad95-a8dda17d2511", "sighting_of_ref": "indicator--f536a277-030d-479c-9d1b-802af153c81e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbad872-03e7-4b87-94cc-c7c366f1dc44", "sighting_of_ref": "indicator--f536a277-030d-479c-9d1b-802af153c81e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa26469-7831-48dc-b7ec-ed917c7f8cda", "sighting_of_ref": "indicator--e659a70f-c0b5-4459-806b-d6c7e1f3d052", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f88b23-1f60-4ab9-b86a-a433c7230b5f", "sighting_of_ref": "indicator--e659a70f-c0b5-4459-806b-d6c7e1f3d052", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c366bc-21db-4d12-83ee-6f7b054d9264", "sighting_of_ref": "indicator--657ecdb4-7b62-4724-8f0b-981cc50f054f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0a4691-de56-4ba5-a442-866239e90e83", "sighting_of_ref": "indicator--2b75ad42-6596-433e-a16f-266e37d7ccf0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a477310-7e78-402e-8e66-f65dbb78f4e6", "sighting_of_ref": "indicator--44a7d65a-2828-4f27-b945-49223587ce61", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bf49ac-909e-4e90-8fcc-42317c68a666", "sighting_of_ref": "indicator--d9ad7d61-b048-4eb5-8eeb-d9482750716a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dcd18c-0f1f-438e-8ba6-3cecfffef279", "sighting_of_ref": "indicator--c2766faa-7c06-41a6-ab08-ef0ffaeea759", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc0ce8a-5792-4b5e-aff3-dec8f4f5d251", "sighting_of_ref": "indicator--830c4276-d7ab-4cd2-82dc-09a0ccbb0d21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dfeb7c-73bd-40f4-a78f-ab36e402e482", "sighting_of_ref": "indicator--706da73d-a460-47b8-88d4-e7b9b1b48e83", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9dd2da-dbec-4202-958f-3e75ab78d790", "sighting_of_ref": "indicator--06bcda50-8272-4d37-9e7f-a362d3173751", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade6ede3-e978-48ac-aa94-b18611897049", "sighting_of_ref": "indicator--88712e94-fc45-4703-b0c0-0afea006a96c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9761ca88-fe8c-4172-94ba-fc82b76557e9", "sighting_of_ref": "indicator--489205ba-10e5-4743-a6cc-803485560c95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ed6c4a-47d5-466c-a835-b121a60404fa", "sighting_of_ref": "indicator--d5ff58ab-7ab8-49fc-aad0-db72a49d6a10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f576ee-8e7f-4ec4-b28d-67af48844be9", "sighting_of_ref": "indicator--1f16b5e6-67e6-452e-9274-55c9a04af8de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590c9fa3-0c48-415a-b274-7c7d1254c216", "sighting_of_ref": "indicator--e649dcca-400d-457c-8767-615dadf926cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272ff4ad-d8fa-46e6-91e6-a39c5d8ed692", "sighting_of_ref": "indicator--358a4dc7-42df-4d5d-ba64-e14ddbebad36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c501e828-854c-49fd-81ed-bbce51c8fb47", "sighting_of_ref": "indicator--358a4dc7-42df-4d5d-ba64-e14ddbebad36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872baaa7-6470-4787-a2f8-6053f0be4722", "sighting_of_ref": "indicator--b234a17e-5b86-4858-b36f-44b44be11dae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f3c248-ef6a-4fa5-b5a1-e365b42e79b7", "sighting_of_ref": "indicator--48d68228-32e2-44a6-80c7-f0edb80477de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6597004b-25a5-4c50-97d2-4a911794da29", "sighting_of_ref": "indicator--9895d891-f3db-4e6a-8dd7-1b263329d7a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdbc19e-5228-4d15-af57-7aa8ac13f6e3", "sighting_of_ref": "indicator--c7174cd1-a010-41ac-902e-41bc743da17d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f75f97-1c6f-45f4-8101-5508d0d383b1", "sighting_of_ref": "indicator--9bacfb99-691e-4295-9bd8-b46ef23beb46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42b3a1c-76f2-48af-bed9-5705e9acfc00", "sighting_of_ref": "indicator--9bacfb99-691e-4295-9bd8-b46ef23beb46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41aafc7-5d91-4f89-a521-dd591184d959", "sighting_of_ref": "indicator--42d41fe0-eb5d-4878-8ee5-3edb6c769bed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71773168-2ee2-4bea-a422-9b5aacf956f2", "sighting_of_ref": "indicator--bc59bca9-516a-401e-a81e-1f9e60933c9a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78fd99-3c41-4ce5-8a72-ac73771ec360", "sighting_of_ref": "indicator--76f2ddc8-9c6a-4dc2-b298-0a0be7ac53f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d496187-2a86-429e-a74a-f5d4a47d3f62", "sighting_of_ref": "indicator--699a1c55-2afc-4daf-b32e-e68a5673fef2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8a1e66-a1e4-43cd-ab6c-8221271f3530", "sighting_of_ref": "indicator--f16ed248-8615-4c95-b9e5-5cfa40c3275a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa450a7-837d-4597-aba1-5a36328d5b8e", "sighting_of_ref": "indicator--d40f53f5-8f10-484b-aef2-8d6ff401a379", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b89383-5557-4f75-b832-c33b51915a10", "sighting_of_ref": "indicator--ad9304e9-176d-4c3c-8d20-f9cb6e9e3947", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3a2c5e-bc56-4fa7-a948-7cde20b670b1", "sighting_of_ref": "indicator--ad9304e9-176d-4c3c-8d20-f9cb6e9e3947", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a4e339-0c97-438c-a889-45cf083e6617", "sighting_of_ref": "indicator--094b4020-d3ef-4678-8df4-986d510286f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786533a-07b1-4540-92f9-8e931b45ef29", "sighting_of_ref": "indicator--58ecb1ac-ccf5-428e-8a86-2ba80b3a44cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e40ccb-014f-46a3-83f7-cae73d6e566b", "sighting_of_ref": "indicator--52d0f9ef-1013-4b88-ab7b-d47a22958785", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce01f69-6b73-4f27-9d89-85bc97c6f522", "sighting_of_ref": "indicator--6f7685d9-de03-491f-85a9-ea4d428837df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614b13f-353a-4a58-9b37-a962ba01a3c1", "sighting_of_ref": "indicator--7f170c79-fbbd-485f-9810-9af55e87b457", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44656b6a-9dfa-453b-8678-91e5e3f26388", "sighting_of_ref": "indicator--8ffb7dfc-da4b-4ca3-82cf-d49f3a0fc56c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96087d53-9265-488c-a27e-714ff01faeae", "sighting_of_ref": "indicator--c1bef5f6-5aa2-49e0-90bd-fde2ceb05484", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca183df8-c272-4b82-9031-49ac6ed0cd70", "sighting_of_ref": "indicator--c1bef5f6-5aa2-49e0-90bd-fde2ceb05484", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f028cf17-ddaa-4a7b-9b0a-53e3ef1ed99c", "sighting_of_ref": "indicator--d636f40b-d06d-4a8d-ae81-38f2db534e6c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcde66d-6a64-49f2-b2fd-02612e1f6ba0", "sighting_of_ref": "indicator--143d6f67-f2c6-4095-b676-9b90081006c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04866541-5e8b-47ec-98d4-a8fbc152046f", "sighting_of_ref": "indicator--143d6f67-f2c6-4095-b676-9b90081006c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd96856e-a084-4a23-b5d6-33bced639a53", "sighting_of_ref": "indicator--76be17ad-046c-47cf-b8d5-5a787285da80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e12568-fa27-4d86-bec9-b5e79f0c9300", "sighting_of_ref": "indicator--ff3f647e-c4fb-4f97-81ea-0b5e9b8b140a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0651d774-1736-4891-88f0-ce4bd1d1531d", "sighting_of_ref": "indicator--16615d74-5fc6-4fb5-80bb-510c0f1380fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1c7a57-960d-44a1-aa46-2abdb21084a6", "sighting_of_ref": "indicator--16615d74-5fc6-4fb5-80bb-510c0f1380fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ac1511-6d6a-4617-aaf3-cd113271ce9c", "sighting_of_ref": "indicator--358c2691-8d85-49b5-9626-ee7a3a7c1ce5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c980212f-6b6e-48c6-90cb-b442f52d0a2c", "sighting_of_ref": "indicator--78017ce6-0b55-4e35-9d3d-0034a2b0b61e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d26b9c-b47c-454b-8e65-6ca64a911c00", "sighting_of_ref": "indicator--7f36a9cb-f1c0-47f8-b5e9-cfe499dd45f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df19b35-9897-4382-802d-2a67c92820b1", "sighting_of_ref": "indicator--7f36a9cb-f1c0-47f8-b5e9-cfe499dd45f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ba760e-953f-48f4-b416-fe216830ba72", "sighting_of_ref": "indicator--1872ff78-4d7f-4d30-94bc-a87759e5cb4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b78d05-cc01-4da8-8eac-8cf700b4865d", "sighting_of_ref": "indicator--1872ff78-4d7f-4d30-94bc-a87759e5cb4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a0ac5b-e7e3-4aeb-b400-826630d16d99", "sighting_of_ref": "indicator--96a30ac0-3dcf-4394-a2ec-3c2943a7de01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6609f94-3dea-42de-855f-750f3e613fb6", "sighting_of_ref": "indicator--22753480-8e2d-4a40-910b-06ec9bed8591", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d703e16d-8861-43e5-bc2d-242bdd06f7a8", "sighting_of_ref": "indicator--f369b9f0-98f7-4ae9-81c2-e29779d4addb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bf6762-c26c-4457-9559-f10f1d482904", "sighting_of_ref": "indicator--f369b9f0-98f7-4ae9-81c2-e29779d4addb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104dd1dd-fb28-4fd6-9d46-25f63c378532", "sighting_of_ref": "indicator--9e47e271-7e5c-44d8-b295-8cb307446198", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d765a2-cd45-425d-a75c-9f74d1c52789", "sighting_of_ref": "indicator--b1de3649-0e4b-462d-86ae-0c771e893a89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a3e95a-7876-4d21-ae85-1fd6b4f3ca54", "sighting_of_ref": "indicator--b074cd0a-3cab-456a-a818-429366efb882", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61052b68-1979-477b-998f-0f825b01758c", "sighting_of_ref": "indicator--f781b739-b95a-4ce7-838d-7d7271c4c2c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4ea6c7-c5ef-4e39-b97f-c3f86729f644", "sighting_of_ref": "indicator--e7be95e3-4d03-46c5-9d81-f1c748cba8e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f915212c-0bc1-4430-85f3-1c91b7857ddb", "sighting_of_ref": "indicator--fdb9b712-9086-40a8-83d8-1f69977f3fee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f067fc-8261-40fd-b478-3ce8588e8c6f", "sighting_of_ref": "indicator--5bf71d94-3ea1-4f71-b840-6a6f2fef31a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f8bae5-0344-490c-976e-ed80e49554cf", "sighting_of_ref": "indicator--5bf71d94-3ea1-4f71-b840-6a6f2fef31a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2198de33-87be-4f64-8f7b-3e62762b03b5", "sighting_of_ref": "indicator--0c998b35-3ff0-4fa5-a98b-dec5b7b012a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10b0e14-4eae-41be-8c53-94bc86ba3d4a", "sighting_of_ref": "indicator--d3a9b0b9-c4e8-4574-84af-d301b41a2fd4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d9442-b375-4cdc-838e-a12492f4042d", "sighting_of_ref": "indicator--ad5b6dae-2337-4ea2-89c4-e00e8ef9c852", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41836788-55f9-4168-b87c-0fff2587c212", "sighting_of_ref": "indicator--8d54fc32-449b-4edf-a441-3a21fb9c5c3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a71f763-9bdf-415c-9ae3-7bb38e207842", "sighting_of_ref": "indicator--5087c810-739d-4feb-a081-d5fa5e965ebd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75bbd99-c22d-4ebf-a102-34ee17ebb300", "sighting_of_ref": "indicator--5087c810-739d-4feb-a081-d5fa5e965ebd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642b1155-f1ce-455a-964d-ffcbcdfd4c92", "sighting_of_ref": "indicator--7da2d680-fc6d-4a3a-933f-a25be7487fcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ad86c5-039e-49a5-941c-80b83c1c3888", "sighting_of_ref": "indicator--b60bd39d-9a00-43cd-9204-b262f86fa3fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc594959-8c6c-41a3-95e1-57545a7f85af", "sighting_of_ref": "indicator--b60bd39d-9a00-43cd-9204-b262f86fa3fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c60891f-db42-43aa-baa6-fd0008d01328", "sighting_of_ref": "indicator--6965e2c7-5f67-455f-91e9-b36e739fe498", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b68b44-ee8d-4f08-a350-2d8c69b317ca", "sighting_of_ref": "indicator--58e25a60-dd8e-401c-b313-5b44e1297962", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e8a6dc-4fbe-4e7c-ab81-726f36846a97", "sighting_of_ref": "indicator--58e25a60-dd8e-401c-b313-5b44e1297962", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94878124-933d-4240-b05e-d7d7a1072cc9", "sighting_of_ref": "indicator--f0277cb4-b2d5-4ca9-8287-e1577fdad327", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f612ac-787f-486b-ac42-34a6a0be89e3", "sighting_of_ref": "indicator--7bb1caa9-702a-49b6-854a-ef18f5418aaa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd75033-0ec6-4978-86be-f43339577d86", "sighting_of_ref": "indicator--7bb1caa9-702a-49b6-854a-ef18f5418aaa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a085dc-7296-4d09-807d-9ae8e5b1af79", "sighting_of_ref": "indicator--108ab4f3-fc77-4103-8496-c7a05d83feb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03d1188-be3f-4886-a776-3644ec452a5a", "sighting_of_ref": "indicator--24f6f638-08e5-4e5c-a6d1-d49104d81ae3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054cbd54-36a8-486e-b990-961d71fa29ba", "sighting_of_ref": "indicator--c6653e10-5693-4b19-94c6-2dd59b2158b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041cfdaa-4ebc-4c9f-af41-0f27b3cc502a", "sighting_of_ref": "indicator--547eddae-d24a-444e-b900-868288b3b4a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12487a24-5781-4829-9263-a7fd1e9d8719", "sighting_of_ref": "indicator--ad3e52ab-95e9-4182-9da6-1c17eacaad35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305e54d5-e31a-40c6-a0ac-6b52e7abc315", "sighting_of_ref": "indicator--ad3e52ab-95e9-4182-9da6-1c17eacaad35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432d7ca8-468f-43c0-a584-e40c58ac8bfc", "sighting_of_ref": "indicator--4a7d3a6d-880d-466d-9c2e-45166a0c0965", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b0b087-47a9-4735-b138-309a091b4af6", "sighting_of_ref": "indicator--fc7f7f5b-ac69-4efb-8895-5ee79478c32f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3661bf80-4d5b-402c-9d73-74f8c49aa40d", "sighting_of_ref": "indicator--fc7f7f5b-ac69-4efb-8895-5ee79478c32f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a510e4d8-10e9-427e-a67d-385087e8b925", "sighting_of_ref": "indicator--393cb938-f487-48ca-9b7d-4b962ef033a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b2bfdf-8233-427f-b1c9-abc0514356eb", "sighting_of_ref": "indicator--b0ebc67e-3a77-4887-a647-b032cc33fa48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5b5315-06ce-403f-895c-362032000b07", "sighting_of_ref": "indicator--d92cab8b-098e-4dcd-ad19-0272c2a18cc8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9edc66e-2e78-41a4-8949-d0860cdc473d", "sighting_of_ref": "indicator--e1b2b103-f024-4f07-a339-752aa787b67c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a7d4cf-8cfb-4ff5-b759-dee10d278933", "sighting_of_ref": "indicator--e1b2b103-f024-4f07-a339-752aa787b67c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4aca3f-b029-4fac-9261-01dab3da5910", "sighting_of_ref": "indicator--0339959f-7e52-4dc4-8911-6b02ab1762f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71574e0-e2b9-4136-a453-e16f96820796", "sighting_of_ref": "indicator--bee03d35-2483-40c3-a20a-b4aa45e35395", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfb2123-201b-4c56-bd86-bf278229a580", "sighting_of_ref": "indicator--54359b1e-b412-4eb2-8c83-f5cf595c57ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a579d4a3-bcf2-4864-a6d0-d410d0bf8073", "sighting_of_ref": "indicator--54359b1e-b412-4eb2-8c83-f5cf595c57ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d0ee9e-b812-490e-b5ff-9a836f8b5c6e", "sighting_of_ref": "indicator--3b63bdaf-ffe0-4deb-bd7d-dd770fb1b40b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d90e37-c15c-4d46-b492-72aa24ceaf64", "sighting_of_ref": "indicator--6dada946-c941-461e-89c4-4187e4cec0cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70dba8f-f913-49e4-a56e-f9543c4efe2a", "sighting_of_ref": "indicator--6dada946-c941-461e-89c4-4187e4cec0cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d484d68-bcba-46ad-80c4-9b2067b35a8b", "sighting_of_ref": "indicator--140f5e42-7a4b-4b23-95a8-e32375763601", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fc8cc4-efe5-41ca-9ff7-434052fa153b", "sighting_of_ref": "indicator--830114f6-ca78-4808-97ba-f16324a620ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e03e79c-1a5a-42f0-b17c-c38c1b6bf01b", "sighting_of_ref": "indicator--905e9295-9091-49d6-9ab7-90b2a4a95eaa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6d152e-d55c-4109-ba02-a0b0b5c3a87b", "sighting_of_ref": "indicator--32543b0e-39c4-422d-bbec-bc1440b1139a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8290fdb-04d2-46b7-82e6-58d722c90f3f", "sighting_of_ref": "indicator--4c3c17e5-7f59-43d7-a928-e98239083c40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0427ffe-a7c5-48f4-8486-f83e908d5bcb", "sighting_of_ref": "indicator--c9bd447f-f4d9-4907-8ae2-451c8c606c54", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4a67ab-48d5-42f7-8a74-1cd82e037e38", "sighting_of_ref": "indicator--c9bd447f-f4d9-4907-8ae2-451c8c606c54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da6fcb0-1c64-4af0-9fac-73dce3ab68d3", "sighting_of_ref": "indicator--e015750e-7973-4dee-aa03-59184e0aef86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046be2bf-79d0-48e9-929e-8995a04b9608", "sighting_of_ref": "indicator--cc924124-933f-40b1-8203-78781f7f260d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117a5eb-19e4-4e29-882f-cabcd1177c6d", "sighting_of_ref": "indicator--5eebd179-afc0-4992-9f68-09c3bc036c8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88da46c0-13d8-4d7e-a7a1-680add82db5b", "sighting_of_ref": "indicator--5eebd179-afc0-4992-9f68-09c3bc036c8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9b1565-9c68-4b44-841d-1ab6aab0e01e", "sighting_of_ref": "indicator--608eb221-b220-408c-b3a4-f091a7084572", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1721ee-0c7b-4a2f-a117-ebb186004e59", "sighting_of_ref": "indicator--8834b479-506f-42f7-864b-8d6b8a2c2b1f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e570ae-b19a-45d5-b11e-d23705bc73f8", "sighting_of_ref": "indicator--63f7cb90-7e79-474e-a6f4-f82fecbe4b05", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4fe963-34ed-459f-803f-e2cae7e293b1", "sighting_of_ref": "indicator--63f7cb90-7e79-474e-a6f4-f82fecbe4b05", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d6a505-1ba9-496c-ba89-fae9901c2864", "sighting_of_ref": "indicator--a1ae7313-2195-4198-87e9-7e40f0bde945", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cde0e9-a057-439b-b1e3-bf7a9b2aa842", "sighting_of_ref": "indicator--c802bfd7-de26-4a9c-9709-ded17f4502c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e1aac-9a5e-4f64-ac64-698dbbaa1451", "sighting_of_ref": "indicator--06a47277-d130-4718-bb5a-d3a98713967d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e624d8f-1a89-473a-b58b-4577877100a0", "sighting_of_ref": "indicator--128ed9c9-c872-40a1-a173-58d555e2aa64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56639ab-1153-4c84-8ee3-717dab9034b6", "sighting_of_ref": "indicator--0b1db3c1-904c-4a6a-a1fa-3552ea2a6e17", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7ba6d4-f572-4ba5-9967-b7fe8af775b3", "sighting_of_ref": "indicator--32f5d2db-f6b3-4c6c-ab88-41f5df4fa271", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47780f51-c145-44ca-9927-22ee00bfcc87", "sighting_of_ref": "indicator--bd08701b-4d17-4c20-b5bd-a9737d6dda5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd77732d-0708-4e2f-b54f-4e6857f36a21", "sighting_of_ref": "indicator--bd08701b-4d17-4c20-b5bd-a9737d6dda5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c8da30-8b6d-41fb-9f33-37fe78f5b488", "sighting_of_ref": "indicator--a0eee635-6b82-431a-9024-9bb3b0780344", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f221d9-91f0-4930-bb25-6954bcf002cd", "sighting_of_ref": "indicator--5ea4ee6e-297d-4d2c-9e90-71a725b40cba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e688fa-04c4-44bd-93f8-c5e0fe9dd902", "sighting_of_ref": "indicator--c8378499-f3f0-41ee-9e32-659ffde4b867", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93d4f0b-44be-4c18-bb71-f6f8d3c29f1e", "sighting_of_ref": "indicator--c86811e0-f823-4711-a2c0-41362857ea5b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4afccd-44a5-4fbd-bcff-f29b749a4078", "sighting_of_ref": "indicator--574e57c7-6ce9-4767-a205-c9d338ee76d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9635c7-ddd2-484c-8496-d2fc304f0d1b", "sighting_of_ref": "indicator--06590976-43bf-4c54-a601-8a9ca9d36399", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85983db-d225-42c3-8e87-d3a7f9e8e074", "sighting_of_ref": "indicator--d69b81f1-80c5-4302-80d4-1c61d7b669c3", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4848d54a-7eee-477f-b246-086e66074bb2", "sighting_of_ref": "indicator--1bafb87a-e35e-43bc-a8e4-75c3c4e24796", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ce061f-ab82-457c-baeb-2b3293b1e466", "sighting_of_ref": "indicator--15c2bc55-7906-4533-95d1-36ed1a12cc36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e75a9e-8d24-4a71-9cf3-58125205e611", "sighting_of_ref": "indicator--690c620d-c65b-4aa5-9437-20774007daf9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e678a4-ebec-4e5a-9842-ce44af647f04", "sighting_of_ref": "indicator--690c620d-c65b-4aa5-9437-20774007daf9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f4f4ad-a8c1-425e-a0af-94549be22dc0", "sighting_of_ref": "indicator--542e3e13-99d2-4b40-bcbb-c6487e2b5297", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c1d45f-418f-4bf1-9232-bd7e03ad5628", "sighting_of_ref": "indicator--8f9ba781-3a81-4ed5-9229-cec09c11fb7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ad97d2-19be-4953-80de-1a29c6076d40", "sighting_of_ref": "indicator--8f9ba781-3a81-4ed5-9229-cec09c11fb7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50371dcb-ac82-4c75-9f47-08451a3105cd", "sighting_of_ref": "indicator--e4ad7ba1-a733-476c-90eb-a6f8886c3c74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6defb1e7-1112-416c-ad65-34181a811f98", "sighting_of_ref": "indicator--e4ad7ba1-a733-476c-90eb-a6f8886c3c74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3594e9-6fde-46d3-9bcc-1da7a19b9d17", "sighting_of_ref": "indicator--02be0544-3f85-40d1-974b-313d0408c6e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4262ee2b-868d-4197-8561-da55b7f90b75", "sighting_of_ref": "indicator--02be0544-3f85-40d1-974b-313d0408c6e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119de41e-d400-40a2-8e9e-aa7b2cdb1eb2", "sighting_of_ref": "indicator--2d5029b7-2395-48d5-ad3e-3cad2459f8f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fc5568-c12f-436d-b9a2-3b8ab8df80fe", "sighting_of_ref": "indicator--2d5029b7-2395-48d5-ad3e-3cad2459f8f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5013708d-66fe-4ee9-9cb9-a4e7aff5887e", "sighting_of_ref": "indicator--d44e5783-d7ca-4c4e-9f5a-c18167d8b198", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b8232-781b-4680-b78e-0ebcea72366f", "sighting_of_ref": "indicator--d44e5783-d7ca-4c4e-9f5a-c18167d8b198", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7dd49d-1c46-48dc-83e7-47745ed7a265", "sighting_of_ref": "indicator--d10acca4-75bf-4206-acf9-455c7a6c8170", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275813b0-6d02-4e67-a7a4-9b8a58ce043a", "sighting_of_ref": "indicator--d10acca4-75bf-4206-acf9-455c7a6c8170", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328a7d0f-f746-4ed3-8468-c348e4fe3c8d", "sighting_of_ref": "indicator--be0f55b0-8b61-49dd-8c49-42fd004ac89b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b25c6ec-4e13-43f3-848e-4c6b710fc3f0", "sighting_of_ref": "indicator--be0f55b0-8b61-49dd-8c49-42fd004ac89b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b14319f-fc9f-43df-aefd-4401907a5976", "sighting_of_ref": "indicator--fb9ceee9-3660-47aa-9352-de3197e601fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a43e91-c5bb-463e-a9a9-1071ac0d2903", "sighting_of_ref": "indicator--296c49be-ba35-4c1c-82a1-44a0a0644502", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97787af-17bf-4130-a1e7-ec6775f68e26", "sighting_of_ref": "indicator--88ecaff1-db5c-4040-ab0d-18b4b4a1f8dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e10c0f8-e233-4fc9-a60a-adf13c621710", "sighting_of_ref": "indicator--88ecaff1-db5c-4040-ab0d-18b4b4a1f8dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c2a786-978c-4da8-a693-4702e253d303", "sighting_of_ref": "indicator--3b2b921d-4c03-42be-bc93-b40c732eb190", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794f3fc2-f64c-4264-93c7-f8ec35d68cf6", "sighting_of_ref": "indicator--3b2b921d-4c03-42be-bc93-b40c732eb190", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa07f1-afa4-4e76-9867-7d124fc42ea9", "sighting_of_ref": "indicator--1e6313ec-3949-45e7-9fdf-6f24ce4c8d59", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8342c8-8466-40ce-9a0f-7c1d4f01360a", "sighting_of_ref": "indicator--7328c5e9-a13b-4f63-a4f2-2030e44c6911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5830716e-fa23-4888-8c84-d6efd4572006", "sighting_of_ref": "indicator--fb4753f9-9984-45bf-8f9c-7cc3903a7786", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6623a774-ec66-463c-9a0d-a669247f7c2f", "sighting_of_ref": "indicator--fb4753f9-9984-45bf-8f9c-7cc3903a7786", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25af561-90b3-4971-b815-54a7ace67529", "sighting_of_ref": "indicator--8a0a7db2-e188-4412-9290-3b55b54cb02e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccce945a-7e10-4637-8c7e-36df40426fc2", "sighting_of_ref": "indicator--8a0a7db2-e188-4412-9290-3b55b54cb02e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb49965-5fdf-481a-97d5-797aeffc3b68", "sighting_of_ref": "indicator--2b179d63-f2ae-4e31-a9de-969756bef0a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da2fef1-77d8-4a08-8902-39d9a7728e60", "sighting_of_ref": "indicator--0c8ce888-9972-46ff-baaa-5f70c54646ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a93c9-f6f0-4e7d-b26d-05ebc916168f", "sighting_of_ref": "indicator--c9b51ddd-d44f-418e-ac80-5e3fb50d0af4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36d8cea-8ec2-4811-b6aa-56703ad9dac9", "sighting_of_ref": "indicator--c9b51ddd-d44f-418e-ac80-5e3fb50d0af4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59f7a99-1173-47b0-a70f-4278a106bed4", "sighting_of_ref": "indicator--932e0ac2-2309-4b28-8d7b-ab83e63922cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e7d9b3-d3f9-4963-b471-0439c1a64ec9", "sighting_of_ref": "indicator--932e0ac2-2309-4b28-8d7b-ab83e63922cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5567d12f-7e8f-4efc-9b4a-b9565810bb82", "sighting_of_ref": "indicator--ef2b03c4-edf8-4d2c-b551-6fcbb84f6b2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c8b75f-8abe-470c-99a2-908d345f29ee", "sighting_of_ref": "indicator--ef2b03c4-edf8-4d2c-b551-6fcbb84f6b2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c0a87-a2b8-4430-bd7b-4c5d9eff7099", "sighting_of_ref": "indicator--26347d07-c7d7-4672-9941-37dc8d7dbf65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c9aa48-e729-4af6-8b3a-c0db2dae188f", "sighting_of_ref": "indicator--26347d07-c7d7-4672-9941-37dc8d7dbf65", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aec477c-19aa-4004-ae4e-a5869ff12c31", "sighting_of_ref": "indicator--fdd71e0a-8e1a-4c6d-b036-515fa77c4fa7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab7871-6c69-47cd-ad93-1b5c834e4489", "sighting_of_ref": "indicator--4717f12a-377d-4cf6-a490-912489171949", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5e3db9-e716-4f5d-a0da-71441aa4230f", "sighting_of_ref": "indicator--8ce8cc37-e15e-4145-8ab2-a071cb41b706", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8021fab3-2b45-4af0-a363-aa22245f2f6f", "sighting_of_ref": "indicator--8ce8cc37-e15e-4145-8ab2-a071cb41b706", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb21ee-5a0c-4393-b744-1dabb7ebfd93", "sighting_of_ref": "indicator--06ddaf37-7414-4904-8565-25df5de010f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e1ccb2-8513-4086-bcc9-763154850013", "sighting_of_ref": "indicator--06ddaf37-7414-4904-8565-25df5de010f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca97e37-7506-4d6b-a994-8dfc163e86c8", "sighting_of_ref": "indicator--a2f55c00-83d1-43b3-8ab6-380acde42862", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a21651-bff4-47cb-a505-c1bae139b7dd", "sighting_of_ref": "indicator--7260e0f8-0d16-4f4b-8613-ff00c5b5753a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b9216c-473a-494c-bb3a-71c43cc387ef", "sighting_of_ref": "indicator--78ec7bb1-a333-4016-b3ed-acb77b7d55c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b61495e-0853-48c0-a70a-93544bf3188d", "sighting_of_ref": "indicator--78ec7bb1-a333-4016-b3ed-acb77b7d55c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1940c43d-a9a9-48a9-b6df-d778b297c99e", "sighting_of_ref": "indicator--98dd9108-d454-4b33-a7a4-95bc06b60c45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3936dac-8669-4731-8d51-d80b6df0b86c", "sighting_of_ref": "indicator--98dd9108-d454-4b33-a7a4-95bc06b60c45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b4afe7-011e-4f3c-8c8a-1a75177aacce", "sighting_of_ref": "indicator--3e39e19d-6e44-4876-9ec5-9ec64710af41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d23c0b-d8b1-4fb4-9148-a9516446def5", "sighting_of_ref": "indicator--3e39e19d-6e44-4876-9ec5-9ec64710af41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264ae493-b436-4a3a-ac9d-c7d2f503fd59", "sighting_of_ref": "indicator--3cb4bcb3-08b8-4266-a5c0-cba48f95c3d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24ffaf7-d0cd-4da9-9f1c-3f910f718148", "sighting_of_ref": "indicator--3cb4bcb3-08b8-4266-a5c0-cba48f95c3d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ce6c8d-9a37-4a97-8892-4c8e5fb9edac", "sighting_of_ref": "indicator--01634b08-2501-4edc-86ac-666a6dc43ef5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c8c7c-400c-4f83-9cd1-a700e21259ba", "sighting_of_ref": "indicator--01634b08-2501-4edc-86ac-666a6dc43ef5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8895327e-0339-4d5c-a4fa-d3d101494c5b", "sighting_of_ref": "indicator--eb50c7a8-aaa8-4326-9a39-0051df1c9911", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277cd9ba-4e6b-43de-a177-9162ecf7d314", "sighting_of_ref": "indicator--eb50c7a8-aaa8-4326-9a39-0051df1c9911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8071fa26-c416-48ef-a6d0-b19112d2a3fa", "sighting_of_ref": "indicator--09ae735d-9748-402e-9d86-d86df36e5922", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e6ba01-6f9e-4655-81ad-350ea94cfbc9", "sighting_of_ref": "indicator--60d60674-b394-48d1-b589-156669d816c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ac30c2-f32e-4be5-b937-46873657cc22", "sighting_of_ref": "indicator--3db5955d-93fc-4bca-aa41-407fa58b9be6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cf2007-9b79-4a79-a778-3b41f2981f92", "sighting_of_ref": "indicator--3db5955d-93fc-4bca-aa41-407fa58b9be6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2920e268-7cda-45d8-9a97-326ca6e8c503", "sighting_of_ref": "indicator--e3302452-6152-439d-9722-87e505f23e4e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa7c27-dfb9-43a6-a645-430981cfde7f", "sighting_of_ref": "indicator--5139e88f-2fdf-46a5-a703-064024e630c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571a0a1-018f-4232-862c-29e4eef3952b", "sighting_of_ref": "indicator--80bed321-72b7-47bf-af1d-875ace4c4a18", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4a4d79-1e5a-4596-8d9b-4a35fe0676d3", "sighting_of_ref": "indicator--80bed321-72b7-47bf-af1d-875ace4c4a18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7dce17-5ff0-439b-8ac4-226cc655a9bc", "sighting_of_ref": "indicator--30dc088e-956b-40e2-bad2-3a472962e1b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d03095-8b60-41d6-a4db-0b4a8090bab0", "sighting_of_ref": "indicator--30dc088e-956b-40e2-bad2-3a472962e1b2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4acce58-ffa0-412f-be29-f098bbb04ea5", "sighting_of_ref": "indicator--23170c73-114f-4f26-a45b-aa933ff54bd5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e404df-c148-4441-81bd-83571af07646", "sighting_of_ref": "indicator--23170c73-114f-4f26-a45b-aa933ff54bd5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f82f74-54a5-4700-857e-20a7a9341962", "sighting_of_ref": "indicator--ca19deaa-7f14-431f-aa68-780ebeda9cf1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf7542-3c7d-4c00-9971-5df7a27bb61c", "sighting_of_ref": "indicator--ca19deaa-7f14-431f-aa68-780ebeda9cf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee88d47-ab13-4731-a77c-6d4d1af9d22c", "sighting_of_ref": "indicator--d3590eb8-161a-4be7-9373-85a6eb2bda5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67bdc17-f4e2-4208-969b-dda834484e61", "sighting_of_ref": "indicator--d3590eb8-161a-4be7-9373-85a6eb2bda5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c4b7c-1a8d-49f8-9833-c135480ebbc5", "sighting_of_ref": "indicator--3da8c378-a3de-446a-9f79-f8d15cbfadc8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bad9df-a255-4ad3-87a1-006e46c38577", "sighting_of_ref": "indicator--3da8c378-a3de-446a-9f79-f8d15cbfadc8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7713faa3-c188-4f45-a90d-eab1ed0b07cb", "sighting_of_ref": "indicator--d690c328-7b60-46c1-9d0a-630c3c674838", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebabdd8-50ab-4a1f-83f5-6eda23aec0c7", "sighting_of_ref": "indicator--3d4e0732-7002-4e70-8857-a07949f4e000", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681f4c93-eb38-4b2e-8ba7-d951021d3148", "sighting_of_ref": "indicator--3d4e0732-7002-4e70-8857-a07949f4e000", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f59e931-7702-4f7d-a998-fb90cd57ed71", "sighting_of_ref": "indicator--6477e2fc-f3a2-4af1-b8a8-027bc8324d89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0718cab1-a250-4164-acfb-b46bfccbb72d", "sighting_of_ref": "indicator--cde29085-263a-45e1-9acf-fc298198cae0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ab561b-4125-45a6-b9dc-f297832b13d3", "sighting_of_ref": "indicator--50046738-19f8-4c65-abaa-f98323a3f345", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da4dd88-5b69-4005-9b62-f8e59cb231eb", "sighting_of_ref": "indicator--28b41fcd-2c32-4627-a73f-17f2f65e9ff6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c89c6d1-c51c-4a6c-8eb8-7dc9c766800d", "sighting_of_ref": "indicator--e104df73-35ba-40bd-b830-787a654e6217", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c62c788-55f5-4b23-8e4f-6f1b2a914c74", "sighting_of_ref": "indicator--2b77b6f8-b9e7-46c9-9c8d-af653b34c181", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ab319-6558-470b-94ef-fbb97b890969", "sighting_of_ref": "indicator--2b77b6f8-b9e7-46c9-9c8d-af653b34c181", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1e3df0-46d6-4791-9c26-e0ca32bc55e6", "sighting_of_ref": "indicator--9f4b93d7-4708-4b55-ad16-0211dab58629", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c445cdfc-ea0b-4847-8817-048b354ea938", "sighting_of_ref": "indicator--c5f4f202-3019-4395-9666-b7c6fb0c9965", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b5650d-4ef2-4f74-9773-a328058f2af3", "sighting_of_ref": "indicator--c5f4f202-3019-4395-9666-b7c6fb0c9965", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4891230-f191-4d60-b2bd-f5545b68efca", "sighting_of_ref": "indicator--a70e0361-a87f-4115-8d84-8b5e92707666", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab4d639-7f9c-4387-8adf-c8e59e0a3c7e", "sighting_of_ref": "indicator--cf403e13-ad04-46f0-9ba3-cfbc2af12487", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63e7e9d-451c-4647-9980-f0ee6f3dbe17", "sighting_of_ref": "indicator--3cf56179-9223-42be-9a46-ad9c4b591246", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfc2bc6-d15d-43da-bf63-89fdb0295cd2", "sighting_of_ref": "indicator--cb4426f0-aaef-4467-8a50-37552d002be3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c682a9-e0eb-4cbe-9451-23e5ccdb9a20", "sighting_of_ref": "indicator--f3ec227b-f3a9-43ae-b02e-8fddfaae4aab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682295b1-8820-4240-a53c-66b9bb4264a4", "sighting_of_ref": "indicator--186ef439-7bfe-4883-a18c-94a48e2a1d0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd024ecf-b9be-4e0e-9562-5e9b21e4bf58", "sighting_of_ref": "indicator--f4e9aff5-00cd-4258-96ae-c63938c51fde", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de64160-e18a-4cfa-ac49-cc359af565fb", "sighting_of_ref": "indicator--b8255294-82e8-4426-80e7-6467599cdc2f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0799e1-57ea-4cd0-b043-e81da50ddd6d", "sighting_of_ref": "indicator--498a195b-1d7a-4c47-94e3-93188c284632", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12414c67-a50e-45d6-ba29-56fdd3823359", "sighting_of_ref": "indicator--0f6a95ca-ab8a-4cc5-9eee-65fddd44236a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9addf8b2-61e7-4fba-b8b4-b52cfac3fc0a", "sighting_of_ref": "indicator--df08c792-5e39-4fa3-a342-57395375c009", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ba1144-0fca-4cef-bd4f-fea3859da6a1", "sighting_of_ref": "indicator--d5ee5e4a-aec9-4fd5-bd74-69c00be87c05", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd535cf4-dc51-494b-9937-1b361938aa9e", "sighting_of_ref": "indicator--27ed7087-e666-4d17-a7d4-93a1da3eb010", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5390b53e-ee1e-4e55-a830-d572d3fa1de7", "sighting_of_ref": "indicator--03ade0d7-53c6-47bc-93ec-a382a44bd242", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789325d5-e2aa-4b1f-b0fa-2cc3095d3f40", "sighting_of_ref": "indicator--03ade0d7-53c6-47bc-93ec-a382a44bd242", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c964d7-d3a0-46fe-8e94-46a3a95c8747", "sighting_of_ref": "indicator--bd605e4a-2327-4850-be9d-1ad92f2ec78f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ee2630-5e8d-49c9-b428-c748984fe91f", "sighting_of_ref": "indicator--7a40db25-0cce-47cd-9bcc-b56ca3dfdb3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcae2b6-a29b-4640-a322-880b2cac95ca", "sighting_of_ref": "indicator--b76eee37-57e8-4a33-a110-dc79645ef886", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d254aa-a2db-44ad-98a9-405376c5b956", "sighting_of_ref": "indicator--b9180d16-4278-45cc-a4b0-5283ca5d3b84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4947fc30-4d4d-4f66-be9a-198314a0a40f", "sighting_of_ref": "indicator--5708fbbd-d8cc-4225-92aa-3e9fe4f9887d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443e76f-3bab-4686-8153-6d00310288fd", "sighting_of_ref": "indicator--bb2123b2-01ae-4cf8-868f-17e437078d06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00916d06-afb8-4bd2-b33d-ebf71355e33c", "sighting_of_ref": "indicator--800024d7-13e5-423c-8019-237d28db4cbe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf228ae-02d6-42d3-b623-4057d1cbf4a7", "sighting_of_ref": "indicator--800024d7-13e5-423c-8019-237d28db4cbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2d018d-3755-4a8b-b339-0fac03aa3e11", "sighting_of_ref": "indicator--71a7f000-f57a-4b0b-af33-112cf44305e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b082960f-c13c-4f82-a92b-b363b009a3d9", "sighting_of_ref": "indicator--953b9db7-455c-43dd-8d00-2d469e6c67a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dfca66-30cf-4e57-b9cf-9155a26ca4c1", "sighting_of_ref": "indicator--3a112fb9-b301-4958-b78d-58bb0b8ad4f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e8f967-9578-4a5b-a634-7052d4107828", "sighting_of_ref": "indicator--dee58a6c-912a-4ea9-9fb4-344b3b3cb3f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229bf5c4-f80f-407f-af3a-38ee6001a2aa", "sighting_of_ref": "indicator--70323fcc-86f0-45c2-8a9f-3b169076a48c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efb031f-3c5d-47a2-b68f-c4ca0cb98fba", "sighting_of_ref": "indicator--70323fcc-86f0-45c2-8a9f-3b169076a48c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddb395b-dd96-48a8-8d5d-6aacaa7b09a7", "sighting_of_ref": "indicator--ff852b3a-a9aa-49a6-a049-a2793e6b3462", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a690ee45-c619-4172-8b11-4de1876f5e5e", "sighting_of_ref": "indicator--ff852b3a-a9aa-49a6-a049-a2793e6b3462", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db3403e-721b-49f2-9780-690ea8d42750", "sighting_of_ref": "indicator--e8a6700f-625f-44c1-b9cb-ad55473c9fcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34160304-5b9f-435f-b8ed-5acb13394a2c", "sighting_of_ref": "indicator--e8a6700f-625f-44c1-b9cb-ad55473c9fcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21cc313-e850-49cf-97a1-9d4a568c8301", "sighting_of_ref": "indicator--cd7647a1-e4b1-41ec-b7af-a7a50ed28f1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6ff842-c004-4be0-9b33-f616dfa8d6b7", "sighting_of_ref": "indicator--cd7647a1-e4b1-41ec-b7af-a7a50ed28f1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e592eb-dbfd-4479-9a83-a86685e922b7", "sighting_of_ref": "indicator--f4449a8e-fc8a-4b1a-843a-9e66ba6d996d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962f43ab-44fa-4c20-a7d5-f204679cc701", "sighting_of_ref": "indicator--f4449a8e-fc8a-4b1a-843a-9e66ba6d996d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae5473d-7279-4d47-93a2-e4f168edbabf", "sighting_of_ref": "indicator--576df5cd-1c8a-4ef4-904e-bd5e3ca216a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcf973f-c9c9-46a3-ba18-a802120450bb", "sighting_of_ref": "indicator--576df5cd-1c8a-4ef4-904e-bd5e3ca216a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f5659a-be9c-4a89-a6fb-d31c670fd679", "sighting_of_ref": "indicator--5aae2278-0a0a-4d19-94d5-8307fd909224", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd073c8-f322-4772-b1de-430e3620ac10", "sighting_of_ref": "indicator--5aae2278-0a0a-4d19-94d5-8307fd909224", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a1672-dc41-4c75-9eac-907dbff96650", "sighting_of_ref": "indicator--959eda30-72a3-46c2-b7ce-5bc8b29517de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3933423b-2fca-4457-b548-cf903865c2f0", "sighting_of_ref": "indicator--959eda30-72a3-46c2-b7ce-5bc8b29517de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f151145-d104-44ee-9e40-d674d08139ef", "sighting_of_ref": "indicator--eedbbc72-2ba2-47da-b5ff-8cc3ec6d9103", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c264e42c-268e-4787-8f45-1e1394e02d1c", "sighting_of_ref": "indicator--eedbbc72-2ba2-47da-b5ff-8cc3ec6d9103", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa24616-f742-4e1d-b1d8-61fcece33ad8", "sighting_of_ref": "indicator--03ea3838-5d24-4c34-9394-d7b2059d6c13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa72a6-34e5-4a67-a2db-d422d3c58762", "sighting_of_ref": "indicator--bb966b24-9d9a-457c-ac5b-808a5ce1fac9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967a0a0e-1230-4f0d-860d-8c1a5748fa57", "sighting_of_ref": "indicator--78f064df-dc35-48b4-96b3-c0367bd5246b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e2afa2-e87d-4f31-888f-bb768aec6c7e", "sighting_of_ref": "indicator--78f064df-dc35-48b4-96b3-c0367bd5246b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b05f1c6-636d-40e5-bbd5-cd1154b3ab6a", "sighting_of_ref": "indicator--147550a4-571f-48b3-8507-db9b5545faa1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57517d9-eb3a-4ef6-8a85-43980a2f960b", "sighting_of_ref": "indicator--147550a4-571f-48b3-8507-db9b5545faa1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58acf552-7ce9-4da2-a6fe-93bf87cccd02", "sighting_of_ref": "indicator--e0164734-cebb-40c4-8190-af499bbbb3ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035d51f9-8984-440f-8d96-d5ee3dfda0b4", "sighting_of_ref": "indicator--e0164734-cebb-40c4-8190-af499bbbb3ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a154b-e4c2-42ab-a821-25f738860d9e", "sighting_of_ref": "indicator--d29a3462-9dbf-4182-9c68-2041b516d553", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233ad9f-16a7-4536-a2e6-9ea18fafb39b", "sighting_of_ref": "indicator--d29a3462-9dbf-4182-9c68-2041b516d553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68da4ee1-5b46-4fb4-be38-9348fccc4458", "sighting_of_ref": "indicator--8ad6e53f-1f91-473e-9dc7-c157f9beba51", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3572535-20c7-4bf9-a5b9-c68904baffce", "sighting_of_ref": "indicator--8ad6e53f-1f91-473e-9dc7-c157f9beba51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0233f8-a01e-479a-a166-d7eda85387b2", "sighting_of_ref": "indicator--92524d37-0c8a-4c6d-b4e8-8972fb667a55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445fbfb3-ff96-4068-bee7-d4aef3549a1d", "sighting_of_ref": "indicator--2801a2d5-b63c-4b6d-af6e-b08bde11888f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a5ed63-2eb6-40ea-85d5-79339726ebdd", "sighting_of_ref": "indicator--aadad69c-3943-4fb1-ae45-0c419725a36c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f918c2b6-26cb-47a5-9e32-89f48513cac2", "sighting_of_ref": "indicator--7fc79f9e-0177-4430-8aa9-9c7953f150ea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e783922-466f-462d-960f-1ce9cf51ecfd", "sighting_of_ref": "indicator--652c03d1-684f-48ad-8a3c-de5bc299fac8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bc425a-a9fd-44ad-8631-453bfeaa7664", "sighting_of_ref": "indicator--50826b41-8ccd-40e8-80c1-b7f64784078d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b9d7ec-1ebc-4a14-97db-1bd89b1e4326", "sighting_of_ref": "indicator--c52e2b6c-ad58-4dfb-bbae-bacf83908e79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04b9ffd-7141-470f-bb35-b492706b0a97", "sighting_of_ref": "indicator--302a22b1-c478-499d-a237-888a21ca7497", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195b7418-167c-4c73-899a-67bb602b8116", "sighting_of_ref": "indicator--68f1596b-0709-44bd-a1fe-f7f766708744", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e42a80-4606-4e27-a7ef-cc4bd066823a", "sighting_of_ref": "indicator--dcd0c540-5153-4611-b442-8de9e78a9fc5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5124f208-6cfe-4683-b4a9-26eddcfc6d09", "sighting_of_ref": "indicator--b2cc488c-4649-46a7-9976-d6f5d1deb543", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885ed1bb-160f-4bee-9c65-6e2939b0401e", "sighting_of_ref": "indicator--cccd5a59-1c4d-42fd-bf93-608854470647", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab98f6f-3898-4a47-bea0-07cd1cfbbaea", "sighting_of_ref": "indicator--51260030-986c-429c-b579-b975964b37cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d71dd3-84b7-4ff8-93b8-4adf003b00ea", "sighting_of_ref": "indicator--067878f0-c248-46ad-804a-792d001d9271", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ab981e-4d5d-4733-9e33-41310907b131", "sighting_of_ref": "indicator--8d4dd5ef-953f-442a-9823-e62de6bf6dcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92fabfd-933e-4629-b911-f167911023ad", "sighting_of_ref": "indicator--50c56bc0-0f95-413f-b8f0-c78833a164d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3033ecce-eeab-4f35-9434-c38ef0f52209", "sighting_of_ref": "indicator--16535860-c865-4c92-b2d2-1b37073bb14a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a83e1e-1f2a-4ef9-b985-9d5b0244a852", "sighting_of_ref": "indicator--b425e26d-330e-4705-9a7e-9daaff22ffa8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20255f7e-c208-4010-a554-435b35d854a4", "sighting_of_ref": "indicator--dff00631-90bc-4e8c-a183-3cde7b8aa642", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a28422c-e64c-4e4e-acc7-9e5aa5e59c13", "sighting_of_ref": "indicator--dff00631-90bc-4e8c-a183-3cde7b8aa642", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebd698e-84c6-4fd1-8361-8313476f4505", "sighting_of_ref": "indicator--49b60b32-69bf-4392-8416-34ac8f926f73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f179565-3bce-47c1-886a-0b1372bc56dc", "sighting_of_ref": "indicator--439b9d6e-63a0-499d-9fdd-14076a137ee7", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89211b98-3f66-4d64-837c-4cc47f13873a", "sighting_of_ref": "indicator--439b9d6e-63a0-499d-9fdd-14076a137ee7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00be757-5ab3-49a9-b4c2-b6f126bc7f48", "sighting_of_ref": "indicator--66d6b4d0-628c-47d8-9372-67cc763f0e7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ceef488-104f-4de4-8b7b-f68ad6a368f1", "sighting_of_ref": "indicator--87660f38-1e98-449d-b59d-de27f1561a4d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f73ce2-3b1c-41a5-8d6e-f8b369b5ef02", "sighting_of_ref": "indicator--87660f38-1e98-449d-b59d-de27f1561a4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d048bde-f92a-47a0-9d3a-0dafda53077e", "sighting_of_ref": "indicator--4cc0d229-56f5-415d-b0c3-3154d4294470", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e58c33-a2b4-430d-9668-e811516e0736", "sighting_of_ref": "indicator--4cc0d229-56f5-415d-b0c3-3154d4294470", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf7e2bf-add8-4742-8765-ff426774093f", "sighting_of_ref": "indicator--90400e87-3a19-45bb-835f-ae7ec3e625a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aecc63-4493-4932-882d-5e2d56773706", "sighting_of_ref": "indicator--c23826ba-03b3-46b2-bbd8-e8aedc21cb89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a45dca-a69a-4214-b9d3-31430fba903d", "sighting_of_ref": "indicator--c23826ba-03b3-46b2-bbd8-e8aedc21cb89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d96935c-dc1c-430b-945b-eff669b5059f", "sighting_of_ref": "indicator--7b5a4131-08f6-4c1a-b8d5-80a55cc11e18", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a1d568-4dd7-45b2-8cad-78c6006a2fe7", "sighting_of_ref": "indicator--7b5a4131-08f6-4c1a-b8d5-80a55cc11e18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e1394-50a7-4932-bc28-97e683dda2f2", "sighting_of_ref": "indicator--444943c7-2483-4a1f-9792-baabc8068ec4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd334f8b-c531-4e99-90b6-3c786196bd29", "sighting_of_ref": "indicator--4cf47774-710b-40b9-9376-1e6d12579107", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0f38af-ad8c-40a3-875c-91f82c749940", "sighting_of_ref": "indicator--4cf47774-710b-40b9-9376-1e6d12579107", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b25ef97-ebbb-4093-98f1-f2adceb9641b", "sighting_of_ref": "indicator--67256214-4c63-4eab-b02b-40954f41cc81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35637809-ce7a-4d3d-8430-5bd51c6d7e51", "sighting_of_ref": "indicator--67256214-4c63-4eab-b02b-40954f41cc81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a393c98e-63c2-4ed0-b045-e80db0a3dd4e", "sighting_of_ref": "indicator--ecf1f3c3-6dee-4a54-86b5-55ce2d756dc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a612e402-04ed-4726-a859-86107ab4f7b5", "sighting_of_ref": "indicator--ecf1f3c3-6dee-4a54-86b5-55ce2d756dc9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b18f53-18c5-4e37-97d4-74f303930dd5", "sighting_of_ref": "indicator--b9d5fdd1-5b3b-46b8-a6e0-683711484d3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e372e3-25e6-4c5e-8caa-8d3586fdf298", "sighting_of_ref": "indicator--b9d5fdd1-5b3b-46b8-a6e0-683711484d3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dbf646-468c-41a2-b267-d8530335151b", "sighting_of_ref": "indicator--658c86de-5ea3-42e3-98ff-0595f5a2a7b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad209322-9bfe-4ed0-89f5-abbf04ec17fd", "sighting_of_ref": "indicator--80fc8a3d-f34d-4cbb-91c6-3df4c2389268", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51703f76-2604-4663-8c8f-7b62da9e8de9", "sighting_of_ref": "indicator--885fe0ed-23cc-40ee-a4ca-06f8695d7205", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0447b50-7ced-4813-be4c-4df56a0f910a", "sighting_of_ref": "indicator--885fe0ed-23cc-40ee-a4ca-06f8695d7205", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb51e2a1-5ebf-450c-9d64-dbf2f604e78d", "sighting_of_ref": "indicator--38699668-2f1b-45d5-9621-19093056bd4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f92f75-0150-4672-a87c-9db2d6b389a2", "sighting_of_ref": "indicator--d52f8d05-c22d-4b29-8052-a0bc079666f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677a0689-0c99-4553-8f66-e2ca9ac96d55", "sighting_of_ref": "indicator--d52f8d05-c22d-4b29-8052-a0bc079666f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d53dd-7828-452e-96f5-2e5c5a7851b0", "sighting_of_ref": "indicator--6c1a3261-5340-4d4d-936b-41767a80be2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58de9e8-2419-4163-9038-de09a49d3064", "sighting_of_ref": "indicator--31356b7f-4e45-4935-a1a6-802d8831d6d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b327c95-7731-4b39-8dec-6de45655f59a", "sighting_of_ref": "indicator--acdf1335-e49f-4540-81ee-a9569e19b570", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d318e-138e-4ef5-9352-42bc2e69c3da", "sighting_of_ref": "indicator--5647c6da-d7ce-47f9-9a18-8d111630ab93", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc63197-5bd2-443a-9f14-ac67498e1319", "sighting_of_ref": "indicator--c07cd490-1de4-45d9-8943-e03e88f26c3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163d5ae5-8a5a-49d6-8c73-3e88b91ffc5d", "sighting_of_ref": "indicator--acb75e31-c86b-4ab5-a7c2-49e45e6c463e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8f127f-ae5b-44d0-8fcd-769ccd275dfc", "sighting_of_ref": "indicator--2a673fa2-48eb-43fd-a6a0-c9cdd4d2f2d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e32fd-d3ec-4c0b-942f-50771e53c740", "sighting_of_ref": "indicator--b110f75d-23a4-4950-be81-aa9126c1ea87", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbecd28-b0e1-43c1-abd0-cfae2a1ea8b5", "sighting_of_ref": "indicator--b110f75d-23a4-4950-be81-aa9126c1ea87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46af6c84-2c81-4809-851b-94421d96f556", "sighting_of_ref": "indicator--7c7063bf-6b26-429c-b84a-00a8a57abeb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c05dce-4aac-419e-aace-f81d0c7aa64b", "sighting_of_ref": "indicator--d410aeae-5deb-444f-970f-8eb9c323fd6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c097c18-fcc9-4bb8-b0eb-e432fdd8fda1", "sighting_of_ref": "indicator--31c464a3-8b27-4d0f-8500-bc63ce6c068a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee00072-4e9a-4213-ba1b-c7dfb6a2a628", "sighting_of_ref": "indicator--2f0b995a-a5fb-4936-b98c-369a22563a23", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1c4c7-2940-4866-9ee3-0965107dc2c3", "sighting_of_ref": "indicator--85368dbc-47ab-4e08-8e29-7ad62e6421cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9733fdf9-4810-4667-ba8c-a001fb1df888", "sighting_of_ref": "indicator--c8d0bae0-04cb-421f-9a74-58d7cd0a98fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b62cd1f-69b2-4063-94a3-28ae960e6142", "sighting_of_ref": "indicator--86276966-f352-405e-a86a-79899aee805e", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689e8338-f54d-4c41-b190-51d2b7eb9d51", "sighting_of_ref": "indicator--86276966-f352-405e-a86a-79899aee805e", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1982b2-2286-4f22-ae63-79faa4461389", "sighting_of_ref": "indicator--11598f82-9d28-4b2d-97cc-34d511cc3b2a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c47f1-6960-45c1-b069-bfbdcc53fd5d", "sighting_of_ref": "indicator--80b49dbc-05d9-4e0e-81a5-28e09602ab13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b243f8c1-7106-406e-bc66-796c3c17ff8b", "sighting_of_ref": "indicator--dcfc567c-6433-4a56-962a-3d17a1c34b78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a1dead-5744-4670-a06f-546ed3145d62", "sighting_of_ref": "indicator--2a738fbc-dc96-4d1a-b5ae-18b44ea16b68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7418daf4-e4b2-4c76-95ca-aa7c0c9636f7", "sighting_of_ref": "indicator--81719833-8aea-4638-9a43-300c1b6b530c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6142c47e-59ae-4e46-b4a3-0fa940d3c599", "sighting_of_ref": "indicator--9085d533-e386-4912-8f58-e5f0941f10e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5680e5ff-ba8e-4215-900a-bbf60dbfec78", "sighting_of_ref": "indicator--5d4e2b6d-3383-4cc8-8829-5b3c8d25102d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7d251e-7171-4721-82b7-23577df6c33a", "sighting_of_ref": "indicator--503aec9e-6744-4ae9-848d-6c3c5b0dfb8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932df4b2-b69e-4355-b5aa-1707db01d70b", "sighting_of_ref": "indicator--d91fe686-a1c8-4540-8d3f-bf3d904e80a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a48246-332c-411a-ac76-366fe55d049f", "sighting_of_ref": "indicator--635d28b5-9b8a-47ee-8f28-a6f67be4be56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e22bb2-dea6-4769-aaea-0c92b8393db0", "sighting_of_ref": "indicator--1face0fb-8c41-4530-85c7-ed45eb5b67f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3306eed-6e9b-4aa2-a2cb-f73a8a8b69bd", "sighting_of_ref": "indicator--1face0fb-8c41-4530-85c7-ed45eb5b67f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff691d61-e7c7-4786-810e-70108902f338", "sighting_of_ref": "indicator--8b0300f9-950c-4810-840a-8a3e996fcab2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27401ca6-1c8a-48e7-8712-97f27085ac8d", "sighting_of_ref": "indicator--fc594983-8a71-43e7-92cf-5976f0b7ce24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6589b15-aec7-4047-8219-a69df3fe0741", "sighting_of_ref": "indicator--cb4f9444-5580-4c8a-8544-c7d86c899f52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca38e2be-4eb5-4b4b-a743-dd15d7681976", "sighting_of_ref": "indicator--d8d0b341-66e3-479f-88f5-0fcce45e3194", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f466bc-7bcf-49dc-98d1-a77ef5fb11f3", "sighting_of_ref": "indicator--e3a200a9-fef3-4b95-a080-dcc6cec22b37", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b9ebcd-e029-4d17-b1db-ac7f3444a109", "sighting_of_ref": "indicator--a99577ca-4a45-4145-b688-f60ebb3afcb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1256f6-e5fc-451e-8e64-f2274d2a438c", "sighting_of_ref": "indicator--7ec52310-72d3-4125-96ed-b3e383f7bc75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abdfd32-2f03-4509-8bc3-16b8ea85fae6", "sighting_of_ref": "indicator--df95aec0-5259-4441-8c30-6c0117f77074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890ff64a-6e53-40c3-b636-8f2298c43e81", "sighting_of_ref": "indicator--d53ee0d2-9421-4f29-b2df-d5f1deb0d7af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc038b-4932-4a2e-8873-7a274891eb93", "sighting_of_ref": "indicator--d53ee0d2-9421-4f29-b2df-d5f1deb0d7af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f506d0-61db-49a3-aff3-00bbf1b89960", "sighting_of_ref": "indicator--ea870fd6-df6a-4eaf-ba45-5cac6c4f2c0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e945974-95e4-436f-a6a8-fd9b5cae0c8b", "sighting_of_ref": "indicator--4b12525d-afe4-49da-9a7d-f285372ea622", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ee6ae1-37e6-45ea-a036-acbfbf72f8b5", "sighting_of_ref": "indicator--4b12525d-afe4-49da-9a7d-f285372ea622", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a9b173-a904-4fdf-9a15-0409eb52e5b9", "sighting_of_ref": "indicator--34dc8b44-d51d-4b64-9bc7-b4ba823b88b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a9c0ba-4aed-4c7b-97e1-0692aa1e2f40", "sighting_of_ref": "indicator--34dc8b44-d51d-4b64-9bc7-b4ba823b88b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6421b64c-4144-4ca1-b8ea-68c7ead37859", "sighting_of_ref": "indicator--679c4424-a92d-4a7e-8f60-68c85501f9bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7f54e6-b315-4569-8368-f4c41a5d5b43", "sighting_of_ref": "indicator--679c4424-a92d-4a7e-8f60-68c85501f9bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db5b26-50dc-4cbf-affb-5c23e30388ad", "sighting_of_ref": "indicator--e76f387a-c5a2-4a97-85c9-475cf6d2cfe0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7314c9-e686-4193-988f-82216f8f580e", "sighting_of_ref": "indicator--e76f387a-c5a2-4a97-85c9-475cf6d2cfe0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8611c7e8-c779-42bb-b319-40f50d0d6950", "sighting_of_ref": "indicator--67f64dd5-fa87-4a67-8805-21017a70c0e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58691a5-9837-49fc-b297-6e79baa55f34", "sighting_of_ref": "indicator--67f64dd5-fa87-4a67-8805-21017a70c0e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d9aa1c-dbd4-4783-8d88-8779dd4f4fab", "sighting_of_ref": "indicator--d34d26e9-5b1f-4269-91de-9e23eb872512", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a94be95-d0b8-4a39-986b-7021ca7d5012", "sighting_of_ref": "indicator--d34d26e9-5b1f-4269-91de-9e23eb872512", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a49f41-0337-459f-864b-4fbaa21ce3eb", "sighting_of_ref": "indicator--d75bde81-762f-41b1-a897-a65c604165ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188a6153-d925-4ca2-8a4c-68b0cd23bcdc", "sighting_of_ref": "indicator--d75bde81-762f-41b1-a897-a65c604165ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959cdfd4-24d2-4af5-a453-81eae6b3a3ae", "sighting_of_ref": "indicator--38c0faa7-4e61-4277-a15a-eb1f92a52f17", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17c3780-d3eb-4fbc-8087-d63ec9c88c31", "sighting_of_ref": "indicator--38c0faa7-4e61-4277-a15a-eb1f92a52f17", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792c212b-3b5a-47d6-838a-c7a76557a791", "sighting_of_ref": "indicator--bb41e11f-7db3-4eaa-a479-1ec63b14d9cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043e11f6-98a5-49e4-aa7d-bae9c3253fa5", "sighting_of_ref": "indicator--35864592-f1b2-40dc-8081-a86cc5a94aa1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2adbbd-77e7-4129-86d7-3330caad4010", "sighting_of_ref": "indicator--c1c0c2a8-5440-4162-b60d-4a83f01bf936", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a484f9a-4ac4-4503-bd95-d4e75029a4d9", "sighting_of_ref": "indicator--43fd0479-625f-4593-b8d7-a2779c6e020d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb3b910-326c-4d29-ba8b-17bb2f50a4a9", "sighting_of_ref": "indicator--43fd0479-625f-4593-b8d7-a2779c6e020d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d10ec-2ecd-40c8-a5bd-17953210f737", "sighting_of_ref": "indicator--5af8f0e5-0639-4466-8965-8a43e8542e02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df01b89d-e15a-45c7-a0a7-09cd904dfca2", "sighting_of_ref": "indicator--5af8f0e5-0639-4466-8965-8a43e8542e02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bab8ab-d30c-4aa1-83f6-a84bfbb5baa0", "sighting_of_ref": "indicator--b50c4edb-6651-45f2-8480-73e19ea6f16e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b109bd-3c19-4dc0-a900-2f420cdf0d7a", "sighting_of_ref": "indicator--b50c4edb-6651-45f2-8480-73e19ea6f16e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6f3b5f-c1b2-48d0-9d80-b9700ef6df7b", "sighting_of_ref": "indicator--28948115-b912-497b-baab-cd07e22ac784", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a73686-f9ac-455c-9221-a0c19dffceb5", "sighting_of_ref": "indicator--28948115-b912-497b-baab-cd07e22ac784", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cba7f04-7d64-4a53-840f-1b0f3ec74bf2", "sighting_of_ref": "indicator--7a096081-ca55-41df-9ef6-71cdc79f8a7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9351be12-ca95-4bed-af6c-e0fa87c4143b", "sighting_of_ref": "indicator--7a096081-ca55-41df-9ef6-71cdc79f8a7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539ac05e-1ac5-412f-b388-aedb40cdcb9f", "sighting_of_ref": "indicator--ec14b083-fe57-4168-8f76-bbb31059c595", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf48b89-4f06-473f-92ce-3190ec17f63d", "sighting_of_ref": "indicator--ba80306b-d997-473c-8c67-ac6769a56f1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3305b054-075c-4029-a40a-f4b7da437e9a", "sighting_of_ref": "indicator--0204778a-de6f-4a50-881b-a30cbfbd3da3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2a3ae5-2627-4d01-9c6a-4c849d55c756", "sighting_of_ref": "indicator--35e6370c-ef25-41f8-b9e6-d880cdbc7b57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d20afc4-11cb-4760-8ffb-b4107dc5c11a", "sighting_of_ref": "indicator--85633ceb-afe8-4e08-8d8b-91c3427a5759", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc21caa-4cd6-47fb-a39d-e32148db2fa4", "sighting_of_ref": "indicator--61fd9b21-f55d-40c1-abe6-558149b472ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23494932-9179-4c64-91c9-1d8718dd7274", "sighting_of_ref": "indicator--19c2a3e6-7401-4a95-b54c-8127872ee5af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a82448a-2d15-4689-972c-37e7edd6107e", "sighting_of_ref": "indicator--c2ff1f88-b1e1-4fb0-9293-ab3fcd5f8055", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0897fd9-a563-48bc-982a-4b10ab176141", "sighting_of_ref": "indicator--c2ff1f88-b1e1-4fb0-9293-ab3fcd5f8055", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086e461f-55a9-4473-ad5e-d9dc175780eb", "sighting_of_ref": "indicator--c2ff1f88-b1e1-4fb0-9293-ab3fcd5f8055", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bdc147-e8e7-43f2-b327-ad56cf1d6fe7", "sighting_of_ref": "indicator--5238939d-afaa-4f4d-9476-daf48d51f730", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b45c1-6f5d-4f1e-97f4-64b85e1d7445", "sighting_of_ref": "indicator--de3aef3e-8af4-4e07-b6a3-772d8ceebfb4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f30369-c28e-45b9-b900-bd15613c73af", "sighting_of_ref": "indicator--20f4b1d7-b840-4770-8169-88e9ba50df6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bceff04-ae75-460a-8a43-5db86de7a06a", "sighting_of_ref": "indicator--20f4b1d7-b840-4770-8169-88e9ba50df6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a962ad04-c282-4fd0-8711-629a3de2cfcd", "sighting_of_ref": "indicator--3583abfe-4b0e-47e6-a2a2-ba1e8d52e41e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff676a7e-01f6-4158-a14a-8b1c4c24e500", "sighting_of_ref": "indicator--3583abfe-4b0e-47e6-a2a2-ba1e8d52e41e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4a51dc-b954-45ec-bc59-557bd64a08bb", "sighting_of_ref": "indicator--3ab457f9-c65a-4ee3-9ca4-50253423c3b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef24af0a-0000-4d71-b3e8-4a5a4ba8bfe9", "sighting_of_ref": "indicator--3e3a9fa6-e950-4a6c-a324-2d5b9bb3903b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78bfa35-5d26-4d89-a39f-cedbf8085ab0", "sighting_of_ref": "indicator--3abe5e71-3425-45fd-8a8c-7c91a7eb37b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a537370-64a8-4156-aabc-790c13689b96", "sighting_of_ref": "indicator--444abb9c-22bd-4a87-81d7-540cc219f1c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7e7461-60f6-41e4-ac3b-46644575bb21", "sighting_of_ref": "indicator--01b5d16f-3d92-4f94-a9b8-7834bbf9096a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b786300-526a-4f37-8215-47bc19289dca", "sighting_of_ref": "indicator--e92910b3-0067-439d-be09-ea0f10745a78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0a2925-0813-4c59-84d6-4858b358ac0d", "sighting_of_ref": "indicator--e92910b3-0067-439d-be09-ea0f10745a78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1b7d3e-6f1a-4a42-bd4a-d9188eb91c25", "sighting_of_ref": "indicator--c220b470-f571-4c31-9a7f-a4856760108d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4444d6-089a-4cc4-bd3c-8e2aaedee6b8", "sighting_of_ref": "indicator--c220b470-f571-4c31-9a7f-a4856760108d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517e2583-cde7-44e9-abe9-b1dbee3e5292", "sighting_of_ref": "indicator--2dab1331-133b-430c-8551-aeb4c5051232", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0a7081-db7a-4dcf-b6ef-a5288a358e52", "sighting_of_ref": "indicator--2dab1331-133b-430c-8551-aeb4c5051232", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1c52af-b937-41da-8e77-d5eeff892b67", "sighting_of_ref": "indicator--1cbb0fc0-992f-458b-81d2-a6bcc372d4ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706f2e3a-6729-466d-915e-a55a0afb26f5", "sighting_of_ref": "indicator--a922bae7-57bb-4bad-b2ff-c704c1a53ddf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b276b64-82e4-43c5-9323-b3adac9faef5", "sighting_of_ref": "indicator--f293816c-9092-4a04-9dec-7de13b4f3479", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3822bd-8874-4f11-ad2d-512d4304b3c8", "sighting_of_ref": "indicator--9ba91610-25a6-49a5-b916-122986560968", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01d8245-14db-40d1-9ee7-9b619ff7d8cd", "sighting_of_ref": "indicator--906b6510-83d3-4e10-944a-5210ed9f3e4e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ae34b1-7cbd-4b28-9874-d003ce399ed5", "sighting_of_ref": "indicator--041ea204-20eb-4582-9fda-1d28a0e3c245", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380d658b-8bb0-49c6-985b-52744619d52f", "sighting_of_ref": "indicator--041ea204-20eb-4582-9fda-1d28a0e3c245", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7178501-ca34-4b28-b1a1-42e68795f75d", "sighting_of_ref": "indicator--2ae611d1-06ab-4034-9f28-6cb557cdaa57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbca1c9-58ba-43ff-9fc6-7c12bdd2a89f", "sighting_of_ref": "indicator--25b51540-896e-4726-bf90-7c4843173a3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14456672-c72e-48e5-8d70-5d1cc0398367", "sighting_of_ref": "indicator--25b51540-896e-4726-bf90-7c4843173a3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cb3bb7-b24f-4ce3-8a99-5a1671f7f9da", "sighting_of_ref": "indicator--adcb65d9-4bcb-4254-9fe3-58b670a0847f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751693c3-0a3b-4f28-bfa1-cd236f4c913c", "sighting_of_ref": "indicator--3a4ff0ab-31e6-4978-a293-1a938cb67da5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb5c889-05b2-4314-b426-fcfcb01d07fe", "sighting_of_ref": "indicator--ed1e5435-b864-48ef-ba99-0166358a8a05", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321d8795-dc30-4bfc-9502-a37511540661", "sighting_of_ref": "indicator--b591bec3-e203-4005-b674-a581c4cafbc7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0051e970-c6df-41f4-a712-184fad461f6b", "sighting_of_ref": "indicator--b591bec3-e203-4005-b674-a581c4cafbc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bb8658-281f-4c4d-be04-1184e5086c4a", "sighting_of_ref": "indicator--329b5134-a6ca-4634-b787-52c895c46870", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf6f6b6-73ae-49eb-aea0-fbf237342b02", "sighting_of_ref": "indicator--25bac802-99c7-4a51-877f-24052dc134bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8d14a7-9154-4471-bdf9-4877ed76b997", "sighting_of_ref": "indicator--24045fc9-59f4-4f57-ba9f-f908c11d57c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e52fc6-e21d-4299-b635-50326acb31c7", "sighting_of_ref": "indicator--24045fc9-59f4-4f57-ba9f-f908c11d57c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c26a92-f333-40a5-b7f5-c7e1f1ddca19", "sighting_of_ref": "indicator--9c6ad027-8a0d-4ed3-9f8e-59cd645e482c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a09c032-56e9-46f8-a240-cb12d5fcbca2", "sighting_of_ref": "indicator--1dba07de-c15d-4ac6-8d5b-6450497226d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf141ffc-e16e-4cc2-827e-8c004b1d94f4", "sighting_of_ref": "indicator--80937630-f019-45e7-8c45-339b63e71e02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19c29bb-292d-4783-aac4-bd4421ee2ec8", "sighting_of_ref": "indicator--5d5c1b86-e557-482d-b159-4a2eed223e15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d483b261-80da-47a5-99d0-2fa8ed923986", "sighting_of_ref": "indicator--728e63bd-5579-490f-bbc0-336e91dee216", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e72cbb5-2f11-48ff-84c4-f60ecd24cf38", "sighting_of_ref": "indicator--80759a08-4377-4485-b718-df846317175d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d4ac9-7d17-4eb4-9a68-e25bf4d18616", "sighting_of_ref": "indicator--2aa9e687-7e2e-4863-ac69-c0346e28cc7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1c3bc3-a2ec-4fd9-b7cb-ef1c599fbb40", "sighting_of_ref": "indicator--2aa9e687-7e2e-4863-ac69-c0346e28cc7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c9c808-5909-4040-a946-2f593bb5c882", "sighting_of_ref": "indicator--51886332-39f7-4e0b-9158-f66dcac49b97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22973669-73f7-429f-a8c3-c8c5658b3854", "sighting_of_ref": "indicator--8ed02adb-3e58-4b55-ac94-99d6c15b35ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723efdf2-19c1-4ba8-b440-aa64946eca34", "sighting_of_ref": "indicator--69130fde-5ff7-4bfe-8068-02357f673f55", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f91d93-fe82-4215-bb7f-26d62818d3ad", "sighting_of_ref": "indicator--54c68bab-57ea-44a1-a640-75553014193f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4185571-1cb7-4d11-bf89-8760d33bfca2", "sighting_of_ref": "indicator--cebef97c-354d-444f-94f6-41b30d8561e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4c6711-a324-4191-99ca-cf774140fb94", "sighting_of_ref": "indicator--a007aaa8-fc8b-4c96-b582-0e205ec98da5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4f6123-2dde-4707-88ee-424084964d53", "sighting_of_ref": "indicator--e7233611-f94e-4b0d-a399-e4e7183e6817", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79331955-42fe-4521-a1af-7c9cab0f1a11", "sighting_of_ref": "indicator--e7233611-f94e-4b0d-a399-e4e7183e6817", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4db0dc-cef5-457a-a5b1-0f153237685e", "sighting_of_ref": "indicator--7831c8be-c3b4-4a66-8cc8-98e7a2541bb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e0d0da-b423-4471-bef3-e8ae3902c93e", "sighting_of_ref": "indicator--0e40aa2e-3067-40d7-a4fa-f151b993a5cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43909b1-0c0b-4b20-bced-8054e53c8b79", "sighting_of_ref": "indicator--8874d2c4-6837-4cd0-8aa5-9d6386b634b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e0e118-719e-418a-b463-2c7116144e8b", "sighting_of_ref": "indicator--eea9a882-de75-441e-b710-3819d8c283b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f482439d-0d78-43ed-b6a7-3e905c83fb01", "sighting_of_ref": "indicator--a01e5a17-b8b7-48f1-b852-d980a34338e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92c0ae6-0c36-4c16-850b-abc53bdcde83", "sighting_of_ref": "indicator--a01e5a17-b8b7-48f1-b852-d980a34338e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650717f0-a8af-4970-b50e-f2422964d857", "sighting_of_ref": "indicator--a15eed88-0707-4739-8e8c-a572b256ec0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004771f7-5be8-4a93-bce3-c9f5b9719054", "sighting_of_ref": "indicator--ebc9d3b4-5ea1-44a4-8419-bd6b08f7c25f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a748369-f608-4ef4-9a7f-1c87e071c974", "sighting_of_ref": "indicator--c1715fd0-6ccf-4944-bdbf-9df03a0a343b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fab5b8-34bd-4eb2-a8c5-d3d1b4bf30e1", "sighting_of_ref": "indicator--c1715fd0-6ccf-4944-bdbf-9df03a0a343b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc92b3e7-0bc5-4f53-a493-7c700e738814", "sighting_of_ref": "indicator--996ed699-27a2-499b-a04d-1216d0439fe5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf6d105-b185-4e97-96b2-24ea7bf8b38c", "sighting_of_ref": "indicator--996ed699-27a2-499b-a04d-1216d0439fe5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa5aba-b9ea-4e2c-9384-6e9bd17c9e04", "sighting_of_ref": "indicator--17db7911-e5d6-444e-8ace-4685cbd653ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2589c73c-99ee-4e53-85b4-7caf38f7e5b3", "sighting_of_ref": "indicator--f91db482-b7ab-4003-a73b-7ff8a5e75b00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89e38fe-0736-46a5-83f7-8bdd2001e632", "sighting_of_ref": "indicator--bf20d319-6b66-47bd-9641-6d692383c29f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2b7330-3f9e-4746-ac6f-ba29832686e4", "sighting_of_ref": "indicator--bf20d319-6b66-47bd-9641-6d692383c29f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d7a0f6-f138-471f-ac7f-9b6c24da197c", "sighting_of_ref": "indicator--17685372-00e8-432e-881f-0be5839a8f65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91cb8da-c86e-4a44-8d4e-211fea7e2111", "sighting_of_ref": "indicator--17685372-00e8-432e-881f-0be5839a8f65", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8246f9d9-d89f-41dd-add2-7f762e9dcd37", "sighting_of_ref": "indicator--296fc12f-1f6b-4e0a-bb38-f19c69620a8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea95045-a3aa-4880-9be2-d2076f2af047", "sighting_of_ref": "indicator--bbbe785e-507f-441e-8c03-6eb7f72b8dad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ee35dc-367e-47a6-9134-cbf1f134d96e", "sighting_of_ref": "indicator--bbbe785e-507f-441e-8c03-6eb7f72b8dad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da57a4d-252f-4aa8-810f-fce3f2a42b0b", "sighting_of_ref": "indicator--b89023ca-570b-466a-940b-e8d7f8fd5086", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731518eb-4ddd-4348-bb46-38fe0079682b", "sighting_of_ref": "indicator--b89023ca-570b-466a-940b-e8d7f8fd5086", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaa173a-daf6-4254-8299-6900ea2f7d5e", "sighting_of_ref": "indicator--d68cb201-be90-4a16-a493-d3d2381c9483", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58916d1-f6dd-4175-86f6-484d7d29de9a", "sighting_of_ref": "indicator--d68cb201-be90-4a16-a493-d3d2381c9483", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1528a15-d165-4016-b862-dc1fa9f9d883", "sighting_of_ref": "indicator--4a1ced2d-2763-4078-b342-f2a9f44b696f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2761e484-593d-4962-b3c7-8fdfabe64bdf", "sighting_of_ref": "indicator--4a1ced2d-2763-4078-b342-f2a9f44b696f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f021ec9-209a-4611-b885-aa832cc261fe", "sighting_of_ref": "indicator--5890c7db-7068-4be8-a8ae-7aafd13746db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92864312-d4ff-4505-b2f1-194aedb46eac", "sighting_of_ref": "indicator--5890c7db-7068-4be8-a8ae-7aafd13746db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47c626f-b458-4c8e-bf24-35c89933a73e", "sighting_of_ref": "indicator--9a323340-a120-426c-a474-aeaafc81eb65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab585c8b-18f4-46c7-9177-b2db8a418996", "sighting_of_ref": "indicator--9a323340-a120-426c-a474-aeaafc81eb65", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4f8b74-a5fc-40b9-b3fe-4d430d58fb38", "sighting_of_ref": "indicator--57c6390a-5d72-437a-a727-4e5c876c54d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eabb48c-c01e-48a9-8008-c820be25b1be", "sighting_of_ref": "indicator--57c6390a-5d72-437a-a727-4e5c876c54d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24522fbe-21e8-453d-9f50-811ea0b728c7", "sighting_of_ref": "indicator--48ee650d-3c66-4146-a458-df405cfe9a26", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f561d3-52f9-4cd3-89d2-e86fea541d68", "sighting_of_ref": "indicator--48ee650d-3c66-4146-a458-df405cfe9a26", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ab2712-9bcd-484c-8683-27ef66f4bff8", "sighting_of_ref": "indicator--a95c43a8-46bb-4c52-9bfc-cc5ca350da27", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd5c92d-9cfa-4be2-b001-ecdfa24d33f2", "sighting_of_ref": "indicator--a95c43a8-46bb-4c52-9bfc-cc5ca350da27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a8930b-e567-46af-950f-fe4292380550", "sighting_of_ref": "indicator--36efc60f-86c3-4b59-b019-0390ef590074", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fdd321-b8df-45c6-8c7f-ab1202716ea9", "sighting_of_ref": "indicator--36efc60f-86c3-4b59-b019-0390ef590074", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52020afe-5170-49b8-b2b3-cc4b912aa874", "sighting_of_ref": "indicator--bf8080ec-cedb-42e9-9703-b45827b04229", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a04a548-49ac-4cec-806d-8e4641bbd7f4", "sighting_of_ref": "indicator--bf8080ec-cedb-42e9-9703-b45827b04229", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce789783-ea9c-4c6d-a238-e19c5b0d5a0e", "sighting_of_ref": "indicator--810b8168-a723-48a2-bace-6c0887e99fdd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71e56bc-d9ae-42c4-8c62-bf7df197fc69", "sighting_of_ref": "indicator--810b8168-a723-48a2-bace-6c0887e99fdd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a9ccc4-d577-417c-8f38-080380c69e81", "sighting_of_ref": "indicator--d4df4952-f3a8-470c-9f45-de5d77b8b6c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e2147c-8cc0-4794-93d8-1fb5cfc95aaf", "sighting_of_ref": "indicator--d4df4952-f3a8-470c-9f45-de5d77b8b6c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0871ceb9-2991-46db-87e6-a583a4b1f7c0", "sighting_of_ref": "indicator--265e8908-aa17-43c4-b8f1-e6630a1a9566", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbe8f70-85d2-48bf-97ef-5bd8830b648e", "sighting_of_ref": "indicator--265e8908-aa17-43c4-b8f1-e6630a1a9566", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92374055-f82c-4b5e-9c72-f81788e839c8", "sighting_of_ref": "indicator--62182130-6656-43c9-acbd-fa3c3eea65c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bd4dc2-692d-474f-bc24-06ad77fb895f", "sighting_of_ref": "indicator--62182130-6656-43c9-acbd-fa3c3eea65c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100f1886-0976-45e9-9e06-f0651bb72ecb", "sighting_of_ref": "indicator--d6001fc8-7546-4f75-a7ed-1ac089648466", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4980ad90-d666-4d50-a4d0-4491083a2fa6", "sighting_of_ref": "indicator--d6001fc8-7546-4f75-a7ed-1ac089648466", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bda9c06-28ca-4432-bc22-988f69f0d21b", "sighting_of_ref": "indicator--eaa84429-7fb6-48fc-b1f8-817a3823462e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e4e363-3a00-447e-963c-5f85f7c89df2", "sighting_of_ref": "indicator--eaa84429-7fb6-48fc-b1f8-817a3823462e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e9a8d-ee9a-4c76-a2f8-0f3b38edbf09", "sighting_of_ref": "indicator--213d9e3a-83f1-4771-9ab4-18c912dbd716", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a8e6a4-0ae6-45ae-a77f-8fff93443792", "sighting_of_ref": "indicator--213d9e3a-83f1-4771-9ab4-18c912dbd716", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477038ec-ee2b-4b94-ad8e-a2c941c8e211", "sighting_of_ref": "indicator--d479fd2c-c06d-4a5e-8264-82539ce2dacf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9263bdd2-3ecf-411e-8081-b844a6fe0157", "sighting_of_ref": "indicator--d479fd2c-c06d-4a5e-8264-82539ce2dacf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c675f22c-6fb4-4631-bd9a-00b27b2ac16a", "sighting_of_ref": "indicator--5629c7a0-4771-4f0d-87c7-aa7ff6901c7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf5e2a2-3d25-4539-abd7-dbb7185e684c", "sighting_of_ref": "indicator--5629c7a0-4771-4f0d-87c7-aa7ff6901c7a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b723aa-8d9b-4069-bb76-73b70ef94377", "sighting_of_ref": "indicator--72a16f19-c691-45fd-bcee-5f4f37f16fcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fffcd3-8ced-4f01-8daf-648925433299", "sighting_of_ref": "indicator--288029e6-5ccb-4e64-99a6-ac9193aeaa84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a721c757-2441-4b6c-85a2-19229803b749", "sighting_of_ref": "indicator--288029e6-5ccb-4e64-99a6-ac9193aeaa84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6490760d-2b09-4a80-a165-49f46c19fd10", "sighting_of_ref": "indicator--857ffee5-a28b-4335-bf90-5ec37e7cb0ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5d5f46-ebe0-4f68-a1a7-a3bc97ef99b9", "sighting_of_ref": "indicator--857ffee5-a28b-4335-bf90-5ec37e7cb0ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e5eaf0-fc43-4a7c-9703-b781c5f5482d", "sighting_of_ref": "indicator--052c83c6-c19e-49bf-a265-149449bd3bbd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64136b9-423d-4a49-ae27-be9ec142f5f0", "sighting_of_ref": "indicator--052c83c6-c19e-49bf-a265-149449bd3bbd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0b861a-af67-4fe5-ad39-471ba22a6291", "sighting_of_ref": "indicator--d1ccf4b1-e3a0-4331-bbfb-bf2461e6608d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca08369-b9a2-4096-bbba-d02e13aee79b", "sighting_of_ref": "indicator--d1ccf4b1-e3a0-4331-bbfb-bf2461e6608d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175e9da7-d06b-4a0c-9908-173f094bbf83", "sighting_of_ref": "indicator--efdfbad9-a845-4d73-a90d-461a7405f23d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76ed6c-e755-4119-bc48-ed3c68de940a", "sighting_of_ref": "indicator--efdfbad9-a845-4d73-a90d-461a7405f23d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1254d9-d781-4ab3-a162-b2017c15eaeb", "sighting_of_ref": "indicator--d4355d9b-bd5b-4d3a-9ee2-afaec207bf55", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3515a96-7ce9-4d7b-95b0-0faa10e1229c", "sighting_of_ref": "indicator--d4355d9b-bd5b-4d3a-9ee2-afaec207bf55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cd51d4-f73d-4baf-88c5-1aaf432326ce", "sighting_of_ref": "indicator--ca20cf10-721d-4fdb-b80f-b1404c2b7d51", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5557dde-84e0-4c72-905b-96689cd5a6b8", "sighting_of_ref": "indicator--ca20cf10-721d-4fdb-b80f-b1404c2b7d51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa5abda-e89d-45a7-a773-04a2bd26ee3b", "sighting_of_ref": "indicator--a65cc3b1-38e5-4cf2-8b4d-4bc5754a5d1e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4717c7e-6a29-4a89-a04d-4311ab48a7a6", "sighting_of_ref": "indicator--a65cc3b1-38e5-4cf2-8b4d-4bc5754a5d1e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d481ae7-0ecf-448e-b544-5785dd337352", "sighting_of_ref": "indicator--ed6748fd-2b5d-48d5-a914-3439404eae6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364ddf0b-f485-4e98-a502-6a48bc25d3cb", "sighting_of_ref": "indicator--ed6748fd-2b5d-48d5-a914-3439404eae6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcbfb22-752f-44b1-9ce4-e6e3205b3cd8", "sighting_of_ref": "indicator--432d6b11-a3b1-4674-90f4-cd7b15edc0fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1244cf96-c42f-4f01-87be-30eef5d9c5ac", "sighting_of_ref": "indicator--f8c93b64-9c6a-4d65-a4ed-4132336bda5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e491b8-d2f6-4e15-ad81-73e535db3c57", "sighting_of_ref": "indicator--bdc765d2-c75e-4314-b2f1-18636b5ba3fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b280cd-adac-4ee3-8cb4-1289c9d6911c", "sighting_of_ref": "indicator--60f23634-14c8-4ce0-9b67-4f5932843ec8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a366fae2-3890-48d9-be0d-bf1b567ba2cf", "sighting_of_ref": "indicator--60f23634-14c8-4ce0-9b67-4f5932843ec8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef7a9a3-429c-4c6e-82ab-636c9612542f", "sighting_of_ref": "indicator--269af36f-7a35-40ee-86f7-e130387acbab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6782f005-3557-4915-8b1f-112339f9b003", "sighting_of_ref": "indicator--f5f4fcd9-ef9f-4f95-b56f-a5ad115d1640", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc4dbb0-dd51-46f8-868e-e9aaea3e6849", "sighting_of_ref": "indicator--88a1ea00-10af-4bb3-8127-01ba42522193", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e483d4c6-4f24-4ad9-be01-3a5ec9a346cd", "sighting_of_ref": "indicator--3306426e-fdc3-43ae-9278-a6f7f2d6ed4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20859c-4f6e-4fd5-a8f4-8091e787359b", "sighting_of_ref": "indicator--a3ce0275-4af6-4528-9264-95d18339890f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d19b40-aac0-47b7-844e-84cb6fde13b6", "sighting_of_ref": "indicator--a3ce0275-4af6-4528-9264-95d18339890f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58e1292-1e3f-446b-9891-cd438b251f9e", "sighting_of_ref": "indicator--85d5c4f3-cc2e-4176-af56-24738a887807", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9c6ed9-7ddc-47ac-99a3-c77d10ef633b", "sighting_of_ref": "indicator--85d5c4f3-cc2e-4176-af56-24738a887807", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b23b3-d605-468e-bb85-5f230527ba1f", "sighting_of_ref": "indicator--475c8df8-0d34-4079-8a04-3a4be4005282", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2cb597-8ec2-4f91-9477-64509739114d", "sighting_of_ref": "indicator--475c8df8-0d34-4079-8a04-3a4be4005282", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db20ec9-817b-40c1-acdd-5449974ea656", "sighting_of_ref": "indicator--29c24cfa-9677-4e7d-9907-9c6a985b2bbf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827e3c2-1da3-4a04-8455-e526962ebb05", "sighting_of_ref": "indicator--29c24cfa-9677-4e7d-9907-9c6a985b2bbf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1d3b1d-6b43-4cdf-8037-7a7fabc82593", "sighting_of_ref": "indicator--9dd98ac2-b72d-4f53-b89f-62e4656b5367", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2a3e97-2594-4166-9424-6db320b2b178", "sighting_of_ref": "indicator--9dd98ac2-b72d-4f53-b89f-62e4656b5367", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118c850a-f582-4819-960e-cec90d116e13", "sighting_of_ref": "indicator--208ab703-e12c-438c-8cfc-5bc3845d3670", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb37478-c630-4f06-bbc1-efa1023ce96e", "sighting_of_ref": "indicator--208ab703-e12c-438c-8cfc-5bc3845d3670", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75ad05a-f59b-42b8-a3c0-906d3d83d476", "sighting_of_ref": "indicator--652fdb16-ecbe-4be5-94a9-79f9d980e603", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dc1351-feb4-42bf-8fd6-a0c72b3007d7", "sighting_of_ref": "indicator--652fdb16-ecbe-4be5-94a9-79f9d980e603", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc657f75-5a08-49b6-a6f3-74d2393d0ab8", "sighting_of_ref": "indicator--812d4772-e6e6-43f9-a87e-da5008cafb3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd45e98-0e05-41fa-ba59-53a092e8b8f7", "sighting_of_ref": "indicator--812d4772-e6e6-43f9-a87e-da5008cafb3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bd1c1d-0b30-4c06-a64e-42ddcdcd44d2", "sighting_of_ref": "indicator--ed85914e-0476-499b-8bd7-b44749885fac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958eeb15-0706-42dd-a7f0-3e341bcd5a33", "sighting_of_ref": "indicator--ed85914e-0476-499b-8bd7-b44749885fac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a79af9e-630f-4aef-b260-30c99e924fc8", "sighting_of_ref": "indicator--8c026dda-98fd-498e-8da4-216ed626cdc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88c16fc-646c-473f-92de-a6f0225cc280", "sighting_of_ref": "indicator--8c026dda-98fd-498e-8da4-216ed626cdc0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e744443-8f65-4925-80d6-9414efa5f909", "sighting_of_ref": "indicator--1c8ba0eb-5fde-4d14-8fe7-b6ff4eebdfd2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d79014-8397-4914-9eb7-7712d84c0435", "sighting_of_ref": "indicator--1c8ba0eb-5fde-4d14-8fe7-b6ff4eebdfd2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f65098c-c9eb-464b-9be8-8420de943809", "sighting_of_ref": "indicator--0ac0bcc9-3223-4c72-83de-e01fdf882839", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eaf8a7-7bde-4da7-ac4b-db0e6942c654", "sighting_of_ref": "indicator--0ac0bcc9-3223-4c72-83de-e01fdf882839", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d508ce-429e-4286-a89c-c82dc72669f2", "sighting_of_ref": "indicator--cf8feb2b-d702-4df2-a8ff-b043e846c267", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9124a65e-7442-49fe-b83c-a03f55a0c6a5", "sighting_of_ref": "indicator--cf8feb2b-d702-4df2-a8ff-b043e846c267", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cdd3cd-fae0-467f-8113-778d3665628c", "sighting_of_ref": "indicator--ca75d799-64a0-4f7b-9507-df8634a86c49", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1f3d81-d9d8-475c-98c6-7fc1d3deafea", "sighting_of_ref": "indicator--ca75d799-64a0-4f7b-9507-df8634a86c49", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e841b1c2-d9f1-4aa5-b9e5-a8647a183972", "sighting_of_ref": "indicator--8cad71d5-ad6e-48e5-827f-4bbc88717bb7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8d4763-11f1-4d6e-a7c6-df3234c50121", "sighting_of_ref": "indicator--8cad71d5-ad6e-48e5-827f-4bbc88717bb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b403ae0-addf-4560-8532-59fee3fcf103", "sighting_of_ref": "indicator--a09691ba-1a3e-4964-9922-54aafe37832c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a504c8-fc11-4dd8-9e42-dcf99a43d49b", "sighting_of_ref": "indicator--a09691ba-1a3e-4964-9922-54aafe37832c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b7f5b4-650d-4b9d-b1a1-522b4807053b", "sighting_of_ref": "indicator--3fd671aa-50e9-46af-9698-87f77a0e05ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22752a8-0b63-4796-a2bb-5072f325c94d", "sighting_of_ref": "indicator--c3a07298-d5b0-4443-935c-1b44ba666dbd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64cac64-67b7-4887-bab0-350f555420db", "sighting_of_ref": "indicator--c3a07298-d5b0-4443-935c-1b44ba666dbd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26554b18-deb7-47f0-a2d5-d1b280720f81", "sighting_of_ref": "indicator--e254dd1f-e9db-43f7-a133-95db14fa2050", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4376b16-b12c-46de-a1fe-8c7b46434c7f", "sighting_of_ref": "indicator--d0a9071b-e3d5-49ac-8d97-218627e0cd7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a53c82-83c8-4636-bfcf-4e7bce3069bf", "sighting_of_ref": "indicator--d0a9071b-e3d5-49ac-8d97-218627e0cd7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8372e0-ab6a-4b9a-8118-5a1ede8f9aad", "sighting_of_ref": "indicator--6021c8f3-adfd-41a4-954b-866f45365c4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edebb1b2-2ea4-47b2-878c-3224efa5ead7", "sighting_of_ref": "indicator--6021c8f3-adfd-41a4-954b-866f45365c4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbad4735-08c1-4bdf-a704-c903b3cd0e78", "sighting_of_ref": "indicator--f4299ebc-8d36-408f-a6aa-d65bb162d66e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72f7f58-7fa2-45ae-9ee4-006d13ded6b3", "sighting_of_ref": "indicator--3c83236d-6e6d-47a1-9326-b0b78d18aa41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d84b93-a160-4a6a-b995-dc9a82d0d505", "sighting_of_ref": "indicator--3c83236d-6e6d-47a1-9326-b0b78d18aa41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a90e3d-bc44-4ec0-aa7a-11c29822e17f", "sighting_of_ref": "indicator--3604ac8f-bd77-48d9-aa50-93bdbf423085", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b1b0e2-75c8-4dd9-b170-cd5bd644eede", "sighting_of_ref": "indicator--3604ac8f-bd77-48d9-aa50-93bdbf423085", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea78e74-5086-447a-a9a5-4e58a32b2018", "sighting_of_ref": "indicator--bdfdec48-bbe4-4977-b802-db144c7eede0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0670f05-c27e-4326-be64-c2d7605cc136", "sighting_of_ref": "indicator--e201cbad-2547-4526-a450-6fc7db0a6c20", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7efa62b-7552-4d30-9a1b-d3f48bd57cc4", "sighting_of_ref": "indicator--e201cbad-2547-4526-a450-6fc7db0a6c20", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185436d1-7572-4c3d-bab0-830d3cccd80e", "sighting_of_ref": "indicator--d5f82cd7-be4a-4cda-a10d-37b7a548e5ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06848deb-8bf6-40a4-a217-ae69ab5292df", "sighting_of_ref": "indicator--d5f82cd7-be4a-4cda-a10d-37b7a548e5ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be27a50d-03e9-4fa0-81fb-ae93409840ce", "sighting_of_ref": "indicator--72449e2b-d11e-413a-aaf5-b71ffaf1d34b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a668d01c-ccba-4374-8905-7bb5d994ec68", "sighting_of_ref": "indicator--72449e2b-d11e-413a-aaf5-b71ffaf1d34b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27bf976-4167-4697-8361-9702dce95f76", "sighting_of_ref": "indicator--086464d5-b9d8-42b3-aa7e-79edce2422b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd827171-78c6-4ba1-982d-e312b7d1f318", "sighting_of_ref": "indicator--04b5b6ef-e2c0-4f13-a6a6-9bc91b5e4776", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b743b8a-fef0-4e40-8390-ccb6396bf7bd", "sighting_of_ref": "indicator--04b5b6ef-e2c0-4f13-a6a6-9bc91b5e4776", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc87c7-f452-4e05-8dd5-294a3e4dd120", "sighting_of_ref": "indicator--3f1c5cce-3e2b-4591-be1a-647af245dd6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a980e479-355a-4ce5-9618-3b7562780064", "sighting_of_ref": "indicator--3f1c5cce-3e2b-4591-be1a-647af245dd6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799b40b5-897b-42bb-aa9e-9911fdec5678", "sighting_of_ref": "indicator--df48464a-1ca1-4c66-b77e-50b64fe5e2ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38059707-b528-48e9-affc-b370d011aeee", "sighting_of_ref": "indicator--df48464a-1ca1-4c66-b77e-50b64fe5e2ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c656fe06-584c-49b1-9375-5a0e2517df23", "sighting_of_ref": "indicator--a368b444-5bb3-4435-8057-fe52fdc475aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1594838-3c86-4d59-999f-4e96a76c14e6", "sighting_of_ref": "indicator--a368b444-5bb3-4435-8057-fe52fdc475aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31581239-c5d3-4bd7-9fbd-20c3457b92a9", "sighting_of_ref": "indicator--cce1bb28-e0a3-4997-a95b-7f278880c2a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83334dd2-01af-44c2-9ff0-08cdeb365f3d", "sighting_of_ref": "indicator--cce1bb28-e0a3-4997-a95b-7f278880c2a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4179cf-3c56-49bb-8212-59d3d9d5cc7e", "sighting_of_ref": "indicator--45cca049-5618-4712-9b48-8ebfa7fdf35f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6873e75c-cf1f-40cb-9f6a-c7dbae9fb612", "sighting_of_ref": "indicator--45cca049-5618-4712-9b48-8ebfa7fdf35f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c32f8-c6e3-43d7-b172-428f97da56ee", "sighting_of_ref": "indicator--11090a95-938b-4577-b635-9f5fa48b767e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff88dc7-7bf2-4915-8792-06ad6cabcc62", "sighting_of_ref": "indicator--11090a95-938b-4577-b635-9f5fa48b767e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb6da11-8d27-4566-b605-18b24420e9c5", "sighting_of_ref": "indicator--9e24793d-afe2-412e-973f-0000404549db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b1ba88-e4e2-49ad-a907-19963c17fb71", "sighting_of_ref": "indicator--9e24793d-afe2-412e-973f-0000404549db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f462b-a00e-4e0c-ab4a-04acb240d0c6", "sighting_of_ref": "indicator--d1964071-5e2e-4e98-9a05-b4fb8124dca2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a262d6e4-f115-4525-9719-a02f1e7697bb", "sighting_of_ref": "indicator--d1964071-5e2e-4e98-9a05-b4fb8124dca2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e3c948-0689-438e-a6b4-ccb4af04e50b", "sighting_of_ref": "indicator--09ff7e58-2a32-47b7-811c-df31d0566fbe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a116a9-c8be-4cae-8fd8-adeeb426f51b", "sighting_of_ref": "indicator--09ff7e58-2a32-47b7-811c-df31d0566fbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e6a2a-9a43-4867-a1b4-16c0ecd94782", "sighting_of_ref": "indicator--f2291784-814c-40f0-a2f3-92e3bfa9c145", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32473cea-4565-43ec-bacc-20669c19918c", "sighting_of_ref": "indicator--f2291784-814c-40f0-a2f3-92e3bfa9c145", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3c06a8-9f9f-42e3-ad5f-d8552b229d4a", "sighting_of_ref": "indicator--c21fcf04-e3f1-4af6-9792-15bd83d256dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10ac2f7-cfcc-4ff1-aa47-7febed7582e2", "sighting_of_ref": "indicator--c21fcf04-e3f1-4af6-9792-15bd83d256dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87475560-e8b6-46e9-9af7-f53bccc4de09", "sighting_of_ref": "indicator--386b2264-0f76-4161-8eda-4b9579fbe8ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a49f22-acaa-445a-b88e-7291677f526f", "sighting_of_ref": "indicator--1bad2553-5b89-4f39-a92c-7a03f68b8386", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981e24c8-f8e3-4e3f-86b8-5268c7dfbc48", "sighting_of_ref": "indicator--8554c53f-bf3a-49bf-bee0-cb44479f447a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e138cbff-d88b-4939-bbdc-705ffcdbe028", "sighting_of_ref": "indicator--8554c53f-bf3a-49bf-bee0-cb44479f447a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e32375d-a0e3-455f-9c0a-c99f2b8764fd", "sighting_of_ref": "indicator--8323fe64-d941-4cf8-9537-da3be6eaba46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8969719-4d95-484a-9ab6-9395f219d7af", "sighting_of_ref": "indicator--8323fe64-d941-4cf8-9537-da3be6eaba46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55a5402-4090-470b-aac9-cc21bd2a6b63", "sighting_of_ref": "indicator--739bc08c-97ba-4ebb-b6b0-44c1bfcbb11a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe34d4a-3bc0-4702-87e9-8c4d6aa34a87", "sighting_of_ref": "indicator--9a42d3e4-c62c-43ed-8693-0ad8688c7668", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e24d9f-a965-401a-bc14-797747189f4b", "sighting_of_ref": "indicator--9a42d3e4-c62c-43ed-8693-0ad8688c7668", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fbc7f8-1688-43f9-ab46-4b58606ff4cd", "sighting_of_ref": "indicator--156b8689-376a-42ff-839a-8a0d2f1c93a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140a0cbc-cd10-428d-9042-68e43ed1e8e0", "sighting_of_ref": "indicator--b6a9e170-64b6-4f40-82cb-2ed9fed37967", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18c3ce5-1640-4262-9ab8-b069124407bb", "sighting_of_ref": "indicator--b6a9e170-64b6-4f40-82cb-2ed9fed37967", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c5d53f-2009-491f-9837-bb891af71615", "sighting_of_ref": "indicator--d463ffd1-709d-4258-87b9-4a708887e271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e866661-b835-4019-a20c-9cdc3f970c44", "sighting_of_ref": "indicator--14a0da1a-bffa-4cb2-ba7b-e6f38c2181b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5997d8a2-75cc-4fbd-9e27-2a88a6157089", "sighting_of_ref": "indicator--fb5a1fe0-69d6-4262-836c-e0724e0da5d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b85e7f-6659-4733-aaab-733548cb6e92", "sighting_of_ref": "indicator--cedbe34f-b7e8-452d-9f9a-80995eb10f28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dd85e6-0eab-4316-8091-0acf840810f7", "sighting_of_ref": "indicator--f1bf9295-fb62-4c4d-927b-4061dfb74fa7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48269618-2c78-4b41-a066-3bb2351ec664", "sighting_of_ref": "indicator--5acee896-3163-4d71-8b5d-190c7eb7102d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ab58cc-f8f9-4b16-8901-ffbd7a0b4c01", "sighting_of_ref": "indicator--c22d659e-8dbb-48a8-9ae8-d7d84ebf5146", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f484f976-80b1-42d4-9626-d33d4988b74e", "sighting_of_ref": "indicator--f46c5a6d-bae0-48ca-acba-39db3f216559", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e7a025-5c04-4d1d-8790-f938dad7c56a", "sighting_of_ref": "indicator--13fa2377-ae80-47b9-9865-7a41b7c3f8c6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4244bf3d-1467-4990-8c43-8a39a0dd1055", "sighting_of_ref": "indicator--e89bf43a-60f0-4a39-a38b-ebe92bd58f51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa23d62-06a1-44b2-8751-06477599f296", "sighting_of_ref": "indicator--a08c15d4-b95c-4237-826a-fecfb5b079ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3835f429-cf0d-4833-8d5e-683bc99f176f", "sighting_of_ref": "indicator--0614a9ca-39bc-4dba-8e7a-b9b7e57a8836", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0d2a14-9e9c-4f8e-95af-3dd89fd05f02", "sighting_of_ref": "indicator--41937c29-ee01-4b31-bcdd-c346cff89e30", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dfe9b4-64c9-4f14-b90a-8bb1a57dc37d", "sighting_of_ref": "indicator--ea7e6270-a209-4aee-9a0c-4fefd4dd2397", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd8d2a3-4359-48f7-aa84-99e45ce61c55", "sighting_of_ref": "indicator--0d550e22-ca8a-4b6d-a587-f1cd3c618b78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d06c58d-b3e3-48b2-b754-4a8f1e60fe8a", "sighting_of_ref": "indicator--988b49c8-9ac2-45a6-8a27-3fea85093a7e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2280fbf-0e86-4065-b93c-49fb4fca2037", "sighting_of_ref": "indicator--988b49c8-9ac2-45a6-8a27-3fea85093a7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d148b38-623a-4b68-8b9b-7542bfd604c7", "sighting_of_ref": "indicator--83370771-83ec-4adb-9626-4d3b36519bf5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55106286-bd44-4f92-8a0a-3c8b16478758", "sighting_of_ref": "indicator--6933c60c-6dc3-49fd-920a-9b880aafc9f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a150c24-1f96-4eca-9233-221c52a7f76c", "sighting_of_ref": "indicator--2f6f8688-4cf8-4eff-bc03-bd690d137923", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321c80a6-dd6b-43af-bdf4-c26c7087628b", "sighting_of_ref": "indicator--2f6f8688-4cf8-4eff-bc03-bd690d137923", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b2592b-316f-42d3-8e63-2b903f737232", "sighting_of_ref": "indicator--5829a80c-ed18-461e-b0ed-4b3a306556e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16f905e-3c0b-4c07-833d-959c1d3266d1", "sighting_of_ref": "indicator--5f8040ab-c470-4f85-9d3c-04a8c5c58f13", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e771ada-b62e-441a-a985-59c1911df3b6", "sighting_of_ref": "indicator--02d687a2-5626-4e10-8171-33ec0bf6f3dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f947c171-b02e-4bf2-a9c2-35891aadb21c", "sighting_of_ref": "indicator--aa32242a-9d59-4e2b-b593-191357f760f0", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c589816-9bcf-4c81-b472-d47af0752253", "sighting_of_ref": "indicator--d1aa8b43-1a7f-4d64-90f2-3efa5277bdd5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515d2fc-8219-4d99-a5f7-0a7db634badf", "sighting_of_ref": "indicator--cf08a399-829b-4a1d-ada4-e7670add98e7", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9bd1d0-0ff6-4721-a4db-55022527e601", "sighting_of_ref": "indicator--48f2adca-b799-4af4-a0cd-47e9ad5d0750", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e17066-e2ac-41cc-b3d2-1a82f473ce22", "sighting_of_ref": "indicator--593a634e-7887-4df9-a91b-979d24eb94bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471d1a44-9a33-4415-9add-5729d44c82e3", "sighting_of_ref": "indicator--593a634e-7887-4df9-a91b-979d24eb94bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630ead21-b801-4302-9901-9a1e8c23d69a", "sighting_of_ref": "indicator--c4da497f-b975-4e4d-8fb3-5970292a8d81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbfb74f-c70d-43c4-b1b1-884d873b7795", "sighting_of_ref": "indicator--1cb40d76-7d67-47f4-8800-55ffb3052673", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e05b13-4762-4e25-ae08-1ad844a5b57c", "sighting_of_ref": "indicator--1cb40d76-7d67-47f4-8800-55ffb3052673", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d84adc2-efae-4d2a-ac7f-68fbff837831", "sighting_of_ref": "indicator--3612b91c-b9f2-4a6e-a10a-a7717afd8a87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7479a8-a969-4699-b2a4-45afb9df8ecc", "sighting_of_ref": "indicator--81f99fbf-1d88-4e55-a57a-2407bf1c29a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d463a9-db15-4c5c-bdf4-9126301aceee", "sighting_of_ref": "indicator--b2b7129d-68bb-4a74-982f-16f7a4f928ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b81fd2-e151-4492-b91c-e032a0f540cc", "sighting_of_ref": "indicator--b2b7129d-68bb-4a74-982f-16f7a4f928ea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817285da-4882-4a33-b7a3-faae9990f8da", "sighting_of_ref": "indicator--9328824c-6ac3-47b5-94d6-4e56aee08e10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cff2d9-1ac9-4845-a989-7ff944ec9b54", "sighting_of_ref": "indicator--16c2a216-dff8-47c5-b9bd-e7e6ca12e950", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6047809-ba69-44c9-a6f8-fa3698852e76", "sighting_of_ref": "indicator--16c2a216-dff8-47c5-b9bd-e7e6ca12e950", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e89691-ce24-43d6-949a-c63908f96170", "sighting_of_ref": "indicator--7cbe6ff2-f89b-40d5-8a90-0eaeb2d0f86c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3d4922-c332-41d5-b2fd-a54237215f91", "sighting_of_ref": "indicator--7cbe6ff2-f89b-40d5-8a90-0eaeb2d0f86c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf021ae5-00af-44a3-b663-bbc10b59fa94", "sighting_of_ref": "indicator--2f214e47-fc82-4cb5-a866-fdaaa7d21556", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbdc051-8176-4cb9-a269-33317b0dd3e1", "sighting_of_ref": "indicator--2f214e47-fc82-4cb5-a866-fdaaa7d21556", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88daa773-2142-43cc-b7dc-eed8ecff9a47", "sighting_of_ref": "indicator--eddc6754-4020-4cdc-b101-5829c86cba87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f17cc7-f500-4daa-ac15-7b6ecaaa7fd7", "sighting_of_ref": "indicator--405ce208-c4b6-4bd5-a2d9-e3c46b23820b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83910866-c443-4ca8-9a4a-47d04bbc737e", "sighting_of_ref": "indicator--80f4df15-ca50-4e98-81b9-d9950dc3a38e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655694fd-faae-4321-ba7b-590252d1d084", "sighting_of_ref": "indicator--80f4df15-ca50-4e98-81b9-d9950dc3a38e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658ae61a-810b-4b91-a1d8-d1812de048cf", "sighting_of_ref": "indicator--fd73bd20-2571-49b0-a9f1-94164b5501c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5fd50a-53a3-403a-a8e6-63f674af1502", "sighting_of_ref": "indicator--fd73bd20-2571-49b0-a9f1-94164b5501c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabaca97-f53d-4a78-b800-38d56532be64", "sighting_of_ref": "indicator--126cc348-e101-4e47-a4ce-ba60e2c5f23b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3321758f-ba15-4430-97a4-71bec88a2c17", "sighting_of_ref": "indicator--126cc348-e101-4e47-a4ce-ba60e2c5f23b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abd563b-9410-469f-bcf5-070a5c6e59f5", "sighting_of_ref": "indicator--6ca277c5-1aa7-47a2-b13b-7f2791f6e7fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a5cdad-685e-4851-96eb-a5cb1490eb19", "sighting_of_ref": "indicator--6ca277c5-1aa7-47a2-b13b-7f2791f6e7fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205bbf41-aa6c-47f4-bf70-3db7b4bc4336", "sighting_of_ref": "indicator--75d872ab-c1da-4cbd-b73f-a35cbe5817c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28168fc-5e46-4718-8ae6-0877094037cb", "sighting_of_ref": "indicator--22b6e6cd-9d74-4164-b7b6-f651afb6ce22", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65f1c02-e2c1-4a89-a4d1-889f73d359fa", "sighting_of_ref": "indicator--ac165248-2f4c-46c1-9396-dd0d0b35c09b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d16d09-e377-4c1c-881e-10ff009c5104", "sighting_of_ref": "indicator--90800925-591c-4c41-af8b-09d333473f6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2ac2d7-3a7e-4978-b7db-3aab12a379d3", "sighting_of_ref": "indicator--90800925-591c-4c41-af8b-09d333473f6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37604105-3f16-45d8-aea7-5ad64eef4d47", "sighting_of_ref": "indicator--e2b4cfe6-6e90-4a46-a62a-eff1cbcaa014", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ad9aa6-aef5-4ce8-99b2-bfa7c9de0355", "sighting_of_ref": "indicator--128344fc-d576-4e36-9d96-598c7138948d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c69bab1-dd6a-4b87-ac06-2706034103b4", "sighting_of_ref": "indicator--128344fc-d576-4e36-9d96-598c7138948d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0061ab-f5a5-4b84-9366-96e9675b1d5f", "sighting_of_ref": "indicator--ededf464-3115-4ea7-9067-bae2a889d53f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3413b7-c879-481e-90da-03673fb9b832", "sighting_of_ref": "indicator--ededf464-3115-4ea7-9067-bae2a889d53f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a57543-d69d-47a5-a14b-78cca0139748", "sighting_of_ref": "indicator--22ad16e2-266d-40e3-8da7-3f406adcb99d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b1a64-1208-495d-8df8-04f18c41f1bd", "sighting_of_ref": "indicator--22ad16e2-266d-40e3-8da7-3f406adcb99d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3bc563-5f7b-479f-bd8c-7251abf4e43d", "sighting_of_ref": "indicator--a3717468-3a62-4118-81a3-831fb3a59d73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd4bf3b-7e53-41c3-a837-4cde67c00cd5", "sighting_of_ref": "indicator--a3717468-3a62-4118-81a3-831fb3a59d73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f459c60-ff71-4dd4-aa42-884047e68ebe", "sighting_of_ref": "indicator--c6cc9885-7714-458e-afcd-b78c7afd069e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8adcdaf-e916-4df4-a143-b163450aa5ec", "sighting_of_ref": "indicator--c6cc9885-7714-458e-afcd-b78c7afd069e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b924695-f63d-4db4-88e6-5b878c67dac6", "sighting_of_ref": "indicator--1737c8ba-3b47-4381-9852-34ef47395644", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87302d17-6db7-4d29-aae6-6540f877e876", "sighting_of_ref": "indicator--1737c8ba-3b47-4381-9852-34ef47395644", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b924d4-ff78-4533-922f-f0b72ce261c2", "sighting_of_ref": "indicator--e9765b61-f269-4777-9145-cb28853a3242", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a409e-8d1d-4def-b7a7-41fa60908259", "sighting_of_ref": "indicator--e9765b61-f269-4777-9145-cb28853a3242", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e031b0ff-858a-4c22-9610-5765c8230a71", "sighting_of_ref": "indicator--863fbe7a-a8a7-4953-85e2-4b2b26eb806c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041049f8-063e-4c18-b561-2de265f32d93", "sighting_of_ref": "indicator--863fbe7a-a8a7-4953-85e2-4b2b26eb806c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9252cc-7a96-4d9a-a7d5-35b7a7af06f0", "sighting_of_ref": "indicator--f2e8ef06-f643-47e5-9778-23b39694982e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849498bb-0caf-4307-a13e-d26864d3cded", "sighting_of_ref": "indicator--f2e8ef06-f643-47e5-9778-23b39694982e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05f316e-5eec-46b6-bb4c-e3ebe80a2231", "sighting_of_ref": "indicator--ddbe42cc-1fba-4eca-ba06-6ac9321c1e4e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d906f23f-beaf-414b-8a5c-1469693a3c2a", "sighting_of_ref": "indicator--ddbe42cc-1fba-4eca-ba06-6ac9321c1e4e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6a12e5-2e37-4381-8397-12a36e75ad4c", "sighting_of_ref": "indicator--4d8630b5-790f-45d0-a011-7fb1c2049b6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff322ed-de65-40a1-9528-dca3d150ca62", "sighting_of_ref": "indicator--4d8630b5-790f-45d0-a011-7fb1c2049b6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d16e29c-5175-4cd9-8cd6-83bb2144e05e", "sighting_of_ref": "indicator--8f367695-bdec-4347-af52-c78a385a42b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae01623-f522-4bd9-8e12-09c946700242", "sighting_of_ref": "indicator--8f367695-bdec-4347-af52-c78a385a42b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d3beb3-0727-4539-a522-633b1894c9ed", "sighting_of_ref": "indicator--579363e0-f196-48ab-8b92-579798288f21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728b0f74-3b44-452c-81a0-34fe1d262efd", "sighting_of_ref": "indicator--aaa6c693-8f6b-45e0-a8f2-b8b6eecdbd42", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4568fcb-6dbd-4a87-9a80-0faa2f7fd9dd", "sighting_of_ref": "indicator--aaa6c693-8f6b-45e0-a8f2-b8b6eecdbd42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ff4efb-e639-4c63-bcc2-3288109c1910", "sighting_of_ref": "indicator--85c00963-c1f8-48fd-b704-62732b33471b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9410df1-b3ac-4572-b419-31b9ff40d688", "sighting_of_ref": "indicator--ad55bbd9-eaf8-480b-b43f-81fa2e5ed11b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f227fe49-e9ce-4d3d-a988-608748b9722c", "sighting_of_ref": "indicator--ad55bbd9-eaf8-480b-b43f-81fa2e5ed11b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61101d73-b03f-4adc-aafc-70f031ed20d0", "sighting_of_ref": "indicator--1e8f9b38-4e5d-41e9-b54f-4f61a320bd30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b55ea6-72b1-4042-abe9-4cd1cf248ec7", "sighting_of_ref": "indicator--1e8f9b38-4e5d-41e9-b54f-4f61a320bd30", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf4a218-74e2-4bbf-bee0-618c0c06e075", "sighting_of_ref": "indicator--cbeec845-cb1a-48f0-9e74-451b747bc897", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0475dac5-a535-4982-b24f-dc2ca0e421fc", "sighting_of_ref": "indicator--cbeec845-cb1a-48f0-9e74-451b747bc897", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4565a06b-9750-4339-bec2-fa1e0917f78d", "sighting_of_ref": "indicator--99474648-eeaf-46a6-bbe4-a83b7f13ce78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92370875-c2f1-4763-834d-f48e8d267162", "sighting_of_ref": "indicator--99474648-eeaf-46a6-bbe4-a83b7f13ce78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff7642-df2f-4a7f-9393-2365a4cb741e", "sighting_of_ref": "indicator--da484eb3-f821-4ba9-9602-c3207b0ac5a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4302d26c-7de3-42a4-84dc-d12f9ebec728", "sighting_of_ref": "indicator--b525bc95-642d-4dbe-88eb-a2b52b0432a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b43dd30-b4bb-425e-97cf-24194ff46ba1", "sighting_of_ref": "indicator--1205c614-bd79-4e5c-bbef-8eba9795504f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ef6079-4a30-4b21-bad3-2ae877d926f6", "sighting_of_ref": "indicator--1205c614-bd79-4e5c-bbef-8eba9795504f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fb4fb-6996-4301-bdbb-02ba5ca99800", "sighting_of_ref": "indicator--a4be27dd-a18a-45fd-8589-317319460e84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca4c18b-a5cb-4773-80df-a784808cc410", "sighting_of_ref": "indicator--1da0b3c8-5ddc-44e0-974f-2cd3dac74674", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc35e68-7661-49df-81bf-d85302820e8a", "sighting_of_ref": "indicator--1da0b3c8-5ddc-44e0-974f-2cd3dac74674", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc5b9f2-3d8e-4e38-a5d7-18e4e4d3d5d5", "sighting_of_ref": "indicator--83f39531-86cc-4599-9690-de6df6d90b13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d0cbfb-7240-4ac4-9dfe-a1ce106f8be5", "sighting_of_ref": "indicator--4ce909d9-dae7-4eb6-abc5-87e6648bec7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec27c261-cb72-4728-aa71-d6c4ae833c88", "sighting_of_ref": "indicator--bbf38955-cc46-4cf0-b9dc-e5ed9eeb3e34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f1060e-6808-4020-a3ca-ccdc02e366fa", "sighting_of_ref": "indicator--9773fdef-c90d-4ab1-b867-520efa3038df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d9c85e-63c1-4ebb-9a84-f4c13e84b2d2", "sighting_of_ref": "indicator--9773fdef-c90d-4ab1-b867-520efa3038df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04570b70-56b2-48ec-b737-f3966f21daef", "sighting_of_ref": "indicator--a7338563-b887-4341-bd32-d7e1be8d3c5b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0f306-066e-4032-8c07-beadb1fe05d1", "sighting_of_ref": "indicator--c7f6386b-81c9-4955-a21b-2329417ff2e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a201613f-7a30-4507-a1a8-0d1f1fbc4377", "sighting_of_ref": "indicator--5c4e9171-26fa-4b0f-959e-e508c4674f76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0cdacd-e401-4331-9a39-0daba897c3a3", "sighting_of_ref": "indicator--d69997b3-3669-4af1-bd80-696035d3e69b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb989d1-6c04-4f18-996b-407354e210fc", "sighting_of_ref": "indicator--ad1f7501-aa87-4c3b-b9ba-52971f363c0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d4782-c93d-4ce1-badc-082efac5c429", "sighting_of_ref": "indicator--d5c53f16-d619-498b-a1ba-174dd552a7a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc763412-dd98-464d-9543-c8a3b38f484b", "sighting_of_ref": "indicator--32e75770-3157-4c2d-aaa5-4b2f862057d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b04739-31d9-4f12-b9db-8189e51b9dc7", "sighting_of_ref": "indicator--9ddd2f9e-83e0-4343-9171-5e052c3178cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2264be5-ca96-4546-8f1d-50c356f7575a", "sighting_of_ref": "indicator--1478a222-1e73-4786-b038-70d5e044973a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25868024-2793-4e84-a5b2-e4170511e530", "sighting_of_ref": "indicator--437a3f62-e2d7-4b86-aa75-732e4ec1b7c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b39a5a-8f6d-4257-948d-755854f11730", "sighting_of_ref": "indicator--5ed2b33d-eeed-49e7-9483-141377fd3cc2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698219f0-794c-48e7-b19d-a0b0ca72b8ab", "sighting_of_ref": "indicator--bf68114a-0aa9-4a1b-aaee-837fdf1356ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb77ff-f410-4a4f-8ee4-4ca2dfddcda4", "sighting_of_ref": "indicator--88ec24b7-bdd0-471f-a745-9b49c124efb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a89fe0-fa82-471c-a83c-714532cdee38", "sighting_of_ref": "indicator--0b24c40a-7c4b-446a-ba21-36bd57d66381", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c2495-caba-4c31-bcf4-a873cb652857", "sighting_of_ref": "indicator--c698a2f8-49ab-4f13-9106-127b81b9e532", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff37468-83d8-4746-b2f9-ec77b7c7e94a", "sighting_of_ref": "indicator--28163b54-5580-4b2c-9edc-9d846b14d87b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21e15a-d087-4ddc-a70d-ed88a800b0c5", "sighting_of_ref": "indicator--9339e06c-6f66-4721-91ac-54d82f61e5c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce087dc-876d-484c-94ae-eb70862915e7", "sighting_of_ref": "indicator--8854d4b6-db94-49ba-9dd8-60c2f1c585c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7ad062-ba4d-49f8-9149-8f12d3d8e1a3", "sighting_of_ref": "indicator--8854d4b6-db94-49ba-9dd8-60c2f1c585c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b92f1d-b8ea-43aa-8566-11e73357218e", "sighting_of_ref": "indicator--d0b682b4-81aa-45e0-a5f2-89b819fd8b5b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2626d729-884e-42b8-a413-418c897e974b", "sighting_of_ref": "indicator--9ece4f67-6669-4d7e-b682-e973ca0ed999", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182f98cf-5b53-49ad-ab20-23798334ee1c", "sighting_of_ref": "indicator--9ece4f67-6669-4d7e-b682-e973ca0ed999", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b99f83f-1e51-488f-be0c-a727413b8f80", "sighting_of_ref": "indicator--724d84ee-667d-481e-ba0a-e5a5cddd0d73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9f19b4-8996-4e7c-bb50-f5034d8a4c7d", "sighting_of_ref": "indicator--7878a232-503e-4aa2-9a02-24841369c816", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5de4e4e-d8ae-4721-80a7-c34b4fb94f64", "sighting_of_ref": "indicator--7878a232-503e-4aa2-9a02-24841369c816", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a08860-328d-4236-89c8-51fa56e3dadd", "sighting_of_ref": "indicator--4317afa9-d43d-4334-b342-086260e71a88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10a990-4a4c-4e96-9a6a-86d14eba0233", "sighting_of_ref": "indicator--b9856a18-72eb-4249-9c02-71ff1919400b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a48848a-fe9a-4385-8399-d84eba4cec0e", "sighting_of_ref": "indicator--b4942853-af97-4be0-b8ca-88da684750af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597bc374-d654-46cb-93c0-7aaa948ee032", "sighting_of_ref": "indicator--469f8945-f57d-468d-9310-c742a6f282c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58441d4c-967d-49fc-8673-c2a39d5f10d0", "sighting_of_ref": "indicator--3369a4f7-3b65-4e72-9ffd-bcc539ff1efa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbebaddd-ef5a-46e7-86c5-ef07c93d1161", "sighting_of_ref": "indicator--3bb0e6e9-28fe-4de2-ad25-e617e26efa11", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e6a59-0a16-4335-b207-77a60d61eeab", "sighting_of_ref": "indicator--ba245368-0497-4bdc-9652-936b0c7370ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ba8eb3-b040-4aef-887d-9e020b6e7915", "sighting_of_ref": "indicator--ba245368-0497-4bdc-9652-936b0c7370ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca6cbf3-a086-46d7-b859-ca2ffd336fb3", "sighting_of_ref": "indicator--ac9ca40d-b4e3-4dd0-be2f-a4fcc4788f33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa89eba-fb1d-4caf-94a7-3f49bce77376", "sighting_of_ref": "indicator--ac9ca40d-b4e3-4dd0-be2f-a4fcc4788f33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c24097b-55d6-4a53-8403-d7aeb3841669", "sighting_of_ref": "indicator--b397073c-eea0-46ec-b907-143c83e84619", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b79d89-fee4-468a-8c5d-48cbbcfe7e48", "sighting_of_ref": "indicator--496441b6-68ab-4ccd-ae59-91bee4d4fba7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63974bea-d601-4540-b4fd-93fccbae26f5", "sighting_of_ref": "indicator--325d5926-e343-4332-ba83-6f1d11e74fda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9560ff22-794d-48a1-8616-55b463626d77", "sighting_of_ref": "indicator--760827bf-0712-4ac2-9c07-be1ceeb34b8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3684462d-d8cc-4067-b55b-b9f7a9b4507d", "sighting_of_ref": "indicator--b1450bc8-ecf7-4547-8ecd-9b77a63a5abb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e6f3d8-f91b-498d-876b-2d2b7c96d5d8", "sighting_of_ref": "indicator--6d6b0968-3288-4248-89df-fb3a8d3af3d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66dc0f7-e20b-457b-b85c-0d6e2abd0392", "sighting_of_ref": "indicator--b5621cd3-faaa-4143-80aa-1e337b1cc8c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb818c7-b0d6-40d0-91ae-0f6cb8822e54", "sighting_of_ref": "indicator--b5621cd3-faaa-4143-80aa-1e337b1cc8c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a64b164-bc06-41dd-9746-ca71e109b4d5", "sighting_of_ref": "indicator--fd26ba0c-2b56-46bb-aab6-bf04afcb7de4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9896a5d2-48bd-404c-9bde-b78a4e493865", "sighting_of_ref": "indicator--827a4680-f21d-41d1-a079-c3d8b2fcf1bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf73339-5e94-44a3-b0bb-d0fbb4f39499", "sighting_of_ref": "indicator--827a4680-f21d-41d1-a079-c3d8b2fcf1bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965405bc-75cf-4851-a63f-900d24128614", "sighting_of_ref": "indicator--458f13fd-b605-4930-a8a0-7b1085e8d7e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f63eb3-7d16-4bd9-bd02-00a7ad19b57c", "sighting_of_ref": "indicator--458f13fd-b605-4930-a8a0-7b1085e8d7e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddf3b1a-3226-421c-92df-384e43a59bc2", "sighting_of_ref": "indicator--79c10d2d-1b7e-42ad-9e27-e7b3ac7479eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6e0311-aaa8-4290-ae1d-126e044884c6", "sighting_of_ref": "indicator--82c59a4f-6e39-4ed6-9b2e-e32d38fb1afe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab98cfa-c4b3-4ca0-953f-8da7f2fe5af6", "sighting_of_ref": "indicator--90760102-4bf0-414a-9c5c-992bd3e28520", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe89526b-fbb9-4812-a1a9-f4ef5d5664a5", "sighting_of_ref": "indicator--1234cdeb-d11b-4295-922d-a2e2f086b22e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba2a1da-9a02-4a42-add7-486fb5ea46b5", "sighting_of_ref": "indicator--bc3ca351-6477-4263-b118-c02fd8c2dfe8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6cfb52-d02d-4e44-9e7c-e09837ee7068", "sighting_of_ref": "indicator--bc3ca351-6477-4263-b118-c02fd8c2dfe8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986f0cb0-6abb-4c11-813f-f22bbf8d9ea8", "sighting_of_ref": "indicator--b25a2525-e50c-46c3-954b-d5fe2e739b07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19f831a-e21d-46f9-8c54-18ac72b1de3c", "sighting_of_ref": "indicator--b3d1337e-153e-4b40-b594-671c82fb4702", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615ccf82-e3a2-46f1-83f4-b00af3be7d25", "sighting_of_ref": "indicator--06a60ed5-8d19-4594-ad96-6d64235f1162", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140a01f-3db6-4aaa-a657-761b67a43847", "sighting_of_ref": "indicator--adf7455a-36b1-48a0-8451-9837fa69db17", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456d4fc2-5d2b-43d2-a7ad-7dfe6d41fe88", "sighting_of_ref": "indicator--109888e4-af79-4ba4-8478-8e5284d82413", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218617d7-1c4e-4e5a-8e2c-a05e36e8560e", "sighting_of_ref": "indicator--65852682-7ca7-41c3-9f5b-834fb94c6e00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3fd06-4a68-4915-a389-26553bb6fe78", "sighting_of_ref": "indicator--65852682-7ca7-41c3-9f5b-834fb94c6e00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cc3318-988e-4a17-8363-15e0783028f1", "sighting_of_ref": "indicator--26808f25-ea38-4b3e-9ec4-0c7c4b4467dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112f77b2-6694-44b2-a705-5a1cc8f81a85", "sighting_of_ref": "indicator--26808f25-ea38-4b3e-9ec4-0c7c4b4467dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9846099-e371-4260-8643-7a15145875b9", "sighting_of_ref": "indicator--81913e15-2c23-4956-a98a-75e6a2b45aeb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e4c53-ec60-4922-ae71-5d43e535b1f8", "sighting_of_ref": "indicator--7498a86d-c043-40a8-8229-69dda0892630", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be2689-d683-4475-83ad-b788998fddd3", "sighting_of_ref": "indicator--54e248c8-16db-40aa-ae58-c14a1447b895", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f52e9d-0acf-4eb3-8bbb-536149914c79", "sighting_of_ref": "indicator--54e248c8-16db-40aa-ae58-c14a1447b895", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3eb4a86-9d29-4a71-9d68-eac084dc09c4", "sighting_of_ref": "indicator--abaf78ac-a8c6-440a-bb83-b8b84cf03bfb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c478651b-3538-40e7-8dfc-67cee0e6c326", "sighting_of_ref": "indicator--abaf78ac-a8c6-440a-bb83-b8b84cf03bfb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3dbe76-6507-43e2-ab5c-20648c9bfeab", "sighting_of_ref": "indicator--1f8e6735-4650-43a5-adfc-cb13285e4294", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14644cf2-983f-4bb3-8658-a10759a91435", "sighting_of_ref": "indicator--1f8e6735-4650-43a5-adfc-cb13285e4294", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beca70a-93ea-4fb0-97b9-7314cd55fc41", "sighting_of_ref": "indicator--3c9bd695-8440-4f9c-8cfe-b1a3b87ef4bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d6ef2d-492b-4595-9c49-d236c03c0637", "sighting_of_ref": "indicator--dda17f88-012a-484f-8a2d-9837b7c525ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bc199f-a71d-45b4-914c-5a0747c12bc2", "sighting_of_ref": "indicator--dda17f88-012a-484f-8a2d-9837b7c525ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0d6e2c-43d3-45d1-b442-11bcbf473dc5", "sighting_of_ref": "indicator--60d0847e-6486-471e-b3f8-423e89facc14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15aec8cc-6e39-4407-a0f3-8f0a0023a849", "sighting_of_ref": "indicator--60d0847e-6486-471e-b3f8-423e89facc14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9088faa-f7fa-45fb-85e9-6b811810684c", "sighting_of_ref": "indicator--518ec0ec-a3a1-4309-a99b-3c434a4a27d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f78b847-a07f-483f-a1ad-0d2ec9d7d944", "sighting_of_ref": "indicator--b919d9a1-d696-40b3-995c-d3f22bdba1e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e3b5de-c41f-474e-bdf0-617ac32a2c6c", "sighting_of_ref": "indicator--b919d9a1-d696-40b3-995c-d3f22bdba1e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee56be9-b9ac-4b24-b247-178cc1028aec", "sighting_of_ref": "indicator--aa95fa4f-6b91-449c-8bae-9b5fc87ae7ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6b84fe-d821-41e5-a10e-96fa97ddff95", "sighting_of_ref": "indicator--c793bb3f-69d4-4739-8aa6-28b9b44e2de9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84a5591-38a0-4787-92a6-ae78e1a5ebd1", "sighting_of_ref": "indicator--d4adac0a-be59-4193-b431-831f63ce2719", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2fad04-db06-4ca6-bb3d-aeb7d267e4ee", "sighting_of_ref": "indicator--d4adac0a-be59-4193-b431-831f63ce2719", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98020025-d150-4b37-8762-2c6a6e7590d9", "sighting_of_ref": "indicator--6fc61c30-dfe4-45cc-a30d-d84ad287260b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fdd30c-e179-4f4f-8306-f676352b17a0", "sighting_of_ref": "indicator--6fc61c30-dfe4-45cc-a30d-d84ad287260b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5302e58-c6b2-4fd4-b7dd-ed6a6a861a61", "sighting_of_ref": "indicator--41cb3596-7736-4762-8aa0-7a50e8429a81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e62ada-0864-41dd-ae09-c5924ab68ad0", "sighting_of_ref": "indicator--41cb3596-7736-4762-8aa0-7a50e8429a81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ac0206-0431-4c35-a837-68ddafd82c5c", "sighting_of_ref": "indicator--3cc48d76-e708-4e71-81ec-aa0e5a393900", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed443dfc-e8c3-461f-ac05-d2be51ac005a", "sighting_of_ref": "indicator--85549e26-7315-4251-94a4-9a2ab912f88c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8dac79-e51e-452b-bd3f-4ce15819aaab", "sighting_of_ref": "indicator--38840d48-dbe8-47e1-a29a-e1e2ac7cc9e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e512e-f413-408b-b96e-c69dcce3674f", "sighting_of_ref": "indicator--441fdb8b-2e65-42d8-8920-08356419dc1f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918a9922-49da-4756-984f-4289b06b68cb", "sighting_of_ref": "indicator--d494a754-1659-4e01-a63f-8ca635425c6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8224e06-b53d-4ca9-be70-97a7205983da", "sighting_of_ref": "indicator--19d37cc4-e454-4395-9927-584c7e4b91d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b93bce-afed-4214-9367-475735c31436", "sighting_of_ref": "indicator--8f0435ed-6d28-43fd-9624-37fbba2fd5a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090479df-4b5b-4a2d-903d-af850a747519", "sighting_of_ref": "indicator--8f0435ed-6d28-43fd-9624-37fbba2fd5a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e2c2d1-9dbe-43b2-bf6b-185d9f0be97c", "sighting_of_ref": "indicator--70a7bc27-1453-460a-92a8-688d022eb381", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87715d3a-4116-460f-9e15-4122a96d6c8b", "sighting_of_ref": "indicator--70a7bc27-1453-460a-92a8-688d022eb381", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a6af79-31b8-4a99-8787-1a9e9ecedaa6", "sighting_of_ref": "indicator--09d4689d-4820-493f-9342-e248a046502d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46699d28-0d2b-46f1-a0ed-b521e0360243", "sighting_of_ref": "indicator--1d97373a-9f26-4532-aa29-322a5ff14d33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82709185-8a9c-4249-bd54-47226a511f6b", "sighting_of_ref": "indicator--d06cbdf5-4e9b-446b-ba26-7aaebc092116", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9389bd-f0dd-4809-a00f-842efc37bfab", "sighting_of_ref": "indicator--42c28bab-f378-4b48-a3ed-7df104846460", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef76016-1e47-4d1e-b074-911611829745", "sighting_of_ref": "indicator--d6e9ea2f-47a5-4a28-a617-e8dc2b4c7908", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525a6615-177c-48ed-af86-e6f7153b8782", "sighting_of_ref": "indicator--0557529c-5f78-40f1-b045-5f1694f1b009", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9493acfa-a54c-4bea-8a8d-b6b15cfe7e18", "sighting_of_ref": "indicator--7705f8ff-83a2-43f9-9315-b7bed708ab48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd3aee0-2d07-460e-b6f9-1b79bf673e3e", "sighting_of_ref": "indicator--33b1b406-5508-438e-8426-304a53c40d7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930f3cd-42d2-4844-8ce1-abf58dc77ec0", "sighting_of_ref": "indicator--03a507bc-4f4a-42c2-b675-a805e8937f26", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91c629e-e6f8-4413-bce2-b817be85f58a", "sighting_of_ref": "indicator--5a631f00-a40f-4305-a5c7-4ca822a4fd32", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0de557-f8a1-49f1-a91f-32befd9411f7", "sighting_of_ref": "indicator--36886616-7b27-4149-ab04-08293bf6db0d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa61d8d-1a53-4ce3-88f8-a7c7c3d23dd2", "sighting_of_ref": "indicator--d8aad911-563c-4d61-b455-6fe2b0341b69", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497b761b-8b92-46a4-bd8a-e5e561d5aefd", "sighting_of_ref": "indicator--db8fa6bb-330d-4207-851c-330ffdd71c07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba62f7ae-c103-45c4-bf26-e354729ff557", "sighting_of_ref": "indicator--89405c7c-850d-43c8-86e4-e075cd699bb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7991741-3d47-4d4c-a2f9-5a226b12455c", "sighting_of_ref": "indicator--d90f0b51-a6d4-408a-b07c-31a2c0f8c1ae", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0217e074-b369-4897-bece-7697ddbfc546", "sighting_of_ref": "indicator--371fa943-d897-46fb-b8a8-00884ceef3b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8685b6-ebdd-4cca-a9db-455944adbf4a", "sighting_of_ref": "indicator--dd9b078d-65e1-4564-a9d6-2fd2d6db785c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8840339e-a316-420f-ace7-abc98c46d905", "sighting_of_ref": "indicator--183a4156-8f82-491a-b37a-9a3a1e070134", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c294e5d-57e9-4938-8764-6bb1f7ec558b", "sighting_of_ref": "indicator--ffe8bb89-3470-442c-b885-db38108633d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d27ef04-6848-475f-b5ac-2be9407ee277", "sighting_of_ref": "indicator--ddcc3c02-bb21-4fff-bde8-25d9eeddc67d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f3fbd8-d96b-4e4c-a11c-5fa8c1eea153", "sighting_of_ref": "indicator--ac6fb8d6-61de-4c76-8859-786f451707f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab65d6e-80be-48ba-bb72-fcdcf97135f8", "sighting_of_ref": "indicator--6fb2c939-18e4-4388-b02b-173d5af3c39d", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e73db8-e587-4246-8ef5-9c9914156cee", "sighting_of_ref": "indicator--55d890ee-c684-4395-8aa1-fd238d98b528", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e5b0a8-cfdd-492a-9838-462d512dd6a5", "sighting_of_ref": "indicator--0c14e42e-fb16-44f2-8deb-a9633b795de4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d40c1ad-7544-4791-b0c3-0455e426fcc9", "sighting_of_ref": "indicator--cdfd19db-19ac-44c5-9830-40df258d4797", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d2468-239f-43cb-a5be-5d84ab66769a", "sighting_of_ref": "indicator--a0a01640-b1dc-4b0f-8ed6-75c823317af3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7bf1bd-f797-4c02-bb51-7b5a53e7d84f", "sighting_of_ref": "indicator--27020bd2-389b-4a95-b7d9-d909688f8c03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421a3da2-e2f9-4885-b865-bfc08e13b65e", "sighting_of_ref": "indicator--3b2441df-7aeb-4a64-b85a-53aebb00ff52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eb85f6-a19d-41e2-9108-56e100265258", "sighting_of_ref": "indicator--eb211ba6-cf4c-450f-b1d5-3fae624b639a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bbe752-fa7e-4a29-9dfb-f390e49d407f", "sighting_of_ref": "indicator--a834767d-fd6e-4c5f-af4f-4d2246025ee3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63a6ff4-e3ee-4666-82a2-9ec13122673c", "sighting_of_ref": "indicator--c62583e6-15df-40a3-94ea-2ab2a719614d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f66af6e-1e72-4f90-b536-eef26a7bb432", "sighting_of_ref": "indicator--e75af7b9-0e7a-497c-8350-21fa4b6c4e07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c72188c-5ca2-44c3-848e-b550ff02dbe0", "sighting_of_ref": "indicator--f7cce53f-a151-4b17-80d4-6a53e66fd2c0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea67fed6-c6c0-4469-85db-58f7d6acfa91", "sighting_of_ref": "indicator--20c3ad3e-fd76-4875-8d03-9c429c269366", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c510af3-43a1-43f5-a465-d340c812c7a2", "sighting_of_ref": "indicator--22659c12-43b0-4ee8-9f23-87061a23070a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d58a707-247e-4e13-af01-04b5eac17f3f", "sighting_of_ref": "indicator--d8da13d5-24a4-463b-ac4b-6047c03a46fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73c7d74-b523-4834-9375-d2ba22f23534", "sighting_of_ref": "indicator--e449b613-43d5-45cd-94a7-e4a382f2d1fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b99989e-951b-40ab-815f-0cbb7c6d7683", "sighting_of_ref": "indicator--fbb3331e-943b-4860-8a99-a5295b55d523", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baaf37f-e63b-4be4-86e2-ca65ec73e77a", "sighting_of_ref": "indicator--27106a6d-e1f8-4de7-b1c8-83ccd77cece2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dd015c-6af1-4666-9e15-3698729d1c04", "sighting_of_ref": "indicator--83ca5683-f3f5-4f2d-aafd-3289cdd30e3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d090bd0c-209d-4846-aa5e-35f7d6ca7fbd", "sighting_of_ref": "indicator--a9cfa4dd-a3e4-40b8-aaf1-e68db407b832", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68ffe19-15b7-4a7f-beb2-96d5a70c103b", "sighting_of_ref": "indicator--3c6a9a9a-2ed1-42b2-8fbb-48555403df6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d9db43-1e24-4904-8e6f-a00f0971c31b", "sighting_of_ref": "indicator--a1e0445d-ebba-44ec-9255-56049fa71997", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a75645-3c5c-4f0c-a803-0b02d7e975b8", "sighting_of_ref": "indicator--e2126da1-268b-4d37-8ccc-54f145992d3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29247608-95ab-4e9b-b3f9-f8658bd56d76", "sighting_of_ref": "indicator--ac5988d0-c81f-48de-b4e2-8d497c708a7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42465d9-d1e0-472e-9388-915f932b6e36", "sighting_of_ref": "indicator--ac5988d0-c81f-48de-b4e2-8d497c708a7d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685521a4-1eae-4a53-bf81-636e07bbfd74", "sighting_of_ref": "indicator--ed7a368d-577a-44cd-8f0e-0063f7bbb79e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8351b63-1b62-457e-a038-cb5174d71b8f", "sighting_of_ref": "indicator--3f75f735-1275-4bd6-bbd2-4fbadd6b22f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504ec6f7-5c28-43ac-a297-55f8c7b48c9f", "sighting_of_ref": "indicator--f37b50d1-69da-4ae9-bc24-bfc43569ff2a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d84f291-82d0-4031-a37d-f1c1e5c01fee", "sighting_of_ref": "indicator--759587c0-e8cf-4567-9bf3-33cce34a9ae2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f30138-4818-474f-8fc8-33b53eac15d8", "sighting_of_ref": "indicator--0763b67e-387e-49e0-a993-9ed40161aed5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772b69d8-8317-44a4-a6d2-cf01e7b0f444", "sighting_of_ref": "indicator--4f28da86-c3bb-4f1a-befb-18c001097acc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd2024a-76fc-484e-82e1-254cb5c5876e", "sighting_of_ref": "indicator--d37868a9-79c9-4398-826b-5d9651cdc7e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae720535-2814-4f1f-8b40-25dcfc9e5cd0", "sighting_of_ref": "indicator--e80c8e15-093e-4549-ae73-642752b3922a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33fd056-1cf9-40c8-8dc6-6959ef777d4a", "sighting_of_ref": "indicator--4a5f67df-c357-46eb-806f-2cc549112993", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7689f1-54ca-48af-8b35-2a0fbd121e65", "sighting_of_ref": "indicator--4a5f67df-c357-46eb-806f-2cc549112993", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e5f1e9-ad1b-4ad2-aaa6-781e16c9ca8d", "sighting_of_ref": "indicator--57600f9d-edcf-463a-925e-be4de6b0bf0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6743c557-fbf1-444d-b66a-fd71c9a57596", "sighting_of_ref": "indicator--57600f9d-edcf-463a-925e-be4de6b0bf0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc8777-7763-4c43-abb4-1db8d69637d6", "sighting_of_ref": "indicator--b76ce0f4-5432-4395-a816-ef4facdd7923", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c16beb-24fe-4c90-9935-0c33d4b0c56a", "sighting_of_ref": "indicator--e1111f3a-5285-4f79-ac43-d4dc25ae6906", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b90a01f-cdfd-4851-85eb-53065afa70a1", "sighting_of_ref": "indicator--13c9a7ef-8ec6-429b-9188-a759fd101b22", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd0c664-d442-4d0c-b3f8-6a33919c7b50", "sighting_of_ref": "indicator--b562a2ce-daee-49a0-8fc8-fef02583c875", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b2b448-ff8a-4a0f-8aec-492bc4c4d6de", "sighting_of_ref": "indicator--9c84b256-3133-40dc-8bc2-cbd053e24a4e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3440e5-1ce3-4f9f-9a9c-933a2f7854b4", "sighting_of_ref": "indicator--48f3eb02-bfd3-470e-8184-e7c494e95d0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a710d09-baee-4467-a8ed-4039eb532122", "sighting_of_ref": "indicator--48f3eb02-bfd3-470e-8184-e7c494e95d0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eb184b-2da2-496d-a510-586dabc10898", "sighting_of_ref": "indicator--13c6b14d-e423-4652-98cb-507db03277ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cfc1f1-5ca8-4af6-9a1d-098da35a92c4", "sighting_of_ref": "indicator--abd50043-93dc-408d-b29e-4ee3de627983", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65bce4-b669-45fe-aeb5-b7d4d54f2971", "sighting_of_ref": "indicator--d6eb3e72-82f8-4dcc-a293-28e8271ffc8d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a143ab-f294-48af-96c7-fc19dfdcc100", "sighting_of_ref": "indicator--f98d3280-706d-46b5-8da8-521ddaf218e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04189122-d5a3-44b5-a4ac-c054bef07139", "sighting_of_ref": "indicator--d30eb634-244d-4ddb-8720-44e19847c94f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e342999f-b8f6-4910-9bf6-c942df676b8e", "sighting_of_ref": "indicator--89af8440-2d90-4499-ac64-b1e836f7ed9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adad16f-1cec-4470-afd4-f4f4b416039f", "sighting_of_ref": "indicator--92c60891-e7a9-4ef6-ae1a-f8e5d788dc61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecc5750-38b5-4875-8f5f-dbfe7499fabd", "sighting_of_ref": "indicator--da31cc2f-aef6-4639-b9eb-116b542886f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2430b099-8265-4554-ad05-e8743dc2a68f", "sighting_of_ref": "indicator--d82f43d3-25d6-407b-8a71-bd2b7d0543ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7332ba-1031-4a99-a41a-dd3ef5397f9d", "sighting_of_ref": "indicator--d82f43d3-25d6-407b-8a71-bd2b7d0543ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b526d2b5-7eb1-4917-bd7b-8483785375ee", "sighting_of_ref": "indicator--4d653e0c-84a6-475a-b65e-eee2bd837644", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b17691-9fc5-4625-a9d3-555dcfb409df", "sighting_of_ref": "indicator--da879ef4-0d5f-46ee-8363-aac6ae77af46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7042b4b1-5e4d-4116-9b74-508454d9055f", "sighting_of_ref": "indicator--92311d45-e7e6-4e6c-9420-61b88781c26f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb43ac6-eff7-410b-9c0e-d1dcef04108d", "sighting_of_ref": "indicator--f01e2035-c99d-40b3-8ede-18b63b4fa16a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351f41d5-d37f-4921-b5bd-083483a29e10", "sighting_of_ref": "indicator--f01e2035-c99d-40b3-8ede-18b63b4fa16a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca4237-f7b9-4687-8051-5b297df5f074", "sighting_of_ref": "indicator--59fe8a8b-2ac1-45fd-945d-de5f1c2326d2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca11a7-b12d-4617-ae31-3fcc5b590004", "sighting_of_ref": "indicator--59fe8a8b-2ac1-45fd-945d-de5f1c2326d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1697b68-f296-464f-b8d2-848ac51cb037", "sighting_of_ref": "indicator--3192c4a9-036a-4e49-a62d-60b4877aa9f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76335fc1-3808-43f3-b60b-3fa82b4356ca", "sighting_of_ref": "indicator--50bf62de-844e-4dc4-8688-bf934ec51d23", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff64847-b718-4fb7-a594-4918698e68e9", "sighting_of_ref": "indicator--0d873c8f-c080-4aef-ab58-a61c99b2b0bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a7c7d0-3aff-4813-b9eb-577c32b24cf4", "sighting_of_ref": "indicator--ed2dfee6-ff77-4c41-a9f4-a0d132a81abe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5e65b-a3eb-4c20-9831-2dca8e2b9d76", "sighting_of_ref": "indicator--ed2dfee6-ff77-4c41-a9f4-a0d132a81abe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cc9899-9aef-4cca-a6a3-529cecf7bd19", "sighting_of_ref": "indicator--c00a4bc4-7200-44e1-81e9-de8bfccc6747", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6d16ad-368c-43cc-bbad-604d4362d5ac", "sighting_of_ref": "indicator--c00a4bc4-7200-44e1-81e9-de8bfccc6747", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27182888-9a8e-4d14-a464-b5d14f743cf0", "sighting_of_ref": "indicator--ba82449c-a054-4b37-ad52-23d9ecdc9236", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b0e81f-216e-4042-b56d-9e459b6f7b06", "sighting_of_ref": "indicator--2fb5830d-7817-4093-a765-b0215b563382", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d8449e-87e1-4938-ae80-4e4aba0ecb42", "sighting_of_ref": "indicator--2fb5830d-7817-4093-a765-b0215b563382", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fa0451-f849-429e-921d-62bb217fa8cf", "sighting_of_ref": "indicator--bc78fa82-8139-42d6-88d9-defd87ac769a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d275eee1-5c97-4599-b901-82383f0943e0", "sighting_of_ref": "indicator--d1976047-6424-4e45-b3e0-0b2b2a2d33fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7178f955-8637-45c0-af21-cf1d54bef49a", "sighting_of_ref": "indicator--ad54a0f0-2961-4e55-915c-20cd8836e556", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af12e1a1-3c9d-4edb-ad1c-2c794dfaad9a", "sighting_of_ref": "indicator--fb1cf7b9-3b43-49e1-bf33-2e0d0138f6b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2df929-659f-4362-b962-c9e0267e247c", "sighting_of_ref": "indicator--d234d629-7c31-4748-be68-2641594bd5b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24df742d-430e-4507-8ca2-546a24a22799", "sighting_of_ref": "indicator--d3f58ed9-d9d7-47c1-95f2-cc21d61c0047", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9894d2-d22b-452e-8f8a-beca7fef77d3", "sighting_of_ref": "indicator--d3f58ed9-d9d7-47c1-95f2-cc21d61c0047", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe02692-6796-4eba-b129-1c9c7652db1e", "sighting_of_ref": "indicator--11523f0f-9c59-4160-97c2-2f1429c3bff3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4ce592-07e2-4cc8-99ed-46cd2b8c9bc7", "sighting_of_ref": "indicator--c503f978-622c-4cd9-9cc0-e14cb2d2b37d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41837a1b-12de-4cf2-9f4f-024878308c62", "sighting_of_ref": "indicator--c40f9d5f-39fa-4898-a03a-47330f569682", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d760e549-e9f8-45a2-8c0c-ca80fd359891", "sighting_of_ref": "indicator--c40f9d5f-39fa-4898-a03a-47330f569682", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fba9b6-ba07-45bb-9098-8e202cae6b0b", "sighting_of_ref": "indicator--4fea82ee-884c-46d9-b126-3121773c420b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4725dc6-ce99-4725-8b24-1188feb425d9", "sighting_of_ref": "indicator--965c19be-9bfd-4575-842b-6dcb42f9206a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8425d45e-15d6-4f93-8604-2383b34128d6", "sighting_of_ref": "indicator--9d0531b7-c3e7-4acb-aeb6-bbfb4c25d558", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b288d23-9eb6-4ceb-a174-4147931c3f03", "sighting_of_ref": "indicator--74d95243-40d7-4552-a544-153335e1172a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d58dbae-fc2d-4065-be97-9a9989051c2c", "sighting_of_ref": "indicator--eec76aac-3efb-45a2-b685-846e9dacda2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52216ea4-7497-481b-8981-138fbf57fdd3", "sighting_of_ref": "indicator--a3acf246-6298-4dd7-b8a9-e12fa830ed57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252870fd-8e21-4f7f-b9cf-44e1843d753f", "sighting_of_ref": "indicator--a3acf246-6298-4dd7-b8a9-e12fa830ed57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e59de0-a654-456a-a06d-85d6e278d358", "sighting_of_ref": "indicator--7eaa4345-5a46-4cc3-81f1-b94561f6a393", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1b7633-08eb-447a-af7c-ab72a7442159", "sighting_of_ref": "indicator--c7125580-77ac-4c29-bf1f-c2cd01e2b2ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a5a961-cb3d-4732-b7f7-c57f23b5066e", "sighting_of_ref": "indicator--21bf7c9c-26af-48e8-bf1a-b6ac187dc50c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aff4881-2139-43dc-be09-e58c811016ae", "sighting_of_ref": "indicator--21bf7c9c-26af-48e8-bf1a-b6ac187dc50c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c136253-3a1c-4c95-a6c4-430c8d149c1e", "sighting_of_ref": "indicator--97fa380e-71c7-45e5-a594-105696764a09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b890f51-cfb5-4635-a7da-c30f082d54f3", "sighting_of_ref": "indicator--97fa380e-71c7-45e5-a594-105696764a09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a991c3e-335d-4513-a335-fa27998276a2", "sighting_of_ref": "indicator--f10d4b46-671e-4d74-886a-b75f4d946d25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3efa0f-0447-407d-a60b-24e44e769d89", "sighting_of_ref": "indicator--f10d4b46-671e-4d74-886a-b75f4d946d25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418ee2af-8c77-4cb4-a952-f59ce7b27c47", "sighting_of_ref": "indicator--45d3ba47-84c2-409b-a2c9-88b667e337ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8261ea09-ae7a-414a-82ca-a132d40ef6cf", "sighting_of_ref": "indicator--45d3ba47-84c2-409b-a2c9-88b667e337ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552b2d34-53c0-4a2c-b13c-4cb68c6cf591", "sighting_of_ref": "indicator--18a70bca-dd74-47d2-b35b-df442c441428", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e51974-f3b5-47e6-884c-b112cb23407d", "sighting_of_ref": "indicator--940650c7-a458-4c07-a2ed-e0593e94f5c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aefd22-4a8e-47c6-ab72-0a908a6e6683", "sighting_of_ref": "indicator--711dc64c-d011-4574-ae95-78b184b674d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2ee8b7-d6fc-4edb-93e5-c10fa6c60004", "sighting_of_ref": "indicator--952baf1b-4475-4f3b-a748-d8a6d478a514", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b9765c-f91a-4ea9-a946-ad8f9b880862", "sighting_of_ref": "indicator--04d739d0-0e91-4731-a0c8-a46e059fbb86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e6f6d5-4e5d-4423-bfc9-45ec207a8d76", "sighting_of_ref": "indicator--6c21b7eb-78ea-4f05-bc2e-68fbb02baa85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d112c62a-d0ba-45c7-b144-e50e5a56a459", "sighting_of_ref": "indicator--cbcb985e-ed3f-4223-9e57-e24398b0af3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfa857a-54fc-4675-b1cb-8cf951ea49d1", "sighting_of_ref": "indicator--f93353c5-f816-429b-940f-56564153cfce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1d0320-8e73-4d06-989f-6f90cb85d31b", "sighting_of_ref": "indicator--90c4aa47-a526-4402-8206-7c5e47443cbc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2222fb8f-5315-4f7f-a921-0b99ff9d2b8b", "sighting_of_ref": "indicator--c68ad3b9-d187-49d7-98e2-e22e0524c3b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc92ffc0-6224-4147-b362-167a4dcbd38f", "sighting_of_ref": "indicator--dd6a301a-bf7b-41cf-98c2-a587d0f7d01f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d88435-638d-432d-bd40-43061fc7b59f", "sighting_of_ref": "indicator--dd6a301a-bf7b-41cf-98c2-a587d0f7d01f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41604a1-46b5-4bcf-b8ce-9bcfc88eb5f2", "sighting_of_ref": "indicator--0ce4d121-b19c-49a9-af1c-0070644d5e78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73af370-e049-41a3-ad58-5b3b4c08ea2b", "sighting_of_ref": "indicator--2c8214d8-0617-4dca-9e5f-815285061220", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce1cea1-6143-4bd0-b1de-77ed836b144d", "sighting_of_ref": "indicator--22383e20-89b2-4108-9a88-15b9099b2424", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7edb56a-428d-40a5-b455-50fa5c07cd9c", "sighting_of_ref": "indicator--44eaea05-16a8-422a-91a3-2d80bafd372e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09aa572-c299-495b-b283-b471a05b9e3c", "sighting_of_ref": "indicator--54d2cdbd-4035-4b5e-a6d0-f27caa49fcc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b7934c-5a06-467f-8ed3-8d96d47fd932", "sighting_of_ref": "indicator--5e9ed0aa-847a-4ae8-b9b8-63af498c24a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bd9777-b5f1-4ff6-9890-b2be32c34fe7", "sighting_of_ref": "indicator--f886eb76-429d-4631-923a-a3971e9bc3ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fee129-3ab5-454f-bf63-1cdd85940638", "sighting_of_ref": "indicator--d99e4a02-2bef-4024-a9fa-d08c86dab93c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58100d5c-4d84-4dfe-b959-1880dd67c2e7", "sighting_of_ref": "indicator--a5317fce-66fe-4a96-80a3-7921ed68d6b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da89a5c-1dde-4807-9141-2c3bd8630f04", "sighting_of_ref": "indicator--ebc34c3f-449f-41f5-8236-a39e73601658", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d553534e-dad8-49a1-9e17-ff72e5f48c30", "sighting_of_ref": "indicator--8e981f61-a660-4551-8258-bc26ecbba525", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3eaea5-5a11-4a7e-a056-bd7d515fb4d5", "sighting_of_ref": "indicator--95287373-bd0e-4e7e-94eb-0914601c3840", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a279341a-01fa-4c7a-8b12-825b50a3dcf2", "sighting_of_ref": "indicator--9fb32c16-6e58-40fd-9bf2-d2ce97a504a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba154541-70ee-4867-9482-4897aa981836", "sighting_of_ref": "indicator--82bcbbcf-07ad-405d-9d1d-039d09e3e21c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9828eff6-a042-4d30-b3c6-9a64d7bb976d", "sighting_of_ref": "indicator--a2f10cd9-b86a-4b9b-b494-5c802daa8a99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ae7f64-b701-4d5d-b733-a42431cb46d3", "sighting_of_ref": "indicator--ae9b76ff-207e-4c7c-b88c-eb16a3e76f91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7d7ebb-94eb-4f8c-9bce-6aa7669b3164", "sighting_of_ref": "indicator--dba7b8a7-f172-4432-bed3-9b10a29e5ea1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1f064c-c0c7-4c3a-9d3c-02d799edce20", "sighting_of_ref": "indicator--19d444a1-7212-4379-9edd-022b940e3242", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403d1920-3abb-4ac8-833d-823139302cdb", "sighting_of_ref": "indicator--910e0697-556b-4af8-b457-7c072a0d305e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda09957-05e5-4e7a-aa39-f72f97948681", "sighting_of_ref": "indicator--5dc5e998-580f-4358-8e10-6c6e28425e1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f462518b-7d73-445c-9382-c2fa55bae552", "sighting_of_ref": "indicator--7c6ae028-2460-4474-93dd-424053f0d251", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d15e6b-cc5a-4b53-95d7-c2bde04685dd", "sighting_of_ref": "indicator--e373d57a-e6e9-42b7-9bff-f82d7a67112b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea1f8d4-2f7f-4497-99a8-344aa5398ec2", "sighting_of_ref": "indicator--e373d57a-e6e9-42b7-9bff-f82d7a67112b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b8d714-63f0-4042-bece-3b5f46cc4ffb", "sighting_of_ref": "indicator--38856b9a-6492-4edb-8f98-bc4c21d24e2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f34f2e-b9ce-49f2-b2d4-10021315bf90", "sighting_of_ref": "indicator--38856b9a-6492-4edb-8f98-bc4c21d24e2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f952a4de-4d0a-45b1-b928-b49f6641e86e", "sighting_of_ref": "indicator--95739494-2a55-47c5-b85f-8db89af7f6d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f50d2a-3deb-4c70-bb64-95ff1c6a8259", "sighting_of_ref": "indicator--95739494-2a55-47c5-b85f-8db89af7f6d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028947f9-8c94-48bb-83e8-f4831a491a44", "sighting_of_ref": "indicator--b87d36fe-dc17-40ec-afe8-fa270e86dd8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406900bc-b1f1-4031-83ab-396bcf81ffef", "sighting_of_ref": "indicator--5435ae58-ec5f-4853-ab96-6acd35a1c2f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2476605-28f5-4a05-9655-bad5d7ca1d5e", "sighting_of_ref": "indicator--5435ae58-ec5f-4853-ab96-6acd35a1c2f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248d72b3-27f3-44ad-ae71-4836ab7cfe27", "sighting_of_ref": "indicator--8e2d5043-b01f-4049-b5ff-93e6756ce1aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45e9be7-bf68-4bcd-bfbd-0ca20149e9b8", "sighting_of_ref": "indicator--8e2d5043-b01f-4049-b5ff-93e6756ce1aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42d5237-65de-4db4-8ad0-831cc47e6c03", "sighting_of_ref": "indicator--c82c2a39-8f66-4329-9789-dd91347c27b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2635c5-ef78-4771-b08f-15f8da210daf", "sighting_of_ref": "indicator--c82c2a39-8f66-4329-9789-dd91347c27b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99879c3e-5e74-4af3-8d21-7994795f0b58", "sighting_of_ref": "indicator--7b87b2b9-85c7-4566-a582-c6e2c454bd1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d61a08-4765-4bbb-98df-3a54b73d75f8", "sighting_of_ref": "indicator--7b87b2b9-85c7-4566-a582-c6e2c454bd1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a517da-13fc-4919-a567-17a42281c7ae", "sighting_of_ref": "indicator--f4565b8d-c9a6-45b6-b025-5575b9dd8827", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb591fc8-ba7d-4cec-8f90-200cda8831a7", "sighting_of_ref": "indicator--3ee29fd4-83b2-4f96-8fee-41d8cba1ce7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d4a7a6-18b3-4ba5-ac44-a07cb707b3ab", "sighting_of_ref": "indicator--fd049756-76fc-4f22-ab8a-f60bf3b60690", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc146bc2-c8ef-4680-84e0-8cb1fcae8e31", "sighting_of_ref": "indicator--9a16f645-2a68-4900-891b-630f422383f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede3898d-3c5a-4c10-8df3-552214002737", "sighting_of_ref": "indicator--7d252843-5a0f-47bd-8436-b41203f776c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3a6fd5-e1c0-4011-beb3-c86b58a62f32", "sighting_of_ref": "indicator--a81156ca-d315-4f54-b332-d26842e70578", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0889dc-346f-4177-ac21-7428fe424a52", "sighting_of_ref": "indicator--d49310dc-3ba9-4a84-a034-44d1648f5e33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fbd02d-c985-455b-b330-5db25f96aa93", "sighting_of_ref": "indicator--d49310dc-3ba9-4a84-a034-44d1648f5e33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a53c22-50ce-4662-bbce-fbed7c0c40f7", "sighting_of_ref": "indicator--0d70474b-b3bd-4388-986c-6a3f520fd17f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3fdb91-ee8d-4f7c-a19d-72a517b238cd", "sighting_of_ref": "indicator--c6afeaba-c00e-45ba-b73d-814790f87556", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650ef90-fdb7-490c-8b62-023fe6d2cd5d", "sighting_of_ref": "indicator--c6afeaba-c00e-45ba-b73d-814790f87556", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c889cdd-ccdd-4915-aae8-264be07d4741", "sighting_of_ref": "indicator--9307cc91-26e9-4b48-a9f7-30a6259e571b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061d48f3-71ea-4ba0-9fc7-2f412a04cdb8", "sighting_of_ref": "indicator--65ce6a21-2dba-4f58-88de-710cb433c04e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100e4374-6369-4b43-bc01-80e13f31c998", "sighting_of_ref": "indicator--65ce6a21-2dba-4f58-88de-710cb433c04e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7a7987-07b5-4cdd-a5eb-1c780eeee691", "sighting_of_ref": "indicator--2399c378-c211-4d79-8743-f40ef618930a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b75d93-c8a6-4c67-9903-d9182a8f9019", "sighting_of_ref": "indicator--c5e0c731-a627-4adb-b50b-221cc4282859", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fbc88b-4576-44a6-a4e8-6cf6a064cb75", "sighting_of_ref": "indicator--e98a1d91-c12b-4b84-995c-22ce862ed593", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f690e86-5754-4ac6-b29f-d010f38d02e9", "sighting_of_ref": "indicator--095df8d5-1265-49b7-873a-ccd6cb3be8f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200950fb-a326-43e5-8707-dbcd9e4ce41e", "sighting_of_ref": "indicator--29b39c00-9e10-4857-bee9-83696a8c4d3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c5f5cf-75f9-45ff-a003-e92e5b27a873", "sighting_of_ref": "indicator--e6bb72fc-c976-44dd-8d84-1837534bb0cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e653a7b2-70bb-4656-a416-25098ca2fcee", "sighting_of_ref": "indicator--eca4de6c-7fe1-4840-98fa-592d5a4c057e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d5d82c-ae83-4605-9d78-29bcd8c2bea1", "sighting_of_ref": "indicator--1bfb5942-9d2d-4b25-9635-a6a3f9e15258", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3c80d4-32c2-42b6-a6ee-a4f6b2e7761e", "sighting_of_ref": "indicator--1f88806d-1d89-46b1-b8a0-4730cc9ffa36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda9e3cf-9d99-49d5-9f71-f8c5a2d24748", "sighting_of_ref": "indicator--de48db25-5c97-411c-b8ea-7ac079bbd48f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f584de-325e-4583-a2b9-a3b52ed23504", "sighting_of_ref": "indicator--4b96e354-fe26-43a9-94fd-e3f242e60efd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4808f8c5-4ac8-4f7a-bca1-cb8df057eaf1", "sighting_of_ref": "indicator--990a837d-ec80-4a5e-8393-4bee6f0e15b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b418cc58-7281-4057-b192-aa43726b6709", "sighting_of_ref": "indicator--fe309f8d-8b1c-4d79-9fd0-6780668247d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5eb234-04fe-442b-a670-2d518009d8ea", "sighting_of_ref": "indicator--f5c28324-bd9f-4f73-b0ad-007d9dcc6a6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bb40b3-716b-41e6-90a1-eaf9cf1cf90e", "sighting_of_ref": "indicator--fe28ced2-8566-452e-8e5f-af94aa1e3d6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90362559-c725-417e-b981-a17b49b8159d", "sighting_of_ref": "indicator--fe28ced2-8566-452e-8e5f-af94aa1e3d6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18df758-ff55-43e0-9784-d2e6437ee4c3", "sighting_of_ref": "indicator--c816418d-23d9-4f43-bfa7-eff57c416d09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e72f3f1-bf8d-4200-8341-8e4890c6b5a0", "sighting_of_ref": "indicator--5cc043de-6ca4-4aed-9a4d-1e2aebca0c2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec82bc8-5348-4a36-ba8b-67bd817f257a", "sighting_of_ref": "indicator--3da15412-092f-4ad3-b446-8de03e699c96", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cad8abd-3057-4094-bb38-1457c63ff13b", "sighting_of_ref": "indicator--b80e0218-b515-4346-94dd-1d2c3c699af6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f61d20-b445-49a6-9774-a5ac4f94cfa0", "sighting_of_ref": "indicator--b80e0218-b515-4346-94dd-1d2c3c699af6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f894c9ac-a3fc-4f1d-bcbf-1d7ec80a5831", "sighting_of_ref": "indicator--0240ede6-e414-4207-a676-78217975d3bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedb280d-684b-46d8-aada-b46cb5e7c7eb", "sighting_of_ref": "indicator--0240ede6-e414-4207-a676-78217975d3bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346b921a-73ed-422e-b95a-bac4ca52e4ac", "sighting_of_ref": "indicator--6f83f943-52af-4943-b976-7f03c7e0a9d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6063c2e7-3823-477c-910a-13cbb3a526e8", "sighting_of_ref": "indicator--6f83f943-52af-4943-b976-7f03c7e0a9d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf6d26b-1c33-4548-a69a-e92d4afced1e", "sighting_of_ref": "indicator--ec674788-a01c-437c-ae6c-ab846577a280", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adaf310-0abd-48da-9911-151e814cd7ed", "sighting_of_ref": "indicator--ec674788-a01c-437c-ae6c-ab846577a280", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f43065e-1307-4395-a2bf-8117b7ef77c4", "sighting_of_ref": "indicator--c389223d-fed6-468c-9274-a41b77bd6ac8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119cb1d6-a36a-4411-93e4-2a9b5eaab663", "sighting_of_ref": "indicator--c389223d-fed6-468c-9274-a41b77bd6ac8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa37374-db9d-4237-a40b-744909a891c2", "sighting_of_ref": "indicator--e9d43684-7c0e-4aca-8207-5a8de695fea3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f28001-83fb-4beb-bc1c-b93d07f15d44", "sighting_of_ref": "indicator--f7f8d060-edd7-4082-9b6d-e6aef455126f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb110b3d-da47-458f-968c-eef4366552c7", "sighting_of_ref": "indicator--f7f8d060-edd7-4082-9b6d-e6aef455126f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54177b20-808f-4d20-b22f-0ebe8c33e824", "sighting_of_ref": "indicator--7af796ca-ac5f-4869-87bb-a04973e92c7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fb6263-17a6-4c97-858b-b5ad0f3fe3c4", "sighting_of_ref": "indicator--c1e58e52-5707-46d9-9e35-afa5385e763b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c0c140-6f37-403d-b6c9-071376fa1aee", "sighting_of_ref": "indicator--a378dfa6-6997-47c6-ba4c-6d4fe39b1705", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6a58d8-73b3-4674-a557-73ccdb4f6241", "sighting_of_ref": "indicator--fb59d3a5-eec7-4838-8e70-ff04ce5be9bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970f8622-c17f-43f9-80e5-fb4dbd3dd123", "sighting_of_ref": "indicator--25cd4069-0e73-4e16-aa77-5a824e6a0bef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b996ab30-a6d0-4790-8bfa-b5e18256705d", "sighting_of_ref": "indicator--06f3a884-1296-44ff-9d83-d2e496f3d537", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090f6545-ef82-4ce9-86d3-c7ee5cfb2ac9", "sighting_of_ref": "indicator--06f3a884-1296-44ff-9d83-d2e496f3d537", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147893b-0026-4e23-be37-b56dcd6a7a81", "sighting_of_ref": "indicator--38d3b075-570a-45ef-b87c-36c397b63ce6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2b551b-e042-4241-a891-8460356e16e8", "sighting_of_ref": "indicator--9be7fcfe-a9c1-4af6-842b-54c5a136366d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77095b3-a24c-4c70-9549-dcaac7c37b8c", "sighting_of_ref": "indicator--0cc12df7-a320-480b-9f63-6a98d318a2ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3f777d-42ad-4d04-8bfa-24144dadb3c0", "sighting_of_ref": "indicator--0cc12df7-a320-480b-9f63-6a98d318a2ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04480519-9078-495b-a6c9-bcde053fc435", "sighting_of_ref": "indicator--9fbcb7f1-e77e-497f-af61-e29c0c06bae4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a82851d-a946-4cae-90b8-bbac80ef9d30", "sighting_of_ref": "indicator--9fbcb7f1-e77e-497f-af61-e29c0c06bae4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d396675-0748-4d94-ac52-25acb4a5b855", "sighting_of_ref": "indicator--85fadd34-8815-4edb-9e0d-36fa315917ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76960260-cda7-4540-b4bc-2aa60a015d40", "sighting_of_ref": "indicator--2568cdc0-4ed7-48db-b67e-ff2a68b8f58a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b509b1-742f-47e5-b77f-3bae5ec08a2d", "sighting_of_ref": "indicator--2568cdc0-4ed7-48db-b67e-ff2a68b8f58a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e801ed-69f3-42ae-8fa0-094c88303544", "sighting_of_ref": "indicator--e6c58bbd-d631-4cce-a95e-20cd7a70ed07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b315052-3941-4080-aca4-41ae93b399b0", "sighting_of_ref": "indicator--89c08a8f-2c0d-4500-8bb3-a6fa901e64f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40f00be-149d-4538-abeb-b4f6044224c5", "sighting_of_ref": "indicator--44e4dc7b-e0b6-4b39-8a0f-913b554c6945", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171facda-5bc0-43ad-89d5-044d72a6c06a", "sighting_of_ref": "indicator--44e4dc7b-e0b6-4b39-8a0f-913b554c6945", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fdddf3-7250-42e6-9de6-dbf7b3d702c0", "sighting_of_ref": "indicator--c2267ed8-05e8-4f3c-8a09-d578365c14a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a520c6b-d53e-4029-9840-974630deda10", "sighting_of_ref": "indicator--3fe0cfe9-d33c-44ea-a3c9-49f5a5aafd37", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296a0a9d-533a-4295-8d0e-443242ea8500", "sighting_of_ref": "indicator--7560578d-91d0-42f2-9a51-404963bbc86e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001ce021-1a65-4e34-9477-561346149695", "sighting_of_ref": "indicator--7560578d-91d0-42f2-9a51-404963bbc86e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10d89c6-4e83-4477-8528-c0e88d9f77b1", "sighting_of_ref": "indicator--33f19415-3c11-44f1-94bb-6cb5f7426ea8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16bfd2b-e583-44d5-b11e-a88dab5062e4", "sighting_of_ref": "indicator--33f19415-3c11-44f1-94bb-6cb5f7426ea8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8853ebfb-6dbb-4eac-92ee-5534492ee7e3", "sighting_of_ref": "indicator--d6a8b373-c9f4-4aa6-bc72-d058e4945e45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29ffc50-6043-420c-9b11-915552644481", "sighting_of_ref": "indicator--8ae53751-48c9-4192-b218-037482ccc037", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f964db9b-4df9-495e-b44d-6aaab155f65e", "sighting_of_ref": "indicator--8ae53751-48c9-4192-b218-037482ccc037", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a08553-1aac-4a46-8afc-af040849800c", "sighting_of_ref": "indicator--a22b5686-6542-41e9-95f2-ee69ece49fd5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f16c8b2-019e-42bc-8df8-9e5d5c95e304", "sighting_of_ref": "indicator--b7b87758-79a9-4ffc-a5e1-5821731fbda6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a23d90-f1b6-422f-815d-4b8760afc052", "sighting_of_ref": "indicator--64a797f4-ecfd-4cdd-9425-a8433e62f118", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1457a9-da01-42ba-a165-ae59dcf06d62", "sighting_of_ref": "indicator--3c69029c-f644-4f79-a2cf-8294b431c46f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e500a3-9173-4d96-97bc-5533e4541728", "sighting_of_ref": "indicator--683369ee-1b2c-4bf4-ac5c-8b7085e88cad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abb748e-35c5-41e7-b112-1e1f5d421b05", "sighting_of_ref": "indicator--683369ee-1b2c-4bf4-ac5c-8b7085e88cad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef639eae-7b83-45a4-956c-f973385ba762", "sighting_of_ref": "indicator--6d956bfb-ea0c-435d-8bdb-d3ca73d90256", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a370da3-e628-493f-8b5f-c048dd264931", "sighting_of_ref": "indicator--6d956bfb-ea0c-435d-8bdb-d3ca73d90256", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301c1ecb-6d2c-4c56-93d5-44351590d08b", "sighting_of_ref": "indicator--1733c0b2-d7a0-48c6-899a-a2d0d8a8f3c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeada8a-be44-4fe5-8ebd-11befc5e0ed4", "sighting_of_ref": "indicator--e3189390-2910-4a3d-9f30-4a460b094d52", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225e4f51-3430-49c9-b662-064fa344c2c5", "sighting_of_ref": "indicator--e3189390-2910-4a3d-9f30-4a460b094d52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61362080-5f2e-488f-a0a5-abeaef63c433", "sighting_of_ref": "indicator--b4ae7d2e-fa19-4974-834b-561d0115896f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26ff552-b565-47cb-acf4-210590f584ba", "sighting_of_ref": "indicator--b4ae7d2e-fa19-4974-834b-561d0115896f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fd7f97-b7d3-4a42-b6bb-2c65b3ae4331", "sighting_of_ref": "indicator--a89688ed-6091-4d5d-bad7-1c77e384a7b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2818bbb-0f11-4958-b98e-5bf2d8a46e7d", "sighting_of_ref": "indicator--a89688ed-6091-4d5d-bad7-1c77e384a7b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afc6d0d-3c63-458f-a882-bcac8d45be2e", "sighting_of_ref": "indicator--dc29c9f5-ed08-447a-85df-517d2197c624", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6357c8f7-4de9-4d09-ba9c-30e0032a28d3", "sighting_of_ref": "indicator--dc29c9f5-ed08-447a-85df-517d2197c624", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7ed13f-0411-43b5-82ba-e046ff917bb7", "sighting_of_ref": "indicator--f7d66372-c845-4c1a-a68b-b09b402d6687", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b55b3f-1677-44ef-8c9d-bc0fa273c86e", "sighting_of_ref": "indicator--80cb4cbc-2617-4d20-ba5c-0a8b93ca2005", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b55b8c-9085-4dc2-8253-33a55cb52cc3", "sighting_of_ref": "indicator--d3b29409-06c5-47fd-b2b4-531d9a7d35b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad738ff-d5f5-4df3-b2cd-1413b363ebb8", "sighting_of_ref": "indicator--d3b29409-06c5-47fd-b2b4-531d9a7d35b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb09cdca-bfa7-40ca-b48a-d48060e2f1a2", "sighting_of_ref": "indicator--2d8732f6-dcc7-4e98-ac8f-fe6413bfb14e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cede76-5030-4b45-a3c2-dd81a87a969a", "sighting_of_ref": "indicator--1eb577c8-20e2-4a48-bacc-d7d92b966eb9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778585ab-18c5-4cbb-a37d-4f64fb3cbbe7", "sighting_of_ref": "indicator--1eb577c8-20e2-4a48-bacc-d7d92b966eb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6007d682-4854-46cb-b581-c84bb49c2d9f", "sighting_of_ref": "indicator--cda819e0-c1fd-463b-b9d5-3acbc43efa0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d8219a-853a-4391-bf1f-991dd007fe7c", "sighting_of_ref": "indicator--cda819e0-c1fd-463b-b9d5-3acbc43efa0f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a14a07-a88f-4528-88eb-335251ea1c2a", "sighting_of_ref": "indicator--6f4b439e-775c-4bdd-b462-d16d4eb9da39", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45cd2e8-ac89-4fc9-9700-db25278446b5", "sighting_of_ref": "indicator--6f4b439e-775c-4bdd-b462-d16d4eb9da39", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a0561d-f8af-4e40-b23d-2f643d3b0be7", "sighting_of_ref": "indicator--faa6427e-f91c-4ad1-a33e-9fb97b318798", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c2d26-7174-4e9b-a0de-226bd5295398", "sighting_of_ref": "indicator--3716c61d-37b7-466d-9024-4671614c28c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b044ca0a-0322-4a98-b32d-765d09f0066f", "sighting_of_ref": "indicator--bf52283f-1136-473d-a535-38798f180e8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8927b3-1db2-4746-9a52-63d70d090d48", "sighting_of_ref": "indicator--abde7198-b8da-4213-999d-670acead9a22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc09e6-7d6b-4d3d-b0c5-e2390d8eaae2", "sighting_of_ref": "indicator--4abe2df9-2a9b-4eab-b962-d26da9f78ac3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c959916-137c-461d-97b9-b3d9b17feb29", "sighting_of_ref": "indicator--4abe2df9-2a9b-4eab-b962-d26da9f78ac3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd1772d-c978-4fc9-915e-240b16621cb8", "sighting_of_ref": "indicator--01906a2a-7cd2-433d-b47c-2b7a8dfc5f2b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14f4f37-63df-4c79-92ec-e9a63357f017", "sighting_of_ref": "indicator--7b50d060-8091-4354-ac0f-34d64cbbf551", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d12b1a2-b921-4a7a-bace-9e57120c91fe", "sighting_of_ref": "indicator--51fe81c3-a746-4473-9e8a-7e6dd75056c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cda7e6-4615-4824-ac5a-6893f864e01f", "sighting_of_ref": "indicator--f5ca48f3-73ee-4b26-ab8a-b0b2554ebb2c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735b8748-79a9-4425-a2d0-68986cef8cfe", "sighting_of_ref": "indicator--dd161303-d942-4989-8d81-0dfefc859bf6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0febd6dd-fc6c-4725-b1bd-5bab7f504fc9", "sighting_of_ref": "indicator--8aae7bbb-b915-4292-be66-c7992323f62d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10637abf-63f4-4f27-8f8d-402bc55727ec", "sighting_of_ref": "indicator--c291b15e-3895-457a-a650-da0a37509906", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3506f84e-b1c1-4019-b397-24f738328e05", "sighting_of_ref": "indicator--f3ec32c4-788c-4fe5-af0c-b20385149c72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36d045f-9c61-41b8-a2ae-d04047ad8dcb", "sighting_of_ref": "indicator--67109a83-cd08-44b5-b821-babc07528973", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95114b98-d1bc-46fe-aa93-4b28697429cd", "sighting_of_ref": "indicator--d40cf53f-e620-4f25-9a08-d1e952d1f447", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd79312-ca5d-4289-ab45-9786c3ae5f52", "sighting_of_ref": "indicator--61ee2a3b-d5ed-4abd-b7a7-0e09317d72ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965c27ce-9b75-4450-88a2-f0e070e620d1", "sighting_of_ref": "indicator--69c26b0d-44b0-4701-afbf-028c9f455936", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141384cc-95f3-4418-b88a-b44f38e73237", "sighting_of_ref": "indicator--77939daa-20fa-4be0-838c-95d881357123", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bae1106-a2c0-4ab0-9ba6-997071a84f6d", "sighting_of_ref": "indicator--cd575da0-4f5d-4b36-9c5d-2f648470c666", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b806c587-4882-4555-8079-443cc543b51f", "sighting_of_ref": "indicator--9a156359-0950-4c48-a2a4-d203bbb608cf", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90278740-08b7-4cdd-adbd-f7535298d348", "sighting_of_ref": "indicator--5a1d3897-c830-4297-8240-cd90d8dd7cd0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c3a56c-9223-4abf-8975-9cd57cfd11ba", "sighting_of_ref": "indicator--5a1d3897-c830-4297-8240-cd90d8dd7cd0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24da46fe-6fc8-4dbc-909e-3fd74b4ad767", "sighting_of_ref": "indicator--cefeda3c-24ce-43f3-b936-5326ab5a7e14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf684ee0-c197-479a-bb8b-865eb7bb22e4", "sighting_of_ref": "indicator--b2c16e67-f108-4066-a91c-36aa5e321aeb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2414042c-0e13-4dce-a677-cfbfc95c1116", "sighting_of_ref": "indicator--79711323-24de-4dc0-9262-e9f0f9bf3f63", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4525c2-e2ec-4505-85df-0160d50ec815", "sighting_of_ref": "indicator--c0b0d85f-50c2-402b-8228-b773ff6e57fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86751aa-1236-460a-8aa3-3656c9724ab7", "sighting_of_ref": "indicator--b2a29aa0-3d39-4841-8a52-8bd967d3263f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2475043-5e45-481c-93aa-f26f2dcc7633", "sighting_of_ref": "indicator--b2a29aa0-3d39-4841-8a52-8bd967d3263f", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf0791d-0867-49d6-877c-341497d7f8a4", "sighting_of_ref": "indicator--f03ffc3a-ec66-4778-a425-8bfa5b92bbac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5080aefd-3bb9-456e-a5d8-44439f82e8b0", "sighting_of_ref": "indicator--7e42b54b-9830-4627-a215-a54296e6be6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcadb94-aa34-4d33-b68f-d5b27c2aec94", "sighting_of_ref": "indicator--b6011e13-a925-4b8f-a2ce-45fd8f8e26a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c5811f-c7bc-40dc-9a44-55e76be9aec0", "sighting_of_ref": "indicator--ad3ebaeb-fc78-40b8-a42d-cf442b576fee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a34cc9-c7e0-4c59-a5d3-2e4ad527cea5", "sighting_of_ref": "indicator--4368bab0-5ae4-4cee-97a4-d56abdbd36df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd0e378-a097-4ad9-91af-bc24c0259d49", "sighting_of_ref": "indicator--d165faad-f3b5-49a3-8722-1d5c5df56bd7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df202a62-109d-4579-864a-4ad3a57745e5", "sighting_of_ref": "indicator--18b0a0d0-79fa-43e6-9302-9c5bf1e01fcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74241474-6690-4fd1-ad3e-5d3233c66658", "sighting_of_ref": "indicator--afea662d-bfe2-4a89-8714-b93ac442f79d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0e4fc4-1292-4c0e-b341-45158f60812c", "sighting_of_ref": "indicator--abaf6301-e3fc-435b-ac92-b753385a8a40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdff3e4d-c87e-415f-82b9-75d4d3f164ef", "sighting_of_ref": "indicator--19482c4f-158c-4902-8d41-767d5a1355dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a2b15a-4cd6-440a-ba17-9e9e8ad5cb48", "sighting_of_ref": "indicator--6350baf9-d322-4294-8f1d-3ce7361a4899", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fdfff0-af8d-4073-893e-abb5b3d65df7", "sighting_of_ref": "indicator--c9382198-3282-4ffa-b41a-5931154fbf33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa71d17-c86f-46dd-9c59-55dfc213aa18", "sighting_of_ref": "indicator--1c4223a8-688a-4803-b348-bd1b9378165e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff350b7-1291-4614-8c21-b68697c48193", "sighting_of_ref": "indicator--73bf21d2-def2-48a3-af67-db078be35e66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f802b9e-eb2e-4934-b5af-aa39b34a4d6a", "sighting_of_ref": "indicator--5ec411a3-7c01-4ebe-aefd-2d3cbdd94c19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619f7cb3-83f0-48bc-a589-15258f27faa8", "sighting_of_ref": "indicator--b652e3e5-84ba-414c-8959-0c002bdc782f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd15a11-a4b9-47ec-b3df-b682bd5c1e7c", "sighting_of_ref": "indicator--f2c4ea40-810b-4a8c-9173-7a8e3f56437f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e40646c-eab2-4d86-a0ab-4b5c2685e6fe", "sighting_of_ref": "indicator--bb413902-7e9f-41b7-a304-d77bd3efc53d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0fd3b4-efd9-479e-a908-c50636930596", "sighting_of_ref": "indicator--a621c799-d146-4fab-9564-ce4cf5ec7473", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39012ab2-6d79-4d17-a8a2-b078ff588b68", "sighting_of_ref": "indicator--966a461c-7863-4fe8-a39e-1d9eb86a2e34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c855a0ab-3f8c-49eb-8cfa-4fdc5531d181", "sighting_of_ref": "indicator--2d20456a-6d55-4e2d-ac28-1e47e7e2f96a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421bd5a7-71f3-4ff8-bbc6-5032f6c3829b", "sighting_of_ref": "indicator--5946a09c-f8be-49f6-965e-6e98cb06e9eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8c472a-cccf-4fa3-8a03-761984f1946e", "sighting_of_ref": "indicator--3ad18f59-d01d-4a83-8bd3-befd810653a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9522c9-f9a9-4c74-9465-ea62cb072134", "sighting_of_ref": "indicator--58634b2b-e997-4c1b-9bc4-01084caca25a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e97160-2a70-4b6f-9242-32fe2028aa38", "sighting_of_ref": "indicator--42b06a00-fd79-4359-9146-3aa7cd162022", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a88cdf0-5701-4e07-a61f-07be1949aaee", "sighting_of_ref": "indicator--8652dc97-6890-40fb-b342-a650a607eca7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6f2da6-6457-415d-ad75-819fcbe94293", "sighting_of_ref": "indicator--aef88c4b-503e-4b58-afbe-0a4172f4f27a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf8eefa-618c-4b3e-af93-ffc036c2025f", "sighting_of_ref": "indicator--aef88c4b-503e-4b58-afbe-0a4172f4f27a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2ffd28-b6f3-44f0-a8c3-13bcccab9d2d", "sighting_of_ref": "indicator--1d4acaf3-9107-4cf5-882b-541df0d04228", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c42783-5603-453c-b34b-dd4da3636338", "sighting_of_ref": "indicator--90a816fb-caa7-41c7-b619-d9a8c352bde3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5ea828-7d6a-4cbe-98a8-6cf03e10ef0e", "sighting_of_ref": "indicator--ceb8f345-f7df-4a46-a4e4-d3c4afce214c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a5e952-ba68-4dd6-a8af-3be4880c3e58", "sighting_of_ref": "indicator--e6f9b8a7-8456-4516-8ab3-d723078143d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcdf0c6-43e9-4a67-b951-6c92f24636d4", "sighting_of_ref": "indicator--ee6d3a6b-cb54-4765-86c2-daec976d4739", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cded181c-4d05-4fd7-89dc-f969d2524cd6", "sighting_of_ref": "indicator--ca309817-7eba-4b4c-b0a2-8cee5e39a7d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a17454-5e36-4fb4-a60f-1fdd8ee12443", "sighting_of_ref": "indicator--d31186dc-3e78-4226-8fe9-2013b144ac57", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685b0b93-3237-4e9b-9412-b765ac119761", "sighting_of_ref": "indicator--b47fe3bc-e877-4644-9737-073bffe6b37b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03dfe4d-b1b3-4257-b4c0-78bfe39d986e", "sighting_of_ref": "indicator--4c2e7655-f438-4bf1-a6c1-f5b3158301cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd01bac-c9bd-4b44-9301-4901f6225a47", "sighting_of_ref": "indicator--f224f9a9-1332-4e3d-90a1-facff4364cb5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0cc8e-5c0f-484f-ba8e-e3f5885f05d7", "sighting_of_ref": "indicator--6ce9daea-55e4-4238-adec-9166cadce96c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff617bf-ef23-4845-b2cc-8f1ae8463594", "sighting_of_ref": "indicator--cecdb91f-9d73-4cf4-ac4b-27ac760f09c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644fa029-a709-47e3-8dec-822136f72cae", "sighting_of_ref": "indicator--ebabb7ef-2cca-48a7-8541-73507da7a917", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6a5297-a895-46c9-a68b-3232a0227c65", "sighting_of_ref": "indicator--c7d93b47-071f-437b-bb8f-3c15d187a55c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd21fcb-221c-4e54-9148-6b31483046ae", "sighting_of_ref": "indicator--f6bd4c10-bc02-419d-bf1e-ee538e1e0340", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b96a2b-8200-424d-b13c-a45865c84815", "sighting_of_ref": "indicator--d6018ade-2bdb-4d57-baa3-c8c457872321", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3515319b-1b93-4bee-80b7-c77800a79876", "sighting_of_ref": "indicator--de42f272-9523-41f9-99c7-3f4c68aeaac0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b8a871-7eff-4fbb-82fd-11afef755bb2", "sighting_of_ref": "indicator--136b1138-e0c0-4d37-91c9-9bacba63f374", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5176e38-cbfd-4760-8f67-479030c938ad", "sighting_of_ref": "indicator--3ef62454-8a2e-4fff-b6a3-096d7ed5d71f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5209f1b3-1061-45b4-a4f9-65a24d25376a", "sighting_of_ref": "indicator--c5aa2115-7b8f-4fde-b98d-7794db31376f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adee276-aec8-4c25-82dd-f01578ee35e2", "sighting_of_ref": "indicator--2761f460-8044-4d35-b81b-62adc055b7ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97827a1d-7f7f-44a5-b36e-964279e5d7cb", "sighting_of_ref": "indicator--3aabcea1-cf9f-4507-86fd-a8df617ad228", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c986698-c684-4a34-b260-039c3e01b4c0", "sighting_of_ref": "indicator--752d8c58-ae42-4e98-be03-ab4d24b1fc52", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa19795b-379a-4ac9-ad60-8ecd978e021f", "sighting_of_ref": "indicator--d328830d-0bed-4688-8247-841b1cca151a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b76770-b57f-420a-9aa3-e40728fe0dfc", "sighting_of_ref": "indicator--8139b093-6c20-4706-8723-4535953d73d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcb19d3-ca7e-4923-ad52-d2a0a0c58210", "sighting_of_ref": "indicator--db852c09-336b-49d5-a6f6-ece4b2fb8697", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576c84b5-4af3-4b37-89a6-e00d4bca4512", "sighting_of_ref": "indicator--7f484bf8-af94-40a3-bcb6-7a7affd80d30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa35a3a-5960-4a8c-b7fe-f20ff7597426", "sighting_of_ref": "indicator--8ebb070c-72f4-4de8-92e1-be30fb37f3d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e50a62-8d4c-49c5-8c59-a6305544ced0", "sighting_of_ref": "indicator--27b6b6fc-0d47-4aff-9370-2b01b3453a1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47db1048-8399-440b-84f9-4202f62b7ec3", "sighting_of_ref": "indicator--58c1347f-3777-4709-8c58-2f371a96c37b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8888a71f-008f-40af-b79f-d81ab8d472d1", "sighting_of_ref": "indicator--8f384c0e-e5bb-4389-a547-1b8e202fe942", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341bf9bf-a990-45c4-8781-caece5bd1864", "sighting_of_ref": "indicator--257f979a-6dea-47ff-ad58-7855bccb2358", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026c6701-1e36-4b63-bb44-c83707336583", "sighting_of_ref": "indicator--257f979a-6dea-47ff-ad58-7855bccb2358", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51776baf-3875-475d-871c-69d51cee74c5", "sighting_of_ref": "indicator--ac1a23f3-98ec-42ec-ab4b-e977d81d65a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364378cf-f4c8-497d-8268-5dea75d08868", "sighting_of_ref": "indicator--8568eb05-7b8b-4229-a312-3797829df7c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec23fc3-398a-4551-8624-a371162ccff6", "sighting_of_ref": "indicator--620f95c2-acc0-4449-94c4-3b5749eb9fc5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba995b35-97d7-4581-95ee-158730552cd0", "sighting_of_ref": "indicator--49af8957-758c-40bc-b5ab-df61ceceb0f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74972a77-37fe-4787-aa21-d5a8cd15b4c0", "sighting_of_ref": "indicator--d4e3fe8a-d905-45e3-a522-d5e218045bef", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38265f00-413c-44e6-8e2b-95164542b6b7", "sighting_of_ref": "indicator--144e3684-c769-4440-b67a-85f9862f722b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf32fbe-24ec-4313-814c-e80f1e089b2c", "sighting_of_ref": "indicator--144e3684-c769-4440-b67a-85f9862f722b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810446aa-904e-4c21-a21d-b7645cf56641", "sighting_of_ref": "indicator--2324244d-b6f8-454f-b4bb-84ccdf0a228e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6a1777-552f-4571-b0b1-f427bcd08444", "sighting_of_ref": "indicator--1b074fe8-bdab-4f35-8279-6d2cf6472712", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf7cbdb-604e-4d51-840f-d0b556b3a436", "sighting_of_ref": "indicator--e105c175-b789-4a8c-8d73-6b083a2249f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ee8ecf-ab3c-4ae6-9ab2-7b3135c550c1", "sighting_of_ref": "indicator--9b4530f5-8861-4f00-bcba-84c73926c4dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15d6c21-5569-46f7-9d0a-79b880269a12", "sighting_of_ref": "indicator--9b4530f5-8861-4f00-bcba-84c73926c4dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c303f341-685d-48fb-9e79-2e36a88de12d", "sighting_of_ref": "indicator--daeb93b8-037e-4b73-b9b4-7ce1dcf011ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd843270-1438-447c-8d96-70dec9d63b63", "sighting_of_ref": "indicator--daeb93b8-037e-4b73-b9b4-7ce1dcf011ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe3fd9b-43b8-407e-8a50-479b44bf8170", "sighting_of_ref": "indicator--5879a0bd-06a4-4b47-b314-1c2a8f9191c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14261ea7-784d-4350-82aa-59bb48e68f68", "sighting_of_ref": "indicator--5879a0bd-06a4-4b47-b314-1c2a8f9191c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892b938d-6e03-4d13-9834-cca5d8070097", "sighting_of_ref": "indicator--6fa3f711-7a29-4294-998b-164a3225ee04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345bfbdb-4814-41d4-9ddf-27e93315c734", "sighting_of_ref": "indicator--addf5026-f538-4849-b46f-cb28653c509e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0ed7bf-9b5b-47b9-9060-c62e7270a9db", "sighting_of_ref": "indicator--addf5026-f538-4849-b46f-cb28653c509e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c3c9b4-0dff-4ff0-ada7-532ecb224e72", "sighting_of_ref": "indicator--3c5d8ef0-3aa3-4f9d-9292-7c4bae31ebf7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304e43b2-1729-452c-af3d-a212cf002a4a", "sighting_of_ref": "indicator--3c5d8ef0-3aa3-4f9d-9292-7c4bae31ebf7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91914df-8bfe-4c55-825a-d17deb5fd570", "sighting_of_ref": "indicator--6dc76e00-2ec0-4337-8598-8ae8af83822d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be09149e-f46d-425f-9317-bac6adcd7237", "sighting_of_ref": "indicator--3c7d2148-cac6-4862-8b9f-d72e10c44e62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b11081-5a8b-46cd-94a5-22c6b51b01b7", "sighting_of_ref": "indicator--3c7d2148-cac6-4862-8b9f-d72e10c44e62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f3bc62-e540-4019-8700-7dc383927960", "sighting_of_ref": "indicator--5b4b56fa-02b7-4990-b21e-0c21c82e7e04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d891fd4-345b-45ee-b53c-0a8ef486f307", "sighting_of_ref": "indicator--5b4b56fa-02b7-4990-b21e-0c21c82e7e04", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97ba3eb-e9ac-461b-85f2-44c22f58efee", "sighting_of_ref": "indicator--32eb0ea2-125a-4de7-a1c1-a4ddf656fabc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7017b3-e5bf-4e7a-acae-2853d5c1106d", "sighting_of_ref": "indicator--a858c254-8915-464f-ba32-48bae1e7159e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcb5dc8-1fd3-4b66-83e6-bd16b1ce583e", "sighting_of_ref": "indicator--dac043cf-9b9d-4c16-b050-fb1cb6f125b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4a27d2-37a7-4501-adf1-1eb6aa5d6575", "sighting_of_ref": "indicator--7b64c8c8-52f9-42ff-9eab-fa48517af55b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc42cf2-81dc-4af7-af35-158628b348fc", "sighting_of_ref": "indicator--574a8ed5-6ad1-4238-8078-322015f42628", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f11f22-bbf6-4818-a4de-0e80c8eb4d21", "sighting_of_ref": "indicator--ad69141b-666f-4d44-abaf-5a7298555dd2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76c5721-fd45-4a92-bc6c-b5d06b701622", "sighting_of_ref": "indicator--2d23115b-71c2-4c35-b250-2887b30e5bcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2140b8f4-9e94-45be-868a-72754e996259", "sighting_of_ref": "indicator--d0c1428d-ddae-4774-962b-0689e1dd1e9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae19ac07-cd18-4d67-b633-e601d0206058", "sighting_of_ref": "indicator--d0c1428d-ddae-4774-962b-0689e1dd1e9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc202a9-4469-4fbc-b1ec-b0a6ea14163e", "sighting_of_ref": "indicator--d041e535-f0d8-4b6c-b11f-e305f855df62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a8f8c9-4d7f-4d60-91ea-689fefffd60b", "sighting_of_ref": "indicator--695fbb01-d244-48c6-b185-f39a577dcc63", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbc8e78-6512-437f-be58-71e911b23d2e", "sighting_of_ref": "indicator--c81f3c11-aee3-4572-9b33-71ce69a44a28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84500110-7723-4ea4-bb3e-8b5088258c16", "sighting_of_ref": "indicator--4c4164da-692e-4f30-8ef0-edbb6ddef15f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570603e3-1f2c-46dc-98a3-776434c2be78", "sighting_of_ref": "indicator--8c54414d-9a23-49d4-ba74-8e1f5b299040", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd31721b-9595-4662-bb7d-94b2f7bfde59", "sighting_of_ref": "indicator--7605d07e-f290-487a-accc-15b112d6f3a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff46fc6-79e3-436a-a5b0-4e5b4ee8ba3a", "sighting_of_ref": "indicator--7605d07e-f290-487a-accc-15b112d6f3a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d990e7-48db-4aa8-9ed1-a6aa4d98e0a1", "sighting_of_ref": "indicator--74f4f4a9-da7f-40be-bc34-a6465d2ccd5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd53d3-2eff-440b-a85b-0c113b91d17e", "sighting_of_ref": "indicator--74f4f4a9-da7f-40be-bc34-a6465d2ccd5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c06615b-66ed-428e-9272-3f459062bcab", "sighting_of_ref": "indicator--23144da2-bd69-4b09-9530-dd47edacafac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b3544e-d27d-433c-bc76-368483b4172d", "sighting_of_ref": "indicator--23144da2-bd69-4b09-9530-dd47edacafac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa2f5a5-9066-43f3-b054-865881709d04", "sighting_of_ref": "indicator--b76c408d-825a-4fe4-ac74-3ee484201266", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5932d8-da1e-41fc-b17e-a8dfdc628ef1", "sighting_of_ref": "indicator--b76c408d-825a-4fe4-ac74-3ee484201266", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b59217-8d3a-4934-b9e9-6937c9798ca3", "sighting_of_ref": "indicator--796dceb9-0e6c-4c78-8e8e-3b21a9919754", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8c6cfb-ca2a-47dd-8b21-0f53f73b91cc", "sighting_of_ref": "indicator--796dceb9-0e6c-4c78-8e8e-3b21a9919754", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d15780-8406-4f70-a3da-c750ec34f296", "sighting_of_ref": "indicator--f78ee52f-4f2e-4c65-8f70-c6dc5826475f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd709ff-a32f-4fa9-a75f-51fbe4037c50", "sighting_of_ref": "indicator--f78ee52f-4f2e-4c65-8f70-c6dc5826475f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13b524-6912-463a-987a-f84fefb1d9f2", "sighting_of_ref": "indicator--b7baca35-869a-4d20-b721-8f9061bda811", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96ea21-3885-4971-b139-e0007d852d8b", "sighting_of_ref": "indicator--b7baca35-869a-4d20-b721-8f9061bda811", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5273ce5e-e8cb-4cf0-ad9e-bb5b2db3dc3b", "sighting_of_ref": "indicator--55fbe313-8e24-415b-bddb-9af166a2a8e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5833113e-6221-4d5c-9ad0-5c7a709ceb7f", "sighting_of_ref": "indicator--55fbe313-8e24-415b-bddb-9af166a2a8e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c120772e-f46f-41f7-a224-aa2b1e8da5a4", "sighting_of_ref": "indicator--6e50343d-224c-4206-8edb-97933a7cd2a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8e0ca9-6b61-423f-ac85-f81f33824348", "sighting_of_ref": "indicator--6e50343d-224c-4206-8edb-97933a7cd2a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7536cc20-5e3a-42ef-ad50-fb2b6e0de6bd", "sighting_of_ref": "indicator--4209625f-0bcc-486d-b1dc-83e212dac94c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10f3b8-78ec-44ed-a2be-e99f809b780b", "sighting_of_ref": "indicator--4209625f-0bcc-486d-b1dc-83e212dac94c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392b00f5-a56c-4f58-b5a6-593b36959759", "sighting_of_ref": "indicator--0a6c0970-a353-42eb-9989-08d2f3edab06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0f2a75-89ba-4a2a-9e55-ef5ae5e607e9", "sighting_of_ref": "indicator--0a6c0970-a353-42eb-9989-08d2f3edab06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8feea8e0-d47f-480b-bfc6-521706381dc8", "sighting_of_ref": "indicator--e86ed30a-ea99-4346-9926-f29f027db211", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78cb861-8421-42db-ad5e-41e0727aaa58", "sighting_of_ref": "indicator--e86ed30a-ea99-4346-9926-f29f027db211", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c1221d-63f0-4a41-8720-aa02bc2e0936", "sighting_of_ref": "indicator--6f171d68-0563-491f-926f-8fda9327f3e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44178f04-925b-4475-bb38-cc3e0ae0247c", "sighting_of_ref": "indicator--6f171d68-0563-491f-926f-8fda9327f3e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63816c8-deaf-4b32-9d49-00e7acacdf12", "sighting_of_ref": "indicator--d9e7ebd6-68df-4888-8f61-cd8954855d19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb5fb74-d631-4408-b1bb-07ee48f05057", "sighting_of_ref": "indicator--d9e7ebd6-68df-4888-8f61-cd8954855d19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42d3c74-cd70-4307-b1b6-f6e07beaa11c", "sighting_of_ref": "indicator--b87cb250-fbf5-48d9-afad-dea0324b5a76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0529b3b-90ed-4dce-9a85-93e308906ee5", "sighting_of_ref": "indicator--b87cb250-fbf5-48d9-afad-dea0324b5a76", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9812d343-ff5e-4289-a8ac-7e8a32b863ec", "sighting_of_ref": "indicator--d85c3e0e-32c4-4ae9-9403-45453a736408", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc2e619-ea02-4f64-b266-d5f7b5355e85", "sighting_of_ref": "indicator--d85c3e0e-32c4-4ae9-9403-45453a736408", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5522925c-9e3c-4bbe-8de0-49630354b9dd", "sighting_of_ref": "indicator--c7484fbf-26d6-49c8-8de9-63cdcf4ad056", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cc4af0-9e60-4458-becb-153acd932222", "sighting_of_ref": "indicator--c7484fbf-26d6-49c8-8de9-63cdcf4ad056", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78a770e-da69-4f0b-91f5-e5aefe412d72", "sighting_of_ref": "indicator--5c7b67cb-2f72-497e-856e-64a839d571af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01cd524-f470-488b-b588-915d92b8ac7f", "sighting_of_ref": "indicator--1315d984-1467-4047-aa7c-c3fe9b157fd3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b0ccc6-8056-4668-8517-5da2c57ec46e", "sighting_of_ref": "indicator--1315d984-1467-4047-aa7c-c3fe9b157fd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4707abe2-49fb-4e7b-bd27-b616e0b89b83", "sighting_of_ref": "indicator--a3470314-2c6e-4868-9c09-a65201f446a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d669f4db-fafa-4fb6-8aa5-f62a6d5168b1", "sighting_of_ref": "indicator--a3470314-2c6e-4868-9c09-a65201f446a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14274cb-4da1-44b9-aa21-c7d8c62e7c12", "sighting_of_ref": "indicator--d2fa9b67-f799-470a-bfc0-d6994a0a085e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd17126b-4196-4cf4-afde-24448b557c38", "sighting_of_ref": "indicator--d2fa9b67-f799-470a-bfc0-d6994a0a085e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a9023a-9da6-41b2-93c7-767044894350", "sighting_of_ref": "indicator--7eabe21a-8666-42a4-b0a6-d09ba3d95018", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9af170-9fc6-4879-bec3-38b34d5de806", "sighting_of_ref": "indicator--7eabe21a-8666-42a4-b0a6-d09ba3d95018", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31da060-df79-493e-8837-adb904dd7c28", "sighting_of_ref": "indicator--51c1cd9e-b2f7-404d-a4fe-2dd893931dfd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa4be68-df05-4b55-a377-883d47da3932", "sighting_of_ref": "indicator--51c1cd9e-b2f7-404d-a4fe-2dd893931dfd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0258592-fa6e-4455-a526-b156b9c7e19d", "sighting_of_ref": "indicator--f7e813f8-f3c1-42a2-a459-774924c4ae31", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d28a90-a32b-45a3-9077-f7a21013d74a", "sighting_of_ref": "indicator--f7e813f8-f3c1-42a2-a459-774924c4ae31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08969028-10db-4077-929b-d9fe1125d5ec", "sighting_of_ref": "indicator--925c5b5c-c0ad-4c1b-aa34-1be48ef0c873", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c89970e-9546-4a51-bdd9-f32f45e0f03d", "sighting_of_ref": "indicator--925c5b5c-c0ad-4c1b-aa34-1be48ef0c873", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e12a09-90ac-4c8f-a9fb-23dcb117c1cf", "sighting_of_ref": "indicator--bb7e966d-7393-404a-a9e1-b0869e228a75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1de778d-9b03-4237-bc05-3b19d6ac1400", "sighting_of_ref": "indicator--bb7e966d-7393-404a-a9e1-b0869e228a75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eb2a70-f8dd-42ce-82c2-f39e8149738c", "sighting_of_ref": "indicator--51d271dd-2b00-4842-9ab5-27c39412cd3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f0ea4a-f09e-4eab-bf8d-dd5b873917ad", "sighting_of_ref": "indicator--51d271dd-2b00-4842-9ab5-27c39412cd3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a29af6-5c11-4b00-8c77-6c193f1bbf40", "sighting_of_ref": "indicator--5b6f0d4d-07d5-4882-8484-6c5d233e9562", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8855f54c-283b-4ba6-a3cf-8baaba6389a1", "sighting_of_ref": "indicator--5b6f0d4d-07d5-4882-8484-6c5d233e9562", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5ef76c-b94b-4349-867a-f9337ddcc683", "sighting_of_ref": "indicator--2f6d2f11-af12-46ed-9994-c0dcaddcde19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c84ad71-7472-45c4-b77c-408b52c42b24", "sighting_of_ref": "indicator--2f6d2f11-af12-46ed-9994-c0dcaddcde19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fd3454-3150-49be-ba20-4d978db7c39c", "sighting_of_ref": "indicator--f5d1492d-66a4-4403-a319-4e70297a8cfc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3259fbc3-3aa2-4fe2-af3f-84d9902f20fa", "sighting_of_ref": "indicator--f5d1492d-66a4-4403-a319-4e70297a8cfc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b3e9bf-adce-49dc-b6b0-1e94cbe75cab", "sighting_of_ref": "indicator--33d04591-32d7-423d-b312-167c08ff12ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a345d563-2c05-426a-b6a7-a644b08cf018", "sighting_of_ref": "indicator--33d04591-32d7-423d-b312-167c08ff12ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68825d17-d12b-40c1-8ca0-63cba739df4d", "sighting_of_ref": "indicator--4fdc6133-c557-440e-ab21-5edbc98bef4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eb0fef-0f65-4d44-b3cd-711838c6265d", "sighting_of_ref": "indicator--4fdc6133-c557-440e-ab21-5edbc98bef4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc396690-7963-458b-88e1-a7d43d1cafd1", "sighting_of_ref": "indicator--bcd06820-df51-44ec-a46c-ce816c666934", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa78273f-40d6-431c-baf9-da78a246ed5c", "sighting_of_ref": "indicator--bcd06820-df51-44ec-a46c-ce816c666934", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e02ab6-042d-4462-95bd-9ae1e94c02a2", "sighting_of_ref": "indicator--b6591b14-88de-4c87-93ab-044cd1ffc891", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81af8abd-e27e-4e5f-a677-0adf6af4f7fb", "sighting_of_ref": "indicator--b6591b14-88de-4c87-93ab-044cd1ffc891", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8087d529-de32-42da-bdf3-2f62c9966d56", "sighting_of_ref": "indicator--fa133c39-e083-4b28-b403-e9d9f50030c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43930371-b34e-4e4f-a162-00d70101adfa", "sighting_of_ref": "indicator--fa133c39-e083-4b28-b403-e9d9f50030c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3972ba-e1a3-4930-b3f7-7b33c11ad3fe", "sighting_of_ref": "indicator--e257b1b3-1f87-45c4-b4a4-85463f34f351", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea22b90a-e097-416a-896f-4c6daec26dc4", "sighting_of_ref": "indicator--e257b1b3-1f87-45c4-b4a4-85463f34f351", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58978b40-129f-485e-a76b-54dacefe9703", "sighting_of_ref": "indicator--6afd57c9-b343-4d99-b131-11388de751aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a292d3e-7d45-4a25-8e6e-00167d611d5d", "sighting_of_ref": "indicator--6afd57c9-b343-4d99-b131-11388de751aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b4935d-ac09-4f24-8ae7-9416df20afa2", "sighting_of_ref": "indicator--42013a94-cb36-44f4-a7f6-40a099ea6dd4", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a627c7ca-5f28-4c5b-9720-8496cb1d78e2", "sighting_of_ref": "indicator--4cacf16d-479b-494c-944e-df66ec6d27cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb384d09-169f-45f1-a7cb-356bf53270a3", "sighting_of_ref": "indicator--3517db19-ae56-4ccf-abd4-6c3b40277a0d", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd674c2-341b-40b2-a0de-3ad22cadc8b9", "sighting_of_ref": "indicator--c668f689-e6ba-4341-9fd9-e49a6c1fdfeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164eec09-b445-44c5-a04e-c63f4cbe198a", "sighting_of_ref": "indicator--8ea9582e-45dd-48cd-8dc2-afb751db4960", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a9e781-8a7f-4a1d-bb67-0b3b2236440c", "sighting_of_ref": "indicator--8ea9582e-45dd-48cd-8dc2-afb751db4960", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f220f83c-82ff-46c2-87b2-b818af0fdc83", "sighting_of_ref": "indicator--c84135e4-754a-4b3e-8ec1-02fcd0eb99c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc94394-2838-469c-b170-c3ca9555a721", "sighting_of_ref": "indicator--c84135e4-754a-4b3e-8ec1-02fcd0eb99c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc924e19-7d92-43d2-a4d8-a3ac38fcb1db", "sighting_of_ref": "indicator--3f4dc1fa-7b77-4c4e-b8af-2cd3cfd1c601", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e01367-07b7-4b05-aaf9-132a2371c9c5", "sighting_of_ref": "indicator--c90b86d6-61a7-4716-9cec-41a5182fda40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7caa83-7bf3-4ab0-9c0a-bbcb572aeb7d", "sighting_of_ref": "indicator--c28415fd-3bb9-4098-9348-bfafb9b834e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81051c14-30e4-4ec3-8b12-c55ec2d562f8", "sighting_of_ref": "indicator--1e405490-68fb-4d5b-a321-0e0e96814e27", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c18fc67-28aa-4720-8f35-c06429e72974", "sighting_of_ref": "indicator--1e405490-68fb-4d5b-a321-0e0e96814e27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bc9a95-64a0-40d7-93b5-5ea8049fbac2", "sighting_of_ref": "indicator--773af2fb-c036-49ef-8624-f83bd1608220", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ea01fd-6d66-49c5-9956-265e82f4c0f2", "sighting_of_ref": "indicator--54d1c49f-4b07-4ba3-abcb-2c0fc5401239", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6f7668-56b6-4261-a457-feadc99aeb40", "sighting_of_ref": "indicator--1913aeda-36ce-45ff-95dc-d0cc09354df0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c3ec1f-688c-466b-bbae-3eeadcb18213", "sighting_of_ref": "indicator--1913aeda-36ce-45ff-95dc-d0cc09354df0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1805cc6-c022-45a7-9bec-5c821152da05", "sighting_of_ref": "indicator--bd167eed-2704-41e1-ba41-197083681e12", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de62d0b0-c2b9-456d-8192-70aa120711a3", "sighting_of_ref": "indicator--a25045bb-5780-4dca-9f75-b5c30326298f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20734119-ffd5-4714-aec7-8b4c563bb57a", "sighting_of_ref": "indicator--9f66a832-1264-4b10-b79a-9f0bc9c51dd7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2501a8c6-8424-473a-931b-8e3514dfa7e8", "sighting_of_ref": "indicator--f9e091a5-6dd7-4c52-86d7-9cb869f27cd1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9394878c-bcee-4fba-80d2-290cade68573", "sighting_of_ref": "indicator--ec1e9ca8-d668-4d26-b1f4-288f940da1f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24890668-03cc-46ea-850e-bb5fb2af7853", "sighting_of_ref": "indicator--ec1e9ca8-d668-4d26-b1f4-288f940da1f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fcccd8-91f9-42ed-a329-a4e5b5e3c0f2", "sighting_of_ref": "indicator--a435473a-0bd8-49ca-b9cf-bc8f4b742d8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cfb3c9-f0dc-42b1-8b9e-120b67f04de8", "sighting_of_ref": "indicator--0196444a-5720-452d-99f5-aed1c941c565", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8103d1ee-4b24-4de1-8b93-2ddae86be575", "sighting_of_ref": "indicator--92b4ad88-ebea-4681-8b25-530f5c7ae3db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0050bf73-1fe4-4cfc-a1d8-4492b1821a6d", "sighting_of_ref": "indicator--68814786-ebf9-4914-aca5-b5ff3bcfcae4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02fcbdf-2f18-4757-9077-4be098d2e9f7", "sighting_of_ref": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9313cf44-5766-4ff7-99bc-ab8c3b6840f7", "sighting_of_ref": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f0ef1d-0eb7-479a-86a6-8010ade6dd6e", "sighting_of_ref": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa0e122-e2bf-4d02-bcdb-c85ecea0d1c4", "sighting_of_ref": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc8ed26-292d-435b-8b02-1f4796f0d52f", "sighting_of_ref": "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e675e2e9-194b-4a4e-94fa-e1d1bf5e3d8b", "sighting_of_ref": "indicator--08b39d5c-7f16-413f-8a22-cfbf6155ec74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cede3d-f9cf-438f-882a-4ba8acb4b4b7", "sighting_of_ref": "indicator--ddbddce9-edbe-4b99-8110-9fd27a1e3f71", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d353c4-4923-46b6-a65a-9d0edfce9ff3", "sighting_of_ref": "indicator--ddbddce9-edbe-4b99-8110-9fd27a1e3f71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933a6703-38f9-440f-8e60-be866270c022", "sighting_of_ref": "indicator--304d442d-be8e-43a0-890f-2bf3cf6f8cc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3589cd-9083-4242-a291-203ae718f9e7", "sighting_of_ref": "indicator--f3a40284-10d2-4545-a79e-4a048a4a34f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f37582-4e61-44c5-9760-51c186236184", "sighting_of_ref": "indicator--14c05948-ef0b-45bf-827f-9c9a02b5ffe9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89087a3-4412-43e2-8bd3-6947f360610f", "sighting_of_ref": "indicator--14c05948-ef0b-45bf-827f-9c9a02b5ffe9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e599ee-d9c3-4b52-a966-4b3de2174dbc", "sighting_of_ref": "indicator--636a25bb-e4a3-4abe-973b-a2a3bf9bdd8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c0305a-c74f-4135-81c7-5bcdbd492d2c", "sighting_of_ref": "indicator--65d3cc01-8681-4c90-8638-af78adfda8db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5222de5b-5a1b-4588-86a1-bbdc0c3fc94d", "sighting_of_ref": "indicator--e1438a33-bc31-4c75-9c28-c0fda6dbf07e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8feeaf-9e41-4fd6-8a47-c1a0866bf118", "sighting_of_ref": "indicator--dd12d5be-b23d-4408-9bf1-d7cb91cb1c13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94839ff8-dd2d-4b9d-940d-41ad2918ce34", "sighting_of_ref": "indicator--1a0ef7f1-cad5-4c33-8bfa-718fb5aaab5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebda6c70-89a6-4d05-8577-2e7f6adead94", "sighting_of_ref": "indicator--f3b6fca9-9dd8-463a-a9d1-0bf14e929f3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b503949-663a-4157-b76e-2885cebcf968", "sighting_of_ref": "indicator--1800fbad-a056-4bde-83b2-03adc81f4649", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb3025-b527-46df-8a00-96930ba65921", "sighting_of_ref": "indicator--ba5b2c5f-83e9-4fec-b587-156f56683214", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a74a57-1dc9-4c8e-a21b-41dbdba9f14b", "sighting_of_ref": "indicator--5d182452-8a39-434b-a3d5-cab14ecb3bbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d69384-7a0c-4c34-95b7-d64de1a43f82", "sighting_of_ref": "indicator--433292ef-a43d-4a87-b80b-b30582559f45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ea4abf-6e11-44c2-9b99-3557e437a07a", "sighting_of_ref": "indicator--be436f9d-5aa1-44ee-8940-15e267fe58b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57be43d7-4bd7-4110-a6a9-2f5460080c78", "sighting_of_ref": "indicator--ae456d7a-73d8-49cb-a4bc-ccd2a05e682a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ef0e20-40bc-45bd-bead-f1753a42b60c", "sighting_of_ref": "indicator--ae456d7a-73d8-49cb-a4bc-ccd2a05e682a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e12739-f102-4f7e-9749-4e651d9fe61e", "sighting_of_ref": "indicator--7e087bb8-11af-429d-9575-964fd204316b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efbeb22-5e63-472c-a0fd-26805bf50471", "sighting_of_ref": "indicator--e3e26788-ada3-4f31-8b59-8515e8c23e68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fc5351-1cb6-43a8-b802-6bc3959c4844", "sighting_of_ref": "indicator--e6989fb2-b1e1-48e5-b2d3-d045a613aaa3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572beae6-febf-4aef-9ce3-6752b3177b5d", "sighting_of_ref": "indicator--51d82810-3c4c-42cc-a1ee-0540f0cadd1e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745dc2d2-7f8c-471f-8a3d-810656ebc723", "sighting_of_ref": "indicator--a262caf0-c9c9-458e-9908-caca10f08147", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd42f996-0f8a-49a8-b65e-3d3b989a815c", "sighting_of_ref": "indicator--6a835178-8b79-4b44-82ff-97a1268b88a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5139b5c-09e5-42c7-8b5f-5d5f330d7424", "sighting_of_ref": "indicator--6a835178-8b79-4b44-82ff-97a1268b88a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c375c20-0f57-466f-847c-94b98fd56362", "sighting_of_ref": "indicator--e1dba048-ddf3-4f63-aea9-863da2ed8199", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70938ee-e393-4057-9b6f-87d42ea33ad2", "sighting_of_ref": "indicator--c19d5134-cae8-40e1-8728-954e7ca849b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ae1cbb-5d37-413c-a11b-55d67315ac0b", "sighting_of_ref": "indicator--3d4dd865-4f9a-4477-af82-462dbbcb3fb1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1f1e49-8ea1-45d4-b49d-0ea066d1e725", "sighting_of_ref": "indicator--7fd0e16d-c56a-4766-a993-84159a1e09df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265fdf92-08f9-4826-b603-2188cc8fe1d4", "sighting_of_ref": "indicator--86c77d93-4ebe-46bc-81e0-380630c53bed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824a6363-bf07-48a6-90b4-0c2460e5f008", "sighting_of_ref": "indicator--13b2860e-9829-4fb3-8ee9-382163c3bb7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a089187-a61f-42ee-b58f-7e0157c3e1d4", "sighting_of_ref": "indicator--e25fb370-d954-40f8-9dfa-19e999f3c4cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232887f-e845-4c8f-9fa7-40ee3f8719fe", "sighting_of_ref": "indicator--ac4094a4-b544-4d2b-a0b9-f0d2fc549043", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87df2199-944e-45e5-a851-8f1100dd4a8f", "sighting_of_ref": "indicator--12983746-b9db-4410-81a0-0c64f028903e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d455f01c-7939-437b-bd81-a15147ada068", "sighting_of_ref": "indicator--12983746-b9db-4410-81a0-0c64f028903e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1977f9f2-2214-4558-acb9-90600b58bd47", "sighting_of_ref": "indicator--183b3dbb-5c2a-4d95-9874-9bcaa2945651", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704aaa0-1e6c-445d-acb1-95df16a10bfa", "sighting_of_ref": "indicator--183b3dbb-5c2a-4d95-9874-9bcaa2945651", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ecbc4f-3ea5-4e19-9330-bb7114a1a3a1", "sighting_of_ref": "indicator--e2ba593f-3e78-421d-8623-aeeebf858c0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fe6629-941f-4d9c-95f4-04534d861c57", "sighting_of_ref": "indicator--e2ba593f-3e78-421d-8623-aeeebf858c0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747c7d35-1443-4944-9fed-101791aed6ee", "sighting_of_ref": "indicator--2de63ea6-61c7-4ba7-a710-6cebb652449e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f5c348-2f66-4b1e-bc4c-7b3d31c095fa", "sighting_of_ref": "indicator--2de63ea6-61c7-4ba7-a710-6cebb652449e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d94e96-7df1-48f2-bc9d-f38c3368fbb4", "sighting_of_ref": "indicator--234b5fe4-c519-4439-9013-439b15538d6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32c4e21-0ff7-4533-9195-d1a40edb30c9", "sighting_of_ref": "indicator--234b5fe4-c519-4439-9013-439b15538d6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebe5f5a-a52f-42e1-85b5-4ee84c18163a", "sighting_of_ref": "indicator--3561f0e7-2bf1-4409-924e-676c7b95cec1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa5023d-51ad-48d0-83f2-9759b890c67c", "sighting_of_ref": "indicator--3561f0e7-2bf1-4409-924e-676c7b95cec1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c6dee8-035f-4465-9947-22269d66ba6e", "sighting_of_ref": "indicator--0438de32-1e0e-4e6f-97ed-e9aa86d2f03b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78da006d-e2fc-4db5-a330-5f64cbc93b72", "sighting_of_ref": "indicator--cd871f4f-eacf-4749-9a98-273bec57a63a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6c716c-1bf8-4f0f-82f4-2739df0d988a", "sighting_of_ref": "indicator--2f51c052-1ac8-445f-b794-227f9670af83", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f16495-85da-4a3e-a2e2-8c3ee65948df", "sighting_of_ref": "indicator--2f51c052-1ac8-445f-b794-227f9670af83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3b669f-8851-4483-b2ad-c6643ff7c2bb", "sighting_of_ref": "indicator--6a525f61-1097-4c3e-826f-abc04a3e89a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5d5a96-6a99-4297-b2f5-7ea8db7196b6", "sighting_of_ref": "indicator--6a525f61-1097-4c3e-826f-abc04a3e89a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358bafa6-3422-44a0-8699-1239d166a8f6", "sighting_of_ref": "indicator--40482b9e-908e-43c9-9dff-8e1901ab6dce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7bb0e7-e69e-4bea-9306-9f46d2caf72f", "sighting_of_ref": "indicator--9f1d512b-d034-430f-a227-d5ce051ed788", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7760b551-947e-4f12-b5b9-e2d92de01547", "sighting_of_ref": "indicator--9f1d512b-d034-430f-a227-d5ce051ed788", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e86d93-7d03-46c4-b787-d77bf256be34", "sighting_of_ref": "indicator--31b9d996-e0ac-471c-845b-99994c1c1771", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1b5cfa-b415-4902-9334-a9eeeed480af", "sighting_of_ref": "indicator--a107e724-77b0-45a9-8a56-87d08e2146c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813a835c-0251-41af-aed0-2187b646ea44", "sighting_of_ref": "indicator--1d2cba86-acca-4daa-a97f-006816d6cc80", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa862342-1da3-48e2-b4a1-4106e5497259", "sighting_of_ref": "indicator--424bfd15-9d9e-4d25-9448-3261c763e1bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71cd5e8-741f-4d3a-963a-c8a68afeed33", "sighting_of_ref": "indicator--92b370bf-dd6c-4ec5-84db-ddbd9b10eb8b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c05535-f534-44a6-83ac-1462b4479fc2", "sighting_of_ref": "indicator--ae5c302f-38c7-40ff-b16d-735a943e604a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be5b7da-cfc3-437d-af5c-537626b33ac3", "sighting_of_ref": "indicator--7dc3067a-793c-4b4f-afe8-35bd1882d0d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df918bbf-341f-4363-b2f6-d7982f7fe53d", "sighting_of_ref": "indicator--d24743c7-ea56-4f4d-87f1-1071749d73d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2364a33f-f124-4e9d-95a4-4f753f25a41b", "sighting_of_ref": "indicator--590a5ea7-f7ed-48e7-b74b-1d300111ccf7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e291d03-38f2-44fa-b573-62c3161f502b", "sighting_of_ref": "indicator--590a5ea7-f7ed-48e7-b74b-1d300111ccf7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a8d0b2-85e1-48f9-89e0-a9cce08bebed", "sighting_of_ref": "indicator--ae6bda81-b2d0-4a50-9591-38db75e2d8a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8d909e-c534-464c-9013-64527ff951e5", "sighting_of_ref": "indicator--5d713242-87c8-4e1a-b2b2-43f64746aba1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4413f1ae-26cd-4e4c-803a-5f7eae480154", "sighting_of_ref": "indicator--0e8f60cd-c082-4b99-9c8f-8cff9ceeb398", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e011ecec-5f88-41df-8a3f-e8c59b66ac47", "sighting_of_ref": "indicator--1c428a54-95a7-4e0b-a157-cf2cd30387fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a33dab-364b-4a02-9227-d9c1980f3f57", "sighting_of_ref": "indicator--9b93e10b-0823-4aa6-8a7f-2f308e181393", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06209846-b2cf-445d-a2ad-db5e94efd111", "sighting_of_ref": "indicator--39aedb5a-5794-4f1d-917e-d0ad5052d01f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93434d0b-d0d7-4d07-913e-b05aceb3a731", "sighting_of_ref": "indicator--b053115f-5562-4d98-9050-019398714756", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55982fb2-4a34-468d-8b4b-549ad3661bf1", "sighting_of_ref": "indicator--4f969277-0907-42e2-841a-df23a379b9a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a2add-2717-4285-acc3-be30af3caa4f", "sighting_of_ref": "indicator--00006083-8f6b-4596-ae03-101b65819e47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69fba4b-4303-4115-97ba-19f257358c27", "sighting_of_ref": "indicator--697eaa8b-7af9-4a5b-ad10-93dd2940c254", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f350135-f377-4ee8-a63a-cca0abe1c5c5", "sighting_of_ref": "indicator--1813e18f-c596-4ea2-bdbd-85a7913f1876", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda9fe8-f22f-48a5-a8c1-148c1db5b989", "sighting_of_ref": "indicator--4bfd6ea0-2179-461e-b822-c402b7839c98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfa5c13-9b12-4bdb-aa3d-a1d6d10fd027", "sighting_of_ref": "indicator--174ea55e-1c85-47b7-91c5-ee0fdf712703", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5e04d1-5eb3-4a7a-9124-e22c9e9a3e9f", "sighting_of_ref": "indicator--8054887c-fec7-4128-9f09-52d0834761fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f853ae3-0373-4448-a106-cb379a6b803d", "sighting_of_ref": "indicator--03404655-cec3-4ec8-a1d4-a51af8c12d34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382137c1-f4d1-45ce-b215-e74ab991733a", "sighting_of_ref": "indicator--c0d27a82-fabe-4ad1-a291-1356fc5be26a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c26556-44bd-416e-bd01-7152af1a9ba1", "sighting_of_ref": "indicator--a66aaa07-f6a9-432f-91df-59ff6ace956d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31d9298-b89f-48b2-9c95-37d150569a91", "sighting_of_ref": "indicator--050dcc2b-2be8-4fb5-86b0-2d14d8a94948", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88593cbc-8c58-4ec8-a74b-959807fa3b98", "sighting_of_ref": "indicator--1aa9060f-01df-436a-b764-81b1c59b08de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aaea22-dc2e-4943-983c-808ef04a6247", "sighting_of_ref": "indicator--641d6699-9224-448d-bdca-0c43eb9f145f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f86c2c-8c52-46af-836e-ee0e44c54fb5", "sighting_of_ref": "indicator--1c690ccb-96b6-4a5a-9e5a-1c847e54d6ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e211df-f5f9-4a01-baa2-1b688cde9748", "sighting_of_ref": "indicator--e240bc9c-6c45-4508-8688-5acec414f503", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b0dbe4-20eb-4270-a59f-f10d4ace1fd8", "sighting_of_ref": "indicator--825bd62a-f46c-49b5-a015-82c0b125710b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69058da-ca90-4a85-9087-8456d63a0bb0", "sighting_of_ref": "indicator--bc08193b-3c24-4298-ac75-10f178ca6672", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff43d7f3-e88c-4765-bf33-af96445289d3", "sighting_of_ref": "indicator--7e97828e-e46a-4b33-a5e0-eb4383833ab3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e80e84-9cc4-4e8e-9d40-1820de8805fe", "sighting_of_ref": "indicator--7e97828e-e46a-4b33-a5e0-eb4383833ab3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b661add-0ee3-4ebf-ba35-c06a95069967", "sighting_of_ref": "indicator--1ead99f7-55ba-407d-8185-39430654e799", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f6e6e3-e968-416c-9d23-fdc3cdd8d2cc", "sighting_of_ref": "indicator--367e7ff7-927b-49b5-a53c-d4ec7a242333", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b717b15-8bf5-4511-9f0f-a9e1b66f58a0", "sighting_of_ref": "indicator--c36b485a-b922-41c7-9188-453402791dce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa5c2af-bd32-4060-903d-261148522920", "sighting_of_ref": "indicator--c36b485a-b922-41c7-9188-453402791dce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a15dd0b-948a-4bba-a227-c8588cb93ff6", "sighting_of_ref": "indicator--e582aa2c-27e0-45a7-a235-9599fe84cddd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd156e54-e6f5-47b9-a6a7-afbd857a0714", "sighting_of_ref": "indicator--938028bb-5041-44fe-a99e-111dd7eba0b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0c2fac-1f88-4011-9170-1553f8309674", "sighting_of_ref": "indicator--212fd524-11c7-4ba8-b147-2f03c60a96eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983e18c8-bc8a-4893-b9db-7e41810bf0df", "sighting_of_ref": "indicator--391ef7d8-df44-4495-814e-b0372a091d81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c86dbf0-d55d-4b21-bd0e-b6ab9ea73e77", "sighting_of_ref": "indicator--68124629-3997-4f8c-8055-f0863aeffc4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a2dbea-ce9e-4529-b303-048c4c2c8e12", "sighting_of_ref": "indicator--309deeea-56e4-4260-aaad-efc2d2c23166", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c8a0f3-d336-4eb8-9334-4b7c431df64b", "sighting_of_ref": "indicator--c681d385-ed2c-4138-9618-248ec009332f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7bddf2-d9ae-4884-a6cd-547b303fbacd", "sighting_of_ref": "indicator--e298e1f2-8e1a-4f80-84c4-d54ee51ded7a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07592ba-7048-4ed1-ad3a-fc41186a8538", "sighting_of_ref": "indicator--06c0979d-b441-405f-84f6-5e904fe14530", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44afcd9-f230-4edc-a04e-ffce97cf72cc", "sighting_of_ref": "indicator--06c0979d-b441-405f-84f6-5e904fe14530", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802c65a2-df23-4829-ab3b-caf66ea1fe5e", "sighting_of_ref": "indicator--682f6657-8ed1-4e14-8296-134ccbf22156", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c359b73-7654-4baa-8e74-705e8e70a3b5", "sighting_of_ref": "indicator--682f6657-8ed1-4e14-8296-134ccbf22156", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a303731-1470-4e30-bf43-1eeb19d8127d", "sighting_of_ref": "indicator--2b2d7964-4231-4c90-97d9-2856bd3c751a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77d21a8-e7b2-44e5-84c7-37932f2e7fd6", "sighting_of_ref": "indicator--96983d1a-8695-45b2-9b12-942406124179", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bb58b2-5210-42a9-89f9-49f1bee15218", "sighting_of_ref": "indicator--64ad4a02-1684-467b-9bdb-06ec66dd66c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac1369b-52f7-4ee0-8b11-4ae8c923d4f4", "sighting_of_ref": "indicator--debc095d-a805-4a6c-a090-6a47e443eb79", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f6c77-b78a-408b-9863-38225953b525", "sighting_of_ref": "indicator--debc095d-a805-4a6c-a090-6a47e443eb79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef3357f-e30b-4a84-858f-1f105df4f048", "sighting_of_ref": "indicator--bc92e065-f127-453d-a69a-12e2655902cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da3388b-c7e8-47b2-b465-4f1f05e68880", "sighting_of_ref": "indicator--bc92e065-f127-453d-a69a-12e2655902cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc502856-2df9-49d2-a15f-6a681028876a", "sighting_of_ref": "indicator--f83c19b1-84df-469e-bc98-304f9d998261", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8801d0b-2e41-4876-8ad1-b7a5ccd3d350", "sighting_of_ref": "indicator--c3a02089-b1f7-4075-bb86-8c2446731287", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bfe4a7-5d89-4b35-a662-c05c729b7553", "sighting_of_ref": "indicator--388ec069-10d0-481a-82b6-2d97b17e05c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f42ae7-6f16-4ab2-aa8d-ef26d1bdf9a0", "sighting_of_ref": "indicator--388ec069-10d0-481a-82b6-2d97b17e05c0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a0c7fc-0529-4178-bf3f-f123b6ebce4a", "sighting_of_ref": "indicator--98bc57b9-26f3-43ab-9ec6-a6b018157018", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eaa051-db2c-4222-b48a-3f902bf0ba4c", "sighting_of_ref": "indicator--3c07ac4d-c91e-4442-80e1-de9076e47424", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8167409-bcea-41f7-8bb3-b51123956123", "sighting_of_ref": "indicator--3c07ac4d-c91e-4442-80e1-de9076e47424", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc32e21-7208-47fd-b0d7-d34fb978be69", "sighting_of_ref": "indicator--e3979af4-2104-4a43-b2d1-4d207bf00291", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d400d4-075f-425c-8c68-68b572b8a9e7", "sighting_of_ref": "indicator--3b33a15d-1f99-4d4d-afad-bd73a85461bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff1b790-2d09-40b6-83c8-93b20c73d3ad", "sighting_of_ref": "indicator--f45971ca-e3b4-4888-9c31-34cbd2599e21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8873e90d-e80f-4cc2-96e3-35b1488c753c", "sighting_of_ref": "indicator--f45971ca-e3b4-4888-9c31-34cbd2599e21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299b5619-687f-4028-b653-ffe1a61a2d27", "sighting_of_ref": "indicator--5079ff4a-f28b-4e60-b7eb-23850f62daca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523bb7b4-8196-4506-b89c-295997efa35b", "sighting_of_ref": "indicator--5079ff4a-f28b-4e60-b7eb-23850f62daca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025723bc-6009-455b-b216-05eb67a6c74b", "sighting_of_ref": "indicator--dccfd8f3-9771-440b-9acc-403cce955107", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0da783-f248-4084-8159-577c07657b36", "sighting_of_ref": "indicator--dccfd8f3-9771-440b-9acc-403cce955107", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4526447-0330-41e5-9e50-cf15e3337ea0", "sighting_of_ref": "indicator--30d36407-0c4c-40ca-8119-ce75aeacb1ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d855ec04-0f04-4d2c-b792-11952b13e5cb", "sighting_of_ref": "indicator--6a2a1466-8771-4c2b-80e4-c670daea01cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4923f19b-194e-4beb-986e-27f8390d2ed1", "sighting_of_ref": "indicator--28b6ae6a-b135-4eb3-a35c-068f02d72e70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3404c79a-ab1e-4f50-ac81-99272fc58f36", "sighting_of_ref": "indicator--28b6ae6a-b135-4eb3-a35c-068f02d72e70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63298444-28b6-4515-8801-412f3568ed45", "sighting_of_ref": "indicator--99da58c9-f41a-4414-850d-84005972dcbd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74d02b6-5529-4624-b4cc-2ffe0c1210a7", "sighting_of_ref": "indicator--da7b4d77-3eea-43fc-860d-0e224204ec71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb95a179-050c-405f-8004-82a119ce14cc", "sighting_of_ref": "indicator--0cb77310-1f94-4409-b56e-dd2dea8193bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a5d7c5-6f4c-4401-b965-841252d37309", "sighting_of_ref": "indicator--8b839063-667b-4a15-a386-5615410c9d7a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f33fdb4-9249-47e3-9e0c-2157040b4ea3", "sighting_of_ref": "indicator--b4bcee61-f088-4f49-9cfe-d7ca8838c9c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c7110d-352d-47d0-9297-d9ca6c4aa2d2", "sighting_of_ref": "indicator--0f53aed3-6b6d-468d-879e-63c43154d515", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da876f3e-79a7-4fc0-b90b-101f193066f8", "sighting_of_ref": "indicator--020b67e3-83ec-4554-a1de-20a50de7dc3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b6523c-d362-40dc-a740-7246ecb63f95", "sighting_of_ref": "indicator--7f534077-5f26-4252-b32b-c14f4895f246", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dfbc90-2096-4980-ab2c-97727b950e6e", "sighting_of_ref": "indicator--a8d52465-43d1-4c66-9bf4-281f032d1a11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb09aa60-41d5-4fff-b059-c2d5cbb46bbb", "sighting_of_ref": "indicator--2ac7bcfc-2f5d-4f54-bb78-5f5f125f7f88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52489be6-88b5-466f-90f4-dc358c2542c8", "sighting_of_ref": "indicator--e406be5f-6025-4647-859a-3c624688deea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4942bb5d-90ee-434a-b465-aabdd45f1c42", "sighting_of_ref": "indicator--e406be5f-6025-4647-859a-3c624688deea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253a3672-7715-47c5-93bb-8c3f1fff443f", "sighting_of_ref": "indicator--4f93c716-6ebd-40cc-9050-779534f55dda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8028121-1bc7-47b6-bde6-5dab1a7a221e", "sighting_of_ref": "indicator--4f93c716-6ebd-40cc-9050-779534f55dda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b238a5f-e2fc-43f8-8183-a69393066acc", "sighting_of_ref": "indicator--8f8d2b4f-2e27-498a-952d-a821bdd02f42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953f18bb-5382-43ea-aae7-627a7d426063", "sighting_of_ref": "indicator--a3289f41-3a07-464b-9b28-22e52e19de87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c9d28-411c-4a4a-bea1-79d281ff3c15", "sighting_of_ref": "indicator--99bb8fff-6b04-45a7-be2f-8b3f1211affc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d32128a-258b-454b-b25c-60aa20d0c320", "sighting_of_ref": "indicator--7bf243d0-5982-49fc-ba31-129352fcd14e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af7e553-53a2-4920-b4e6-ef3252d9c0d2", "sighting_of_ref": "indicator--35659fb7-4612-46e9-a333-e1bcfed88493", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade25be7-09a9-463b-b969-d7c0c00a9052", "sighting_of_ref": "indicator--35659fb7-4612-46e9-a333-e1bcfed88493", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394d3c81-043f-47c9-be63-85d626840e5c", "sighting_of_ref": "indicator--5ae75569-d0ee-4e6e-a61c-1c6913c8edcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1788f04-f192-4144-bd84-9d104a20003a", "sighting_of_ref": "indicator--5ae75569-d0ee-4e6e-a61c-1c6913c8edcb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7ad2fe-eb57-49c5-a2f4-ae1edbb15e38", "sighting_of_ref": "indicator--b6f0b98e-0ae4-4cac-ade6-2f6f43631320", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f686c4-26d9-4bd3-b46b-cd92834139fe", "sighting_of_ref": "indicator--b6f0b98e-0ae4-4cac-ade6-2f6f43631320", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a315e1-cab8-41e2-a3e4-5214a6af2528", "sighting_of_ref": "indicator--3fb695d0-d0e2-468e-8003-fb5a3a71704e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8520dc5f-7c33-4b6d-b405-7bcf46f96dcd", "sighting_of_ref": "indicator--df6a56f7-61fe-4ef2-b726-19a623fa33ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a1162c-f347-414e-a26d-143346b45ad2", "sighting_of_ref": "indicator--df6a56f7-61fe-4ef2-b726-19a623fa33ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017828d9-7d15-44ef-bcf5-7991cc12e34b", "sighting_of_ref": "indicator--55995a46-892f-488f-89e8-cf0a4c7e92ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edc8901-e414-43f3-bf47-fd600025dcc0", "sighting_of_ref": "indicator--3e9fb0ba-aac4-4570-b169-17802e487d95", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c9a15e-c2fb-44e4-a2b3-6ca336a30aed", "sighting_of_ref": "indicator--3e9fb0ba-aac4-4570-b169-17802e487d95", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe50e177-cb14-4719-8ee8-de4632739100", "sighting_of_ref": "indicator--6de1a3a2-9abc-4f76-a257-7dd1c444f9a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f724d15-9ef7-4837-8dd0-c2a4b9454ac7", "sighting_of_ref": "indicator--6de1a3a2-9abc-4f76-a257-7dd1c444f9a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c1258-e7ef-447f-8c87-df5bf8350027", "sighting_of_ref": "indicator--9520745e-1f4f-4454-b112-76d360d512ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac52d26-d523-4ebc-9751-136b075fa11a", "sighting_of_ref": "indicator--6d6e32d4-6891-41f0-8651-6fad7b7fb550", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfcd3b6-d9f4-4753-8446-e27b93037bdb", "sighting_of_ref": "indicator--f8a57e54-7d29-44b9-9e63-b2c4bcc69f08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a46f62-87b0-48a7-ac9b-6d66662f81a3", "sighting_of_ref": "indicator--36303dbe-0f84-4b63-9e97-6ca729d07bc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df44c173-4705-42a7-8fcf-200ace7eae05", "sighting_of_ref": "indicator--8957a0f2-5595-4627-9db3-2304cdfb9020", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b6d365-4933-499a-9b84-b07b1d92943a", "sighting_of_ref": "indicator--8957a0f2-5595-4627-9db3-2304cdfb9020", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565ac5cf-40eb-42a3-a96c-4d84c44842d7", "sighting_of_ref": "indicator--d49d9fc2-b5e1-4b75-88f5-f173844aeaa2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc878955-d03d-4153-bdda-550a0da20b82", "sighting_of_ref": "indicator--d49d9fc2-b5e1-4b75-88f5-f173844aeaa2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1fc3dd-7cb0-4111-9524-c43565a95ae4", "sighting_of_ref": "indicator--50702275-d94f-4a5a-8887-0ea02331720e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865eab6b-ef26-40e1-8ec0-9bb5736b361f", "sighting_of_ref": "indicator--4cc21753-ad04-45b8-b456-f75ac8f442c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b7cd05-8462-44cd-b345-cfb9b5b4bb2f", "sighting_of_ref": "indicator--4cc21753-ad04-45b8-b456-f75ac8f442c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb8fb7a-0b04-4465-8421-72678946bf9c", "sighting_of_ref": "indicator--564360b7-e3ef-448a-8b46-b1fa3f13598a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f0b7f-be6e-459c-9c0d-b9bb1e4d30e1", "sighting_of_ref": "indicator--95a641a5-c6d4-420c-9316-2c0096032047", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28e38db-ae4a-40db-a742-e31719e0b51c", "sighting_of_ref": "indicator--9a12af1e-30b2-4031-8531-70b4b885bc91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d296aa-342c-4ded-ad46-4bcab31918a9", "sighting_of_ref": "indicator--811303ac-a8ff-48d7-a353-aa56c8d638f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5c451f-1b27-4264-9296-8ab1956193ed", "sighting_of_ref": "indicator--811303ac-a8ff-48d7-a353-aa56c8d638f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d5d87f-d8ab-4302-b3d4-116aa857f11d", "sighting_of_ref": "indicator--4bab1b30-be12-447f-a111-028fcd85c6ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072de877-e85d-475e-a703-79243928b139", "sighting_of_ref": "indicator--03b02efd-ee5a-4051-bd71-275e4c722ea2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b422ed-2cc4-45a9-bc98-5975d518af51", "sighting_of_ref": "indicator--83fc0704-4780-4aa8-8fd8-22632b5b6e31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f171c3f7-9f1a-41d0-a51f-7935e0662114", "sighting_of_ref": "indicator--1a9819c6-0f56-4e01-ba68-1f3c1ea81cb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf60445-fdab-43c8-b538-34dca8740d23", "sighting_of_ref": "indicator--92752db3-0102-48c8-b969-247293ece22b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c2feab-8c4f-4d7a-a8b2-7a0d427299ce", "sighting_of_ref": "indicator--66450d83-bc40-44ab-af1b-bae937c11157", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e397e7-e045-4a2d-9559-71b46c822a54", "sighting_of_ref": "indicator--66450d83-bc40-44ab-af1b-bae937c11157", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0d00c6-4de1-453c-8c94-38b22dd30752", "sighting_of_ref": "indicator--face6aa3-3857-4612-96e9-2f0e7cbb513e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138a35b6-0b8d-4a83-8ad6-f16a044c32bf", "sighting_of_ref": "indicator--b0a31879-f1d2-4126-8a8c-e4f67f5ad174", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835be76f-0b47-4211-8ffc-61f20d5f9985", "sighting_of_ref": "indicator--15ff6a57-dae0-418b-84f1-d20ff38a3919", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4166caf-112e-4eff-8aef-0cd12aacaf4b", "sighting_of_ref": "indicator--d03115b5-ed09-4f4a-84fc-8436c9f5a388", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949d2618-42fa-49cf-8eee-a51c2e29b27a", "sighting_of_ref": "indicator--8d95ce0b-d716-4814-8808-892f674940fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8dac34-2998-4c7f-91af-7576bf558aa2", "sighting_of_ref": "indicator--7a57033d-45b8-4925-90d2-f972b8b91dd6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24929c07-ce1e-43c5-9c04-d2076b4f4ab1", "sighting_of_ref": "indicator--fa24c83d-29bb-43c8-b9eb-2981f0549995", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b75df-8f0f-438d-a4e3-a879b50e269c", "sighting_of_ref": "indicator--fa24c83d-29bb-43c8-b9eb-2981f0549995", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f00eee2-880f-4c84-951c-d14077e30061", "sighting_of_ref": "indicator--fbc7cd3b-14fe-4bea-ab4f-83da386515f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10307358-727c-4391-8ffb-08a079e107f4", "sighting_of_ref": "indicator--fbc7cd3b-14fe-4bea-ab4f-83da386515f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0181e7-7d9b-42d4-a594-8695875babca", "sighting_of_ref": "indicator--e8f893b5-95bc-4187-93ae-dde1700243aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5a0797-7284-4579-85fc-c97b9ef32e4a", "sighting_of_ref": "indicator--90b65ee7-bc7c-4b75-8a18-87fbdcf44a94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd37d5d8-a05b-4035-9dfe-314052acaea3", "sighting_of_ref": "indicator--92d29679-7dd6-4785-9524-ddbe6f6cd264", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7cd3cc-ff96-408b-8a2c-dae0d551a0fa", "sighting_of_ref": "indicator--b49bfb56-041e-4e7a-80b1-28bf2436d421", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6cce19-8d13-46fc-9536-d25937717055", "sighting_of_ref": "indicator--c5acbda4-4142-49fa-add6-79633e962886", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c642c1e1-70b5-4769-ad52-03cdf8e59794", "sighting_of_ref": "indicator--8a79185c-1af6-4c72-a58e-1cc5e949318c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf7a936-c803-488a-9656-a12ad290f00d", "sighting_of_ref": "indicator--34b76ad0-c8da-4b3d-9286-e21deb7f2034", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd95a03-b319-46a8-8d53-730441189b43", "sighting_of_ref": "indicator--4be2346d-d400-4659-b634-5e1430b42601", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c18898-6a97-4d6c-9fa9-fa4c47c622ea", "sighting_of_ref": "indicator--5a4e8191-65ca-45f7-a8de-11c8048aec73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2224f1d9-9a6f-4d38-a505-2cb268244f6e", "sighting_of_ref": "indicator--5a4e8191-65ca-45f7-a8de-11c8048aec73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7e8070-c239-4e46-a4f7-0ee56f03f84a", "sighting_of_ref": "indicator--e693305d-a9bf-4855-a291-156cd68ce1b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddadd73b-acfe-4351-b1c7-ac832e47ddc3", "sighting_of_ref": "indicator--275ac058-e856-4fb4-839f-c18a8733e186", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5de1438-c9ef-4f99-b668-fff57bcd7962", "sighting_of_ref": "indicator--96641512-130c-4059-8755-3b9efa49611a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d348c33a-b19e-4b2d-aac6-dce5c684525b", "sighting_of_ref": "indicator--96641512-130c-4059-8755-3b9efa49611a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d0c37d-a501-4b42-bc6a-f31413206997", "sighting_of_ref": "indicator--9b3cf66c-009b-4b8d-86ab-9930e0b1d8b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58472ca9-088c-4014-aef5-957f42e507e3", "sighting_of_ref": "indicator--9b3cf66c-009b-4b8d-86ab-9930e0b1d8b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd21c91-e2ce-467d-8997-3a5417ea013f", "sighting_of_ref": "indicator--ec0f66fd-bf80-4804-acb4-c3975dc55caa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8c2d0-acc9-4f00-93d9-cef69a81cda2", "sighting_of_ref": "indicator--ec0f66fd-bf80-4804-acb4-c3975dc55caa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f4aea9-edb8-49a4-a248-e575da506961", "sighting_of_ref": "indicator--403dc233-73fe-4771-9c45-9c3c2a80666a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7173411-ce5f-458a-b503-3a8563dcde03", "sighting_of_ref": "indicator--afa408e4-c246-4df9-97a9-d1fca2642f1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279d4f7c-6446-477c-a095-cf22cebecd25", "sighting_of_ref": "indicator--311f9916-3b0a-4512-b221-ee0a1522d1f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad17bacc-72a8-4b23-b3b6-c2cd271ff8b4", "sighting_of_ref": "indicator--311f9916-3b0a-4512-b221-ee0a1522d1f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da695a9b-aaca-4187-9370-f4fbd55ce2ca", "sighting_of_ref": "indicator--98f2d2ec-744e-418e-8f95-c841df0cfaad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059018b4-0864-4646-9e3a-4aa171d2a4fa", "sighting_of_ref": "indicator--de299aa9-a4e5-416f-a4aa-b578f479b619", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aad9390-4f98-46da-bd0f-af1100e8e56c", "sighting_of_ref": "indicator--11451073-0f0c-4ef6-b2bc-c4d458aeaa88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3daadc-f47c-4b3d-8390-6f6b710eb9ab", "sighting_of_ref": "indicator--11451073-0f0c-4ef6-b2bc-c4d458aeaa88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa340e7-e79c-4b52-b64a-18b6ba879c3c", "sighting_of_ref": "indicator--a56b695b-95d1-42b6-a82f-7abb04f32d4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecde349a-bc2b-4b75-bc4b-823c25261b84", "sighting_of_ref": "indicator--b0641d67-3218-4556-958f-a3f2d86fdd24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3b0ddf-be9a-4201-857e-ce068ce9e95b", "sighting_of_ref": "indicator--b0641d67-3218-4556-958f-a3f2d86fdd24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88c81ee-09dd-4899-9371-4da9460c3615", "sighting_of_ref": "indicator--1a1ca0ca-6812-4789-8030-93faa7df8b8a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf73461-b854-4c02-b4cf-6a4814241ff3", "sighting_of_ref": "indicator--10f10954-b39b-4388-8cd9-6afe23a17353", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3863e57a-8712-49a3-89b8-6fa34b52a8dc", "sighting_of_ref": "indicator--74a0c3e6-0d56-4360-b91f-7ae53e8828de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdf5d2e-7733-424e-bd0e-fbba95a99b85", "sighting_of_ref": "indicator--74a0c3e6-0d56-4360-b91f-7ae53e8828de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefb03d3-1d51-4670-be32-37f6a1488b97", "sighting_of_ref": "indicator--e9407d4e-0370-40c5-a057-7e75a99d2026", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa90ae5-115e-4795-8836-d243f909f939", "sighting_of_ref": "indicator--c5604ec8-6fda-46ff-8147-b7bb52b4d059", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ef5adf-91c0-4cf3-829e-8e6c496f49a3", "sighting_of_ref": "indicator--0d408cdf-ecdf-48c4-ac71-93593f46e27f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d6e783-f15c-45f7-b4b1-33467f5db823", "sighting_of_ref": "indicator--0d408cdf-ecdf-48c4-ac71-93593f46e27f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecebc551-e2a4-48f5-bf1e-bc9260930b12", "sighting_of_ref": "indicator--bec98c15-5317-417b-8152-6089d510235f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382ec309-ab46-4602-8dff-2f7d5f5c6576", "sighting_of_ref": "indicator--bec98c15-5317-417b-8152-6089d510235f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5637164c-2821-42f2-a5e0-1ac8a3e14023", "sighting_of_ref": "indicator--02a02f1b-784b-473d-bec8-5d56610bf6ff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba982b8a-aede-4741-a09f-17a2ed3efd92", "sighting_of_ref": "indicator--9f5ef16d-a15d-4e31-bd91-25b6c1a76426", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1809fb50-7fde-4c52-b74d-6065ac672f99", "sighting_of_ref": "indicator--83dedf17-04bc-4f13-adec-69ae1a09e779", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b8571f-f686-46c3-831d-511047137a1f", "sighting_of_ref": "indicator--83dedf17-04bc-4f13-adec-69ae1a09e779", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc3c6b3-e4ff-4b14-98d9-62c76d623787", "sighting_of_ref": "indicator--dc805a60-6e4c-42c6-b3e1-b7fd04bec7ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1011849b-aaf2-451d-983a-9244418ae37e", "sighting_of_ref": "indicator--eb6d0074-0049-4af1-9518-3983e92a0f45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f839359d-c8cf-466d-8bb1-d9ec0bf40174", "sighting_of_ref": "indicator--eb6d0074-0049-4af1-9518-3983e92a0f45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60d5fd0-5925-48a9-b3f6-3fc12a98f427", "sighting_of_ref": "indicator--1a30ed96-cf5f-451b-ab81-7ee6c77131f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1493f1-b364-4727-ac47-3ccc1a0f6ae4", "sighting_of_ref": "indicator--1a30ed96-cf5f-451b-ab81-7ee6c77131f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84eb6803-aada-4375-b716-8167f60dfbe1", "sighting_of_ref": "indicator--e0def108-8d7b-49ec-9579-7388a542758f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e72bb13-8822-4f06-ad49-e5bd096fa9f8", "sighting_of_ref": "indicator--5760df65-2faa-46d6-ad20-aa7c53133e2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ad92e6-a700-44f5-8650-10e6d7a1d21b", "sighting_of_ref": "indicator--3f6efc7f-08f9-4467-a962-0206e6f6596a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d55a83-88b3-4fe2-9c3a-1e07a565deaa", "sighting_of_ref": "indicator--2d4bec68-6996-40d5-8ba0-72bc9dafca25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfa9a16-c615-46d8-8949-7bc8a82b0bb6", "sighting_of_ref": "indicator--eebb6f93-baf9-43f1-b864-155a8b25b89f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec641432-8948-4db5-9a85-e55a9854a4c9", "sighting_of_ref": "indicator--eebb6f93-baf9-43f1-b864-155a8b25b89f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af34c68d-58d7-4e03-a6ad-9e55eea266b0", "sighting_of_ref": "indicator--368e044c-04b0-4535-908c-881a2f94d64f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0c9b89-a3f2-42c2-bd8b-b1d466f45950", "sighting_of_ref": "indicator--368e044c-04b0-4535-908c-881a2f94d64f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8381c9c-abaf-47b8-a4ec-4f7016c0e127", "sighting_of_ref": "indicator--25a0fc65-6720-4e93-bfd3-46472e614a5c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c050d39-7be8-41a9-89a1-7e2bb719e2c4", "sighting_of_ref": "indicator--25a0fc65-6720-4e93-bfd3-46472e614a5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5819c4-eb3b-4089-a1d5-b8d25f23c8ea", "sighting_of_ref": "indicator--1a6cccf0-f1e6-456b-8547-97a35a6f3c4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d07b3ee-4be5-420b-af8e-547fa87864e6", "sighting_of_ref": "indicator--68af63f2-db4a-4944-8b4d-6b3a4b9c104c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569c8b26-9976-4472-8e22-f0b7d2cd3e8c", "sighting_of_ref": "indicator--df804330-3276-4ef9-b8e0-f718f749ba3c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2812e4-afe4-443c-b9d3-42884f505663", "sighting_of_ref": "indicator--276487fe-5e2e-4233-ada7-2bf90da97e21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeac89a-7f09-4ea9-8d0e-75c374967049", "sighting_of_ref": "indicator--0dfee76f-faa3-48af-a8c6-da8070085002", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb09b547-5ed0-4381-9bca-888e3d21c722", "sighting_of_ref": "indicator--0dfee76f-faa3-48af-a8c6-da8070085002", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15703e9-b04e-417d-8bbe-1687bf274f0c", "sighting_of_ref": "indicator--3affbebb-2e81-41ee-891a-b7717242fbe1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a67611-b9cb-4b07-a050-f2c9d15e41c4", "sighting_of_ref": "indicator--05fbf512-541d-46a0-9dc5-4ad1d98811f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6487279d-a60f-4157-8ef2-ca9809a452e7", "sighting_of_ref": "indicator--05fbf512-541d-46a0-9dc5-4ad1d98811f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19123ea3-af59-43bd-8ce9-40a7f430d6c8", "sighting_of_ref": "indicator--a9bcba4e-ec70-4e31-8dd3-94220767977c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d684f771-7ab7-43e8-ba8d-3395773c1816", "sighting_of_ref": "indicator--0d1caf21-2645-4e93-94d5-4b0a583921a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379f7cfd-8248-4932-8ef6-8d599eb98a0f", "sighting_of_ref": "indicator--f686c8bb-bd70-4b33-b57c-150c5acbe0db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13c481e-981e-4e23-aec0-d0c040c1779c", "sighting_of_ref": "indicator--f686c8bb-bd70-4b33-b57c-150c5acbe0db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f42122-e207-4a4d-a10a-2f91dc1ae76b", "sighting_of_ref": "indicator--bc6cca31-ef74-4e2b-8ef0-f09c04ef4bf2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef20560f-50cd-4880-8467-0ee716899055", "sighting_of_ref": "indicator--46156a34-bae9-406b-89b2-c26c1cc79815", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a196a4c7-c48e-46c2-bc87-f5a5bfceb181", "sighting_of_ref": "indicator--51b11c86-d884-4db4-a48b-92215ccf85e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6627e8-a243-486b-961c-eac0d1743f36", "sighting_of_ref": "indicator--51b11c86-d884-4db4-a48b-92215ccf85e2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368c6ae6-ec24-4f2c-9106-7eb94c257015", "sighting_of_ref": "indicator--53478974-7cd1-4c2c-ad5e-0a14b82dfa0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0830915a-c87c-4c22-9751-9720080306e9", "sighting_of_ref": "indicator--dcea5d8a-a24f-4b30-bac8-5cc01178fc4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98b658d-34e4-483e-ac0f-91bb4cf0fb13", "sighting_of_ref": "indicator--dcea5d8a-a24f-4b30-bac8-5cc01178fc4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbd55ff-53bb-45c6-a622-02262ec68354", "sighting_of_ref": "indicator--41879306-6cc5-4777-a32c-13f67e88793a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e5934f-bc82-4c63-9c59-7c819d7fd9f7", "sighting_of_ref": "indicator--6273836f-2516-4f49-a28e-13369ff4a8e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfe467d-9dc1-4c89-a480-5167bb1e45b2", "sighting_of_ref": "indicator--6273836f-2516-4f49-a28e-13369ff4a8e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af840760-eda1-49cb-822c-873121331619", "sighting_of_ref": "indicator--5ea9627e-e797-4e8d-8b7c-fdba3bf81183", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5514c679-4ca1-49b1-a4e1-326f795ad9a7", "sighting_of_ref": "indicator--dc4f47de-5c1b-4ba7-a4a7-3adcedb22ca2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c2adbc-98c9-4af1-a8e3-f3bee0c641e8", "sighting_of_ref": "indicator--3c54a0ed-b709-41d4-9545-62421bf5f93d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea97160-50b1-4dc8-96dd-c09a5075d9e9", "sighting_of_ref": "indicator--fe3bc07f-9d23-4fe5-810e-56f7bcdf05da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b0d62d-2e06-4b6d-9179-e8f940377110", "sighting_of_ref": "indicator--62c26bba-2271-4abd-9bae-fc281858db77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dcb885-16e2-432a-9807-693bfa60190d", "sighting_of_ref": "indicator--62c26bba-2271-4abd-9bae-fc281858db77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c0e300-929e-4873-9639-e1a696fb537a", "sighting_of_ref": "indicator--7f069a2b-f834-4505-8311-a69037483952", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a98410-558a-48bb-9865-b37bc54ad101", "sighting_of_ref": "indicator--6e8f7374-6519-4c4f-9a7e-76f221950f4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6977e2f8-189f-4d8a-a57a-fe2d8c665870", "sighting_of_ref": "indicator--b7287f07-a098-4d54-8984-ed5ed0a21c4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e704e0-cf83-4a31-ae16-b845bd5e6193", "sighting_of_ref": "indicator--7bd003a6-e3e2-4d04-bbf8-678f18e8017b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56693c04-ca97-4a83-bf26-e6e9d7263359", "sighting_of_ref": "indicator--6d4ed55b-24bc-41c0-a492-1733362032b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eae4594-5305-4265-b913-51d698c9feed", "sighting_of_ref": "indicator--7ce12465-9744-4ff5-a7a6-aa90ac3e5899", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9520d6bb-44a0-4e41-a589-f6962d95219e", "sighting_of_ref": "indicator--8ce7f5cf-fe7b-4185-a4a0-a0c6100a5929", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de985171-c2d5-40d1-9968-42bbf65b4230", "sighting_of_ref": "indicator--8ce7f5cf-fe7b-4185-a4a0-a0c6100a5929", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e1a434-aad9-4376-919b-388c6e5ca035", "sighting_of_ref": "indicator--37493a3b-67ce-4e0c-9d27-7828c827f1d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8169873-2b1c-49fc-b3b6-2638552b04fe", "sighting_of_ref": "indicator--4b211c87-f4d5-4fe4-a4c7-b6a4c2cf5a78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f26f5a-5c7e-4d9a-81c0-467afc2cac33", "sighting_of_ref": "indicator--8f865d82-befb-470b-b03b-2663e8a3081b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f6a67c-bbfe-4e0a-aeda-d62f78c690f2", "sighting_of_ref": "indicator--ffabd1ae-2647-4b2e-b792-acfc59803dba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4648ae-7027-4c54-8819-eeec1007224f", "sighting_of_ref": "indicator--ac0fdfc4-4e0f-437f-8f84-f59f1c8bfc4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762511ed-0a9b-43db-8146-5e70beb6ff63", "sighting_of_ref": "indicator--4e690d2e-61e8-4d27-8aff-7168912ac6ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548ab5ed-27db-4184-b035-c1e4c880cfb2", "sighting_of_ref": "indicator--fcf0448c-dff2-4c3b-9de0-95229c3d935f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb350ddc-5c87-46c3-9969-064727e47caa", "sighting_of_ref": "indicator--fcf0448c-dff2-4c3b-9de0-95229c3d935f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1877f7dc-c160-4e8d-9c8a-cb278c985883", "sighting_of_ref": "indicator--94c5f584-a516-4607-864d-36ae15f194c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd622744-abcc-4d25-82f9-d75118f4420e", "sighting_of_ref": "indicator--94c5f584-a516-4607-864d-36ae15f194c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1fff6d-29bf-488b-9d06-8cc1d754d983", "sighting_of_ref": "indicator--bc7d7270-3178-4c38-a707-46895547bdbc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccff31fc-a7ee-4890-a598-daa3a9369e5b", "sighting_of_ref": "indicator--bc7d7270-3178-4c38-a707-46895547bdbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44ed303-0ad7-4d30-a0c5-579f061385ed", "sighting_of_ref": "indicator--e5733b2b-c8b0-479e-9511-1b0b0d9e898a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099dcd8e-5c08-44ee-bdbf-64393695872c", "sighting_of_ref": "indicator--f1965eb2-aa8b-4356-b8ee-043b691d6f22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84231283-81af-447a-8da4-59a49a70fe72", "sighting_of_ref": "indicator--beb34ca5-71e7-4780-bdf2-63cd4244caf0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a8ad5-c312-4447-88a2-48c4e3b1bd3a", "sighting_of_ref": "indicator--beb34ca5-71e7-4780-bdf2-63cd4244caf0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1b7272-bc46-4d2b-b329-f7c644ffac4a", "sighting_of_ref": "indicator--42a8765e-51ee-4ce1-90be-8e8c1a5dc584", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50af1ec2-dce0-436b-99f9-47562e0ae59b", "sighting_of_ref": "indicator--c7d70aa4-8c7b-49c1-b9bf-07cb431c710d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5c1c8b-e341-473c-9c7b-bbed9b7487e2", "sighting_of_ref": "indicator--c7d70aa4-8c7b-49c1-b9bf-07cb431c710d", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060b573b-2c19-437e-83cc-93f21b477c64", "sighting_of_ref": "indicator--96e878fc-369d-41bf-948e-55b5679de512", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e936ef-1406-4977-85da-c7cbb7535e64", "sighting_of_ref": "indicator--cef92651-9e4f-45ed-9915-3a988e43509b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6ed5d6-5fee-4bab-995d-1d08e1eba4d5", "sighting_of_ref": "indicator--eb00c35f-ed3d-4d89-ac6c-579533423a9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd1133-467b-4a7c-9314-86fcb746478c", "sighting_of_ref": "indicator--eb00c35f-ed3d-4d89-ac6c-579533423a9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ff323e-4e75-4a8b-90df-8013caf33a7a", "sighting_of_ref": "indicator--494021e3-ca54-4772-a29f-ca45f640090b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782835bd-28bd-4bf4-bef6-2112f3a461ea", "sighting_of_ref": "indicator--eb716ac1-7f74-4e8a-bb94-9e1c09e27897", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63acd28-8e6f-4bee-b554-5ef11be0f85c", "sighting_of_ref": "indicator--a25121b5-26ab-4cd9-a749-df81eb1bc66b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f07a54-6d1f-4893-ab9d-4d693898f695", "sighting_of_ref": "indicator--a25121b5-26ab-4cd9-a749-df81eb1bc66b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad56e30-c2a0-4908-920a-a5b0ee55e260", "sighting_of_ref": "indicator--2cd2faf1-9e72-4f02-a27b-d4f7447db7f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7476b7-e5ff-44cb-87b1-687e2eecdc76", "sighting_of_ref": "indicator--2cd2faf1-9e72-4f02-a27b-d4f7447db7f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80d0e38-4b02-443c-bb90-c2611c6da160", "sighting_of_ref": "indicator--939a035e-960f-4886-a1c0-bce1b463ffcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbc3fb-d8cb-484f-8486-0b5ed5899e75", "sighting_of_ref": "indicator--3b650db5-71ee-409f-9edf-84908abd55be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff7aec-5851-4a38-9285-7ed41ed3ef12", "sighting_of_ref": "indicator--083231fc-f099-43f9-a621-22021495b71c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee829de-031a-4a93-965c-a936433be02f", "sighting_of_ref": "indicator--083231fc-f099-43f9-a621-22021495b71c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff8b4a8-36e9-4d29-8f50-a15ed26e1908", "sighting_of_ref": "indicator--5b6fca6a-b590-4ecf-94ae-a69994b65350", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7959385f-bb10-4709-81ca-b4846d51898d", "sighting_of_ref": "indicator--1e94989d-9b7a-4d87-8ba7-d1ede1f02d6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c20241-637d-40b3-8024-730102747795", "sighting_of_ref": "indicator--f5e5e04d-aefd-4d2d-abd1-9fb711276946", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2c7d71-df9d-4b62-aea0-31d2b0dff621", "sighting_of_ref": "indicator--d11836d1-2227-4576-982c-45ea56a64e0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74461ac-0efa-45f4-ac60-6181a7be42b3", "sighting_of_ref": "indicator--d11836d1-2227-4576-982c-45ea56a64e0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566b8470-9126-4eb0-a9ab-b5c0e98a54a8", "sighting_of_ref": "indicator--81a7a3fa-b95f-4dad-aef3-1714e4712f4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9826b856-aa5c-4bdb-a72b-0d4260bad392", "sighting_of_ref": "indicator--225ac2cf-beff-40fb-9ee4-2d6915a696e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7115a240-9224-4f49-a513-2107ca86c7a2", "sighting_of_ref": "indicator--fb992eed-db81-4c36-a7c7-d0db51ec0c35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b90d3-ced9-4728-b5c7-290379f71819", "sighting_of_ref": "indicator--f181d5af-f9af-488b-aec1-cf9cee8d2233", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a215ed-f4a1-428b-bb60-656909efd0f5", "sighting_of_ref": "indicator--16600831-9310-4a79-922e-c58eb4a1e25e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8549c4ba-9829-4cf6-8766-006e12b40630", "sighting_of_ref": "indicator--731f9978-55c1-4222-be8c-98e1a475beef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d843a30d-8126-449b-a7c2-4e6dcf158202", "sighting_of_ref": "indicator--69d822cb-b38e-4b83-bcaa-5ab9401102c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7686d1-458c-4a01-96c6-a609e4aa67e3", "sighting_of_ref": "indicator--69d822cb-b38e-4b83-bcaa-5ab9401102c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa7930-6f6e-43e8-a2ac-06a04704aa61", "sighting_of_ref": "indicator--97da379f-30a1-4538-8b96-1a266afb8f6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52a1c7e-bb2f-40f5-b47f-9069e54f47d1", "sighting_of_ref": "indicator--97da379f-30a1-4538-8b96-1a266afb8f6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eb1619-53ac-40d6-9cb1-26e0f3799cbb", "sighting_of_ref": "indicator--cb5f8f14-2de7-4392-8f67-d8fe5f6c2702", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e3bbe8-7e5a-4d78-9329-7c0fbfcc1078", "sighting_of_ref": "indicator--cb5f8f14-2de7-4392-8f67-d8fe5f6c2702", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3db9bb-bf8d-4249-aa4f-35d35e4e177e", "sighting_of_ref": "indicator--5aea8875-0455-479e-b2fa-9cf2e5bc9793", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d412b258-9ea3-4658-a344-08ace2a357f9", "sighting_of_ref": "indicator--5aea8875-0455-479e-b2fa-9cf2e5bc9793", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79769d1-348e-45c1-8c5e-6ffeab1e134b", "sighting_of_ref": "indicator--98d23b3c-3ca2-4edd-ae39-fce269d76d5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec07df8-fc07-4a56-ab9b-4e9e074bdbce", "sighting_of_ref": "indicator--98d23b3c-3ca2-4edd-ae39-fce269d76d5a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd1aebe-cde6-4f01-9a94-75c4e0c8bbcc", "sighting_of_ref": "indicator--c36e6f9a-6ff1-4de4-832a-cd03f0ba026c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0941bbaa-3cf1-493c-bc40-73fbbdd91a39", "sighting_of_ref": "indicator--c36e6f9a-6ff1-4de4-832a-cd03f0ba026c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f6d021-ac00-4c68-aedd-e9f6aee81d06", "sighting_of_ref": "indicator--a9b2bfec-84e8-470e-ae49-eab60a3f5666", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530aedf7-00bc-4596-a06f-ff6848a5e399", "sighting_of_ref": "indicator--f3b42de7-c1ba-4fdc-b133-235bf5eb5a84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9103ef-72e1-47dc-b889-ff440292aa1b", "sighting_of_ref": "indicator--f3b42de7-c1ba-4fdc-b133-235bf5eb5a84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09688ad-5829-4fc0-a3af-fc3a07147d49", "sighting_of_ref": "indicator--cce647f2-39b1-4abd-b03d-9440de3135de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e500fe8c-7ebf-4d28-b104-2727642b53b5", "sighting_of_ref": "indicator--cce647f2-39b1-4abd-b03d-9440de3135de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff41867-5c64-4609-b29a-425afd90319f", "sighting_of_ref": "indicator--1e7ef022-ea3f-48df-bc24-b26626128c37", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80891be1-2658-4be2-95a2-f80488368766", "sighting_of_ref": "indicator--1e7ef022-ea3f-48df-bc24-b26626128c37", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2bcfc-3f8d-4c29-8ba4-5d5f0f522227", "sighting_of_ref": "indicator--7b21130c-3d24-4ec3-aca5-5557156e3e75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00be14fe-b4a6-404f-9084-6ba4bfa01a83", "sighting_of_ref": "indicator--7b21130c-3d24-4ec3-aca5-5557156e3e75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e97d9d4-1c02-4e49-869f-15f4392fa1b4", "sighting_of_ref": "indicator--22b3971c-5011-40c8-8ca7-8c4672655380", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5981f520-10a3-4dc9-bea3-9cd6f2da0fa1", "sighting_of_ref": "indicator--22b3971c-5011-40c8-8ca7-8c4672655380", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb089219-d15f-4a5f-b9a7-f530b11111bf", "sighting_of_ref": "indicator--214a7347-ceb2-4bf3-a038-deb773c5e6a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffe8dc6-9be3-4d71-b53f-1ea06864481a", "sighting_of_ref": "indicator--214a7347-ceb2-4bf3-a038-deb773c5e6a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20738eb9-fe3a-4250-b878-894f6713d4d1", "sighting_of_ref": "indicator--c8bb3538-a7ec-48a6-8683-bf4ea1006575", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849d93d6-5b1f-481f-b7fc-3c13ab662aab", "sighting_of_ref": "indicator--80f074a6-5b42-416e-8fae-20da4de4a51a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0050afe-9735-47b5-acb7-c491a232d5a0", "sighting_of_ref": "indicator--5c6bfa7d-c2fe-4d06-9053-243817311ce2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea13c1aa-0f0f-47f0-b839-6d4e09d53f56", "sighting_of_ref": "indicator--073535b2-2f13-4748-9ac0-d78c5983f04b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989fe92d-6798-40fb-959f-30d5d0b8ab26", "sighting_of_ref": "indicator--8ee9e4d7-5371-4b51-9713-1458a0a61bcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f895a9-d62a-440b-8a3d-1d7975667fca", "sighting_of_ref": "indicator--32866c4d-462f-4275-90b6-acb7eaeeb0b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d53118-0c50-4e87-98f5-8c6ecb17e192", "sighting_of_ref": "indicator--e92f6378-e562-4bcc-b427-f31a00ef3b4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f58f9b8-87ac-4f83-a8eb-4da6943dadce", "sighting_of_ref": "indicator--d839ed32-5594-44e3-a8ef-d80b24fcce72", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e944f625-3fac-4922-b790-1ee99136f47b", "sighting_of_ref": "indicator--5538647f-177d-462a-b012-559e7f87325c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02d30a2-ebf4-4c06-813d-5772f73c460b", "sighting_of_ref": "indicator--03fcdaf0-1ca8-4cf5-9a27-dbe3be555050", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92be46da-589a-4d9d-8e36-4cb5b1e18e58", "sighting_of_ref": "indicator--09f2f465-fc11-41fb-a666-54c8d66c9864", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3970c64e-d88a-4aae-a48b-05d06555bc60", "sighting_of_ref": "indicator--76075010-a6fd-42fe-b9ea-a4591e325130", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58068cb2-1073-4e3b-a93d-36510bc9e125", "sighting_of_ref": "indicator--c2c091e3-c0ff-4b10-98f9-194b359d16cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34fa1dd-9369-4153-972a-8b1b70861753", "sighting_of_ref": "indicator--c2c091e3-c0ff-4b10-98f9-194b359d16cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019e6a84-4ef3-4cfd-8c33-e7899846fcd2", "sighting_of_ref": "indicator--9d112491-ad97-4298-9f05-0976ccad93ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2877fc-75fa-457a-8c45-da40b379ef37", "sighting_of_ref": "indicator--856ec0c3-f67f-4703-a9b0-efab56306685", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e018de14-f44a-4535-a5ed-7351e9bfd628", "sighting_of_ref": "indicator--a5cc4e98-4003-41af-aa11-13425cd1f638", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8774dcc-58a8-41af-bd8b-ec8e24b81b25", "sighting_of_ref": "indicator--68d6f8e3-c9f2-4d80-a613-9f8f1d00ab8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c0c62d-c724-449b-b8ec-1e5cae353155", "sighting_of_ref": "indicator--d4b4f8b2-3b46-4858-a433-72d601327cdb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6113e05-52c4-4b56-bad7-e310e70152ca", "sighting_of_ref": "indicator--d4b4f8b2-3b46-4858-a433-72d601327cdb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aecb3be-d034-43d3-bf2e-a4ae34f1051b", "sighting_of_ref": "indicator--d5b78812-1a85-4f4a-bedb-9c601c7100ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c0534a-7bbd-46cf-ad73-ea2acbb888fa", "sighting_of_ref": "indicator--54ddc87d-d07d-487f-8f0b-28b8eabc8e25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323e8aea-8ad6-4f77-9b77-2af7d11b228a", "sighting_of_ref": "indicator--2a604bc6-c847-49ae-8ceb-828e542b8616", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3c525c-2611-4ad3-b54b-0bf053a6c577", "sighting_of_ref": "indicator--bddf2814-bab4-4da9-8d06-adc078f0806c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a3da20-9099-491e-a012-45e13e52cef9", "sighting_of_ref": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bec543-4a3d-471f-8d91-d7449d322b0b", "sighting_of_ref": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d59c9e-a2e9-43ba-84a2-30aa9aa0fc83", "sighting_of_ref": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4200a0ac-07d7-43b8-8fe1-720d024c1e42", "sighting_of_ref": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698ba427-cc56-4149-98d7-5b58a7b014e8", "sighting_of_ref": "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4dacb6-1b4c-4b21-8fa7-b6176a3a62b3", "sighting_of_ref": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6953b80-8e97-43e4-86a2-f75b0cd4666a", "sighting_of_ref": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50355c03-fbc8-47d4-82a6-5c94a26679aa", "sighting_of_ref": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f25db1-3bce-41ed-ba8e-3e42f398636d", "sighting_of_ref": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a300f3-5b24-4ac6-91b5-e7c327a4cd5b", "sighting_of_ref": "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f1fbe3-5200-4e4c-b8c5-16ded8147a03", "sighting_of_ref": "indicator--b2b26b3f-593c-46b7-ac67-54824f8b80c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3f77e7-808a-4ae0-974c-9703952bc08c", "sighting_of_ref": "indicator--b2b26b3f-593c-46b7-ac67-54824f8b80c0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab256c9-2b50-4f87-b35f-76e832990349", "sighting_of_ref": "indicator--b2b26b3f-593c-46b7-ac67-54824f8b80c0", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12472d14-56ce-4b51-a3de-37e9b6b217a1", "sighting_of_ref": "indicator--c5eef81c-9eca-46b5-846b-68134ab0914e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5814ac2d-3c8f-4a5b-8ea1-e64de998a784", "sighting_of_ref": "indicator--c5eef81c-9eca-46b5-846b-68134ab0914e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bfac2a-82a7-415b-ac6f-5aac6e2839f7", "sighting_of_ref": "indicator--c5eef81c-9eca-46b5-846b-68134ab0914e", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a839671c-5de0-41cc-a65f-8249453ed10c", "sighting_of_ref": "indicator--5e1b502a-d85b-4163-95b7-b149400014fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf55a9e-ec63-44a8-9f1c-919461e70157", "sighting_of_ref": "indicator--5e1b502a-d85b-4163-95b7-b149400014fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9101cd5-d9df-4214-9409-9d6f4c4f23e6", "sighting_of_ref": "indicator--5e1b502a-d85b-4163-95b7-b149400014fb", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b8c5af-5e84-4d3e-a89f-bcbe6c34306b", "sighting_of_ref": "indicator--a3e16624-e950-4e94-88f2-f80965d798fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2165ccc-fd29-4494-aae2-ea3290de7819", "sighting_of_ref": "indicator--a3e16624-e950-4e94-88f2-f80965d798fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adadedde-97d1-42fb-a038-84f390087fe2", "sighting_of_ref": "indicator--a3e16624-e950-4e94-88f2-f80965d798fb", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed18b4-cc02-4969-aa3c-fb1b20cc62c5", "sighting_of_ref": "indicator--25230a4e-a24b-4584-af37-fd31cfe0b28c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca9191e-cceb-467e-84d2-34ca537f736a", "sighting_of_ref": "indicator--25230a4e-a24b-4584-af37-fd31cfe0b28c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5e58e-7869-42ac-9c99-bf3910bb5bee", "sighting_of_ref": "indicator--25230a4e-a24b-4584-af37-fd31cfe0b28c", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ea8a99-29e2-4a38-94e5-e5236b5d2e99", "sighting_of_ref": "indicator--6e114e4b-f0a6-4c3d-8b81-4bf200a4879c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa1654d-6100-4013-8313-1dd0957b66af", "sighting_of_ref": "indicator--6e114e4b-f0a6-4c3d-8b81-4bf200a4879c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e363b54a-f070-41ef-a58c-733e54b1fb14", "sighting_of_ref": "indicator--6e114e4b-f0a6-4c3d-8b81-4bf200a4879c", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dc399c-b507-44d7-9690-c7b57bf272b5", "sighting_of_ref": "indicator--c29a1947-18ce-4f00-ac0a-fdde9a59f477", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9687412-d09c-4e69-aaf4-e8c72027106e", "sighting_of_ref": "indicator--c29a1947-18ce-4f00-ac0a-fdde9a59f477", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87313cf3-b311-4d49-baf7-1f8df00a34ee", "sighting_of_ref": "indicator--c29a1947-18ce-4f00-ac0a-fdde9a59f477", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c711d155-0fea-45c8-8812-d8331de2be18", "sighting_of_ref": "indicator--a8d06d3b-3683-4d67-96d8-ff838684fbcf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031ff6d-347c-4891-aedc-975d4811de69", "sighting_of_ref": "indicator--a8d06d3b-3683-4d67-96d8-ff838684fbcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6041c3b-fc4a-4fc0-a96b-0f75f53e94ba", "sighting_of_ref": "indicator--a8d06d3b-3683-4d67-96d8-ff838684fbcf", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d69e13f-1fda-433d-bed9-f61c11e606a5", "sighting_of_ref": "indicator--a7ddc675-9afd-468d-815e-5ade53e7c69e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480aca19-0162-47e1-bba2-a0fad16c3abd", "sighting_of_ref": "indicator--a7ddc675-9afd-468d-815e-5ade53e7c69e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bbbecb-9804-41e2-a298-d41d1f8db0f9", "sighting_of_ref": "indicator--a7ddc675-9afd-468d-815e-5ade53e7c69e", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76704b3-4aee-4973-925c-210669429390", "sighting_of_ref": "indicator--643e211a-9385-4946-ad10-03b46e2e1230", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73929fd-1e7c-48ec-a82e-657aea3318f0", "sighting_of_ref": "indicator--643e211a-9385-4946-ad10-03b46e2e1230", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94363d4d-3490-460e-83b5-00cd016e9c13", "sighting_of_ref": "indicator--0afebb3c-7cb3-4bc1-ba1d-26d5380c94c8", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d30d6a3-d848-4150-91ca-28aa14b2b561", "sighting_of_ref": "indicator--0afebb3c-7cb3-4bc1-ba1d-26d5380c94c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e37633-a264-450f-9181-3ca109d0310e", "sighting_of_ref": "indicator--c519a297-da26-4f67-a05e-38b34f5c277e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724a5403-62a7-4a73-a6a0-b4e0f6ca6b2f", "sighting_of_ref": "indicator--41c5a463-cf96-4672-ab6c-4eb6af576942", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aab0d80-ad2e-4618-929b-7779416ad0c5", "sighting_of_ref": "indicator--24ebf76b-ed3d-4371-b4c9-9288e43409d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e06d60-37f7-4de1-8f41-c5d5da3aec82", "sighting_of_ref": "indicator--fb52a046-31d0-444e-b0b9-556511232c06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5435c4-9cdf-4ff1-ac72-d5fb3324f812", "sighting_of_ref": "indicator--03c9e786-72a2-48e3-bfbc-d8008c49c330", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec9861d-90a5-4085-903f-8a5a1305ebef", "sighting_of_ref": "indicator--187ff2ad-9cc3-4e7c-8b6e-0b8c23b31c31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60947289-6aa3-41b4-a905-180ec7cede10", "sighting_of_ref": "indicator--075be62f-1cad-40a9-be53-cf34ecc12962", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fc2294-71ac-4e31-bc63-02747662c30e", "sighting_of_ref": "indicator--13b2833e-1c14-4ac5-8ee7-a236cebcecc3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd4b7d3-c78d-4702-a97f-7fd21b66ba0e", "sighting_of_ref": "indicator--290ab102-bd79-4158-a7a2-d9f00fb49f12", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faba232-5884-4f7f-8a7a-026423a81db4", "sighting_of_ref": "indicator--b09d37b6-3f25-4039-b2aa-50bec1b06bde", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977801ab-0c2a-4a06-a69b-27208467d847", "sighting_of_ref": "indicator--9c0d636f-e571-4ebe-b027-8ef80ab3928f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76803799-8f98-4b83-94e9-e44feab6ecd3", "sighting_of_ref": "indicator--e875590b-b6fa-4dc6-a4af-4f3e9454697e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ddae15-2f2a-4ab7-9da4-a6a16ffe6f56", "sighting_of_ref": "indicator--d4edde83-b3de-4262-938e-036460078b61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a84673-3ea6-41e4-9d9d-4a31945a1ffa", "sighting_of_ref": "indicator--a9c6349c-c6ce-4972-abca-384ea0ad4554", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3e705a-d62e-40e2-bc66-3041aeaac61d", "sighting_of_ref": "indicator--62c964da-58ef-4e81-9b00-c9f0bc343ccb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d0674a-54f3-410c-a839-a50cbd8d9873", "sighting_of_ref": "indicator--abd859fb-9acb-4481-bcc8-bbbeea33497e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9b97b7-744e-4725-a826-405f1cb2b672", "sighting_of_ref": "indicator--17b50905-a070-4858-96a4-e250d368d1d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36315c9f-e302-4969-8366-08680934658c", "sighting_of_ref": "indicator--30b94dcd-f058-431a-abef-12d5f09ad3a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fca793-9d75-42d2-bb73-02c5d2d63986", "sighting_of_ref": "indicator--a7823ac6-4877-4324-9fcd-d30f42bee49c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeba466-4900-4d57-8eb1-2f0b029ed6f5", "sighting_of_ref": "indicator--a6ffc5b6-217d-42f3-b349-f64077b6dc98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c0c7c3-df25-466d-a00e-9e0e3b287d42", "sighting_of_ref": "indicator--c3e83d49-82d0-42e9-bc96-59fe2c775af0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027fe027-d930-45c5-9cee-9ab1d6db3591", "sighting_of_ref": "indicator--8b9f2804-dafa-4fb4-b246-ed5cc3d700f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da660c7-6a7a-46d7-a9c4-2ee3247d34ef", "sighting_of_ref": "indicator--c1e80320-fa2e-42aa-9967-d7d0ec18fc01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b912824-88ed-4d2e-b194-d93114792a26", "sighting_of_ref": "indicator--4696208a-0d2c-46fd-9f7e-de02f76f95c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f10a2a-ee4f-46be-8c2d-885632640e81", "sighting_of_ref": "indicator--145d6e51-ff12-4f8c-b1ac-040065b74ec7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853ea076-b789-4c74-b2b9-34abea5a31b3", "sighting_of_ref": "indicator--a3e551cc-74ba-4c7c-8a2a-730216bbda6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab962c1-f9af-4633-aa1f-38bb6749cde6", "sighting_of_ref": "indicator--52db9ac7-326f-43a3-85af-0d01949e8a54", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840732d4-2e06-4e04-8e42-1d257539748b", "sighting_of_ref": "indicator--4f438c01-ca5a-4662-9b48-8a29c323e582", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cadb0f-1a63-4b4b-9b18-d89ebb646d4a", "sighting_of_ref": "indicator--dcd29b42-7ca7-4005-9bdc-ac683589e922", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b18292-8728-497f-b781-003a142e96c6", "sighting_of_ref": "indicator--c5ecbe13-6b7b-4a3c-98f6-406ae66184e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47701fe8-f64f-4489-a035-dfb405db7937", "sighting_of_ref": "indicator--e415df2a-1e95-4c96-9f00-a9f4baefdb1f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52acde96-fcba-465c-a2f6-51f377b02626", "sighting_of_ref": "indicator--47579b4c-7c4f-4e16-92b6-60e0978d9fef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8172ac29-4884-49ed-964c-3450a8ab2924", "sighting_of_ref": "indicator--b5ba21ac-fb5e-4626-b0dc-139a0dea595d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5c5113-6c9c-42e0-aaa2-c0af30eed5fb", "sighting_of_ref": "indicator--38aef17b-5f34-44ea-87ff-14e0c08ce7f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d96c5-3375-4278-bfc5-550ac0a737cc", "sighting_of_ref": "indicator--2dd6f450-1f39-4c4f-abc0-863e68b3fbca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367b40c0-a9be-430f-901c-4492792fc60b", "sighting_of_ref": "indicator--6062c9bf-15ae-4b68-b8ae-b5f0c5699c19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23349a6-ac9e-47fb-9050-2c541c8f5862", "sighting_of_ref": "indicator--e6d3a9f0-534b-4e07-9320-57f22a7ce6d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b8086e-fc64-478a-8898-7554633dcc82", "sighting_of_ref": "indicator--febb99fc-2ca1-4065-8eff-65ded1f46911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f130a0-58ec-4b6c-9a03-31ec6bd7a04e", "sighting_of_ref": "indicator--81b16f26-7892-4bbe-9af0-25bbbc58544a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952613a4-29ce-43fe-b829-53a62791d0d1", "sighting_of_ref": "indicator--3798c906-7fd9-4604-945e-786bd511fb9e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f61e5d8-6bb6-45d5-87e5-14263d982ea4", "sighting_of_ref": "indicator--b588cc05-c18a-4bb3-9ea1-08bca04d5a6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b816eaad-071b-495f-a9d1-cf7e15bfb2d7", "sighting_of_ref": "indicator--90d4cbb8-9dca-44b3-954d-24f6dcf0005e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a192c2-4369-44e6-ab35-43195e5ba9e8", "sighting_of_ref": "indicator--9684569f-5b47-421d-a246-6a2b73353f9d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4069d93e-72b2-4b30-802e-c8a5f7116212", "sighting_of_ref": "indicator--63d392c0-f3c8-4d1e-a189-0f7e9f6a834f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b474764e-6fa9-42d1-902d-f84632a9142c", "sighting_of_ref": "indicator--bc6c732f-383f-41f7-9db9-c8efffa56e45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d12fc6-4858-4a80-acd4-f042469b2340", "sighting_of_ref": "indicator--85661527-d8d2-478c-8394-1c0bc3969911", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28399efd-b269-48f7-89c3-56e91765644e", "sighting_of_ref": "indicator--85661527-d8d2-478c-8394-1c0bc3969911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808485f3-f0a2-4d3d-a4bb-0065d8264c08", "sighting_of_ref": "indicator--932f486d-ce35-48b5-a143-f9b262c1097f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad950210-8606-475d-b726-870e85037d38", "sighting_of_ref": "indicator--0a46df9c-6ae6-44c8-ac6b-71b37583d645", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c413474-7905-4498-9b92-c26c8a3727ff", "sighting_of_ref": "indicator--44570bb2-0721-484f-b803-86d35892672f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d1e76-9046-4d54-9733-b065f9ea0ace", "sighting_of_ref": "indicator--44570bb2-0721-484f-b803-86d35892672f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03beb6ff-51d4-4883-8d91-c20ab43b8a03", "sighting_of_ref": "indicator--7fc6cf61-7509-4c4c-a0dc-dde91ee9139c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b7176-ff1c-4bfc-ba17-088c788e39f1", "sighting_of_ref": "indicator--e4c0f2c7-e2f2-4203-bcb7-94bd57dda6b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8bc417-fffb-4e4e-bdad-2a00b1811a45", "sighting_of_ref": "indicator--3522770b-a407-4d37-89ac-2818aca061ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5fe62-5ed5-4c04-90b8-aa7ee1cbe884", "sighting_of_ref": "indicator--3522770b-a407-4d37-89ac-2818aca061ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48864885-8263-41a7-b015-5ec54675b7c2", "sighting_of_ref": "indicator--5216c09e-8842-4973-a225-bbbafec88963", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3fc87c-7660-441e-ae9a-8abc09a9828c", "sighting_of_ref": "indicator--bec716d7-d8ca-4ef8-b2a8-1bb383ee1460", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3581ea4-f235-420d-b6f8-98fb1e629281", "sighting_of_ref": "indicator--cbcf676d-0355-433d-aeb6-4be18b965d68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2211b08-ca51-44d7-b8dc-7bf2a74ae58d", "sighting_of_ref": "indicator--6e00679a-2807-406f-810d-9cd8a9b0ecff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7d4772-ffd8-4e86-8546-b11d55521df3", "sighting_of_ref": "indicator--e4d7ece2-86c9-4b0f-96ed-bb87f17d2d7e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b08f4-7985-4f27-8d85-830244f8f863", "sighting_of_ref": "indicator--e4d7ece2-86c9-4b0f-96ed-bb87f17d2d7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbfc2ce-14a8-4723-b105-e7d3f90288c5", "sighting_of_ref": "indicator--fd94e220-6b99-46c6-be7f-07afdf3cbeb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd3268e-bbc4-4e7f-830d-fbf853765fa6", "sighting_of_ref": "indicator--8135398c-ce9d-4b6c-9766-e3380895c0f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cd280a-9903-4d2e-a277-f37a0fb2a194", "sighting_of_ref": "indicator--98317371-9756-4769-892c-06b74248f10b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98720132-647a-4c48-80c6-7189b53b5109", "sighting_of_ref": "indicator--656a507d-80bd-4802-982a-df9bf7c33dc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7171581e-fedc-409c-8df0-26430c609cca", "sighting_of_ref": "indicator--c07eede4-f35c-4bc9-af4d-ef0bb7065b10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d61c83-1611-4f99-bfea-265a01840bfe", "sighting_of_ref": "indicator--8d50696a-2e60-42c7-b2c0-1ea9630f2e7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca27880-7ba7-4ee9-a3b4-d73bd70ef1a5", "sighting_of_ref": "indicator--8d50696a-2e60-42c7-b2c0-1ea9630f2e7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f49f3f-66b8-4bc4-90fc-18a0ce3398f4", "sighting_of_ref": "indicator--d0d0f2a5-6174-4284-80b9-fb606f27e488", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5355c93-dcd4-4063-8ec0-0c360481ea82", "sighting_of_ref": "indicator--70e3b724-1e53-478a-978c-74f1a1f06aa9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0e861c-84b9-4033-8b07-89f8ac54cb78", "sighting_of_ref": "indicator--904eedfd-ab0c-4e5a-b806-1f28ad8da5a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246a77ac-0fe1-4808-808f-59ae560da251", "sighting_of_ref": "indicator--d934f455-9c05-400d-8ed9-098269f92cf1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782d902d-3dee-45af-99ff-c1ec9395d842", "sighting_of_ref": "indicator--d72112c9-f9a9-4013-986f-8ccef9bab98a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383b0c70-0855-44d8-a359-f535280a26e8", "sighting_of_ref": "indicator--244d5351-32a3-4134-9f09-4077e9feafcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c702e5f-72c7-48f0-af2b-9986ca2bb3af", "sighting_of_ref": "indicator--ef4af0de-2a0e-403a-a1cf-175517d493f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866c25d4-3252-45d7-8527-92a8c0e89412", "sighting_of_ref": "indicator--e6cd543e-31ff-47bc-91b7-cc1fd45add55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a349eda-1468-44c1-9d40-87b35894e427", "sighting_of_ref": "indicator--cfb4133e-af29-4518-b923-b47015d85596", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00207dbf-d309-435d-9ae8-bac158d706aa", "sighting_of_ref": "indicator--be0eba19-750c-41c5-aecd-6cf942493ba9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f638f346-b8e2-451a-8034-275dccce2337", "sighting_of_ref": "indicator--790abfb5-0c6a-47c0-8c4e-35eb99f9c634", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48ebc9d-db2b-404e-9b2f-ed6945e1cfd6", "sighting_of_ref": "indicator--5419fc6d-a1a1-495e-b35e-abad902e9d55", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01401fd7-b06b-413e-a6a4-d2c790feb77a", "sighting_of_ref": "indicator--c1962263-fb52-4d67-b778-056c01925a80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79424448-7978-4826-a8f5-6505fd66a58a", "sighting_of_ref": "indicator--942107f3-de1d-4745-8288-945d5f604988", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1849f0-a4bb-44b6-b6a4-56769e943e67", "sighting_of_ref": "indicator--39e94419-5796-4ec1-9001-174123469eeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe639fa-31f0-4cf0-aaf3-1b748365387d", "sighting_of_ref": "indicator--73770096-61eb-4944-9e06-94b7090a8fdd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f194f2-65c4-4ca2-97c1-9a2f7be9a81e", "sighting_of_ref": "indicator--9e2fbbf8-42e8-4c60-a325-3532cdc7b83a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3223d259-170c-44a9-aca7-3cab82e9a0d3", "sighting_of_ref": "indicator--e243a3b6-2a5b-4363-84fc-3b004668da65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9c8ef-43b4-435c-8e0a-06556ae32ceb", "sighting_of_ref": "indicator--14b475dc-af05-4007-8c84-2270817f89f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b082bc8-b758-433a-a560-557469723905", "sighting_of_ref": "indicator--7d3f2272-932e-4df7-bdc3-f4a4d5048f3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6f5fa8-1e97-4493-b44e-7408b91fad44", "sighting_of_ref": "indicator--f95b119f-7243-49c4-ae02-3b9afc54375a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c90a8-5436-40ea-91a7-b37e15a06325", "sighting_of_ref": "indicator--4017a4f8-cb84-440c-aca5-bf14d669d8d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29cb350-d479-4e3d-8664-3b4bd14d3ce9", "sighting_of_ref": "indicator--34018b02-aeba-45de-b4a1-ce0cde65c1aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4457105-430d-43ad-97d5-4314511e5088", "sighting_of_ref": "indicator--87de051b-85d2-4624-9b1b-f2cf87dc1a3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087558b6-5150-44a1-95ca-a9ffae176e55", "sighting_of_ref": "indicator--f693e04b-8b2d-4805-9477-fd564cdf8df1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e9b4b3-cf7b-48d4-b43d-3d47e3750005", "sighting_of_ref": "indicator--f693e04b-8b2d-4805-9477-fd564cdf8df1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e2c9d3-c75e-4041-a7f9-34c62c1b1336", "sighting_of_ref": "indicator--b59147ae-8d97-4676-8212-0ecc09ca2c34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3895e583-7fd7-4d1f-974d-05f90cbe5eae", "sighting_of_ref": "indicator--de122628-40e0-4743-8283-772f0ddb1721", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a90a7b7-cb9f-4c33-8166-5217b14a6f9d", "sighting_of_ref": "indicator--f90aacfe-d58c-416d-a06e-1658b9567f57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6da584-219d-4c6b-bacd-8c3a1f0ae099", "sighting_of_ref": "indicator--b0dbd517-27ad-4a2d-8908-c6c2477b571f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f2ba13-01cf-423c-bf84-b7ccb5d15bbd", "sighting_of_ref": "indicator--34e1b53a-1f61-47c5-af80-600ade6439e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497fe18a-3db3-4288-a99f-491de253a518", "sighting_of_ref": "indicator--7d378f52-5b7d-477c-8eac-b605c30025fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d243c16e-757d-426a-b70a-dd075b9cfde8", "sighting_of_ref": "indicator--c39fa3c0-135d-43be-95d1-59c04c49adc5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258f8bff-da40-4e12-8555-e4e5ce7580c3", "sighting_of_ref": "indicator--4f7dabd5-59e0-4900-bd3c-68a7808086bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f5b522-f19b-4869-aa3c-4884b9fbe4e3", "sighting_of_ref": "indicator--ddf50f2c-3362-4bbe-81df-b5441ea7e877", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bd64b2-6c19-4dcb-81ef-49fde452643f", "sighting_of_ref": "indicator--cfac697d-ee52-4023-828a-26659f5c3674", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e3c785-0794-49a7-b3dc-ffb8f6438c91", "sighting_of_ref": "indicator--5ec95af8-fbb8-478f-90ca-eba0e74ef5d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e5656b-1c8e-4272-a43c-64ad544f94b2", "sighting_of_ref": "indicator--21e76b3d-0fb6-417c-bbf0-52cf8fcad881", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a19fb6-695a-4185-be07-3671b4902774", "sighting_of_ref": "indicator--b8f57beb-f8d5-4d29-a00e-4b1ea26ad539", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8254c0db-7c5c-4e1c-ae0f-a010f82546fa", "sighting_of_ref": "indicator--a7619296-cd3a-44df-85ef-4ba30378da6c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6304285e-0491-4abb-9878-169df4a6cc4a", "sighting_of_ref": "indicator--7575aad8-ee91-4d7a-91ac-825b3ee7218a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5337a120-94ac-44e0-974d-12bcc849199c", "sighting_of_ref": "indicator--5aa0e1d2-e276-481f-903b-b86c33bf6851", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e56cfc-56aa-42fb-9442-9b312a1aa3b1", "sighting_of_ref": "indicator--2a724b5f-f002-4099-96b8-e9db46087002", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedf6dc3-5a00-481f-b0f6-97f19d88d07e", "sighting_of_ref": "indicator--fb1cc857-2920-43d1-a2b7-bf810b858518", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89eeb04-8e07-44b2-a0c5-83a94943f4be", "sighting_of_ref": "indicator--b79fa72b-640f-4a98-ab62-64c33ae33804", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd7e5d2-3df7-4f1a-abea-9608cb8b00d0", "sighting_of_ref": "indicator--60fa18dc-305b-43c7-be00-7abbb2c40640", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6de572c-8976-445f-9fb0-2de97fb78c59", "sighting_of_ref": "indicator--60fa18dc-305b-43c7-be00-7abbb2c40640", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd07049-4409-4d03-aa71-2d213a7c9cb3", "sighting_of_ref": "indicator--3d054bfe-89c2-405f-a2ca-26e680d0084d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db807ef-fc62-499a-8bc8-cee676c9af70", "sighting_of_ref": "indicator--d6aa3e1b-7565-471b-b28f-3111f020ab23", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ffaba2-e8be-4238-897e-16229bfafb04", "sighting_of_ref": "indicator--76328400-a4e0-4427-81d9-ecb8483fc24d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d1bf2d-9b23-4227-89d6-52d8d73abcb6", "sighting_of_ref": "indicator--d827efc5-b56b-47e5-ba9a-1bc6622e0d6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d93f56-1b69-4132-96d8-d186ad02b131", "sighting_of_ref": "indicator--35c96e90-ad71-4c68-9a6a-8511a6cdcbf7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43552174-3deb-4045-adc1-75402889c72c", "sighting_of_ref": "indicator--93ecc386-741f-4dec-8e44-54b6e383b5f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2005291-5140-4bc0-858a-38e1ea29db27", "sighting_of_ref": "indicator--50becaa6-c70e-4614-8e10-208bd2c7fb05", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb962fc-3085-41fb-b0b5-61bf99bc7142", "sighting_of_ref": "indicator--feef491f-bacb-4542-959f-1c82dbd93e2f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85a7ffe-bef8-4fa6-9ba3-b5af4b22d8f2", "sighting_of_ref": "indicator--4a67f186-3063-4222-b4fb-fe2fb0c93df6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9df210f-d345-4384-a5d5-fb1d87729f16", "sighting_of_ref": "indicator--caac575c-2333-449c-8938-4fffa9ba4474", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac71b4e-3880-4132-b96c-1e459e22b9d3", "sighting_of_ref": "indicator--46d1eaf9-4ced-42ce-acdc-95c66363eebb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf94aa-052d-411b-adae-c686bf657d36", "sighting_of_ref": "indicator--2dedc0ba-fc2a-4605-80e8-fa9514c2263f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0c6eae-0ad9-4e62-aaca-9552ae1a87a3", "sighting_of_ref": "indicator--0a4c5399-66d7-4345-9cd6-0cacd09abf9a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309a49d9-9073-4800-85c4-365567c7a731", "sighting_of_ref": "indicator--b05517ea-66e7-47bc-a373-78f45a38a24e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16109022-b569-4a1b-949f-cf13e8a19f3e", "sighting_of_ref": "indicator--bd65a3b3-9afc-4722-a5ce-fb65d5695d2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8674f948-ad98-438e-a898-11ceebecc5a4", "sighting_of_ref": "indicator--bd65a3b3-9afc-4722-a5ce-fb65d5695d2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14c9ce4-4b92-4bdc-994d-f190d315a39a", "sighting_of_ref": "indicator--b319581a-84a9-4b58-9517-c6e038effd9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17696963-2306-4b15-b493-da2f66db4264", "sighting_of_ref": "indicator--463ae3e1-62cf-4d21-8b06-28a4cee07a7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81eafa64-f7ae-4b23-84c9-909f5ea3ccd1", "sighting_of_ref": "indicator--0f5b7e7a-03db-43bf-bebd-650ec230a167", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7336517b-6d05-478f-ac67-50383a002f03", "sighting_of_ref": "indicator--0f5b7e7a-03db-43bf-bebd-650ec230a167", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a4b094-bcc8-49da-8559-ba1a454a428b", "sighting_of_ref": "indicator--b3383100-951c-4571-bff0-97ef4038877b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebbb123-60a2-4bee-a6b9-a5af9f909b52", "sighting_of_ref": "indicator--393905d3-88e1-4554-a2bb-fbde1025ede0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb66bbf0-9fd4-4688-9c08-3cb4b22f3998", "sighting_of_ref": "indicator--3673794d-bf49-4a29-9de3-1131a93a27b4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575a3fda-c19e-421a-a5b9-f504dfa5374d", "sighting_of_ref": "indicator--d2cfaa9c-b8b3-4d10-8422-d6aa9f77acb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770f60f2-ced5-4ec9-b70f-599252061212", "sighting_of_ref": "indicator--c3837d78-08be-4650-aee9-45912342d22c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d13dc6-b940-4ecf-b403-3f3dd5163def", "sighting_of_ref": "indicator--d107e39f-c0f2-4bb4-b3a5-2423315c702b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4f9c57-7ca1-4858-9843-2da847f135ef", "sighting_of_ref": "indicator--64b39f47-4472-43f5-ac78-5af8d19712d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32970ca-f8d7-4502-ad0e-f7b7424e7ffa", "sighting_of_ref": "indicator--ec2ee105-a8f5-4e49-8c84-86d846ef6c95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8fcae6-4279-4bad-907e-563551820c2f", "sighting_of_ref": "indicator--14500ad0-39dd-47e9-9701-680f522dec60", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b901188-1add-4002-bc92-7feae8fd36a6", "sighting_of_ref": "indicator--15852285-d497-46d7-8792-7c0f6f167c5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738e7fa-7750-41fb-b335-ead736248cee", "sighting_of_ref": "indicator--cc623c66-c056-4424-9e8f-de4779cb4d2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0ad9b1-0fd1-478b-98f0-e2e9e49132fb", "sighting_of_ref": "indicator--18ee6770-6906-4e1d-b01e-eb053b0acdd1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8675d95-e40f-4576-b568-83b4c92267be", "sighting_of_ref": "indicator--b028624e-962b-4993-a8c2-8b8a1499ccf8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f2da7c-d51b-4086-a2cb-38848e8cf163", "sighting_of_ref": "indicator--60b77dda-eda8-4710-b864-720aeaeda58a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8564921-6489-474d-bded-cb4524517737", "sighting_of_ref": "indicator--138029fc-c17d-43a9-ad3c-445d1d459814", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76048915-0de4-4ee7-ab52-c7d70be05113", "sighting_of_ref": "indicator--55105496-d46f-4745-b340-5abf5f7f76a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e540707f-d349-456e-b32a-0332f5076761", "sighting_of_ref": "indicator--38fd1a70-0b96-4d77-ac03-0fda82431576", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4770f4dc-af76-4caf-bfac-5ffe41c26927", "sighting_of_ref": "indicator--d10fa130-38b5-4ed8-a46d-b485fe0603f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa5d36f-55a3-4eb8-a6a4-96b94835d719", "sighting_of_ref": "indicator--0b433ca9-09b2-49c7-be40-1ab104483734", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dce495-916d-449d-9e87-df007e92ef56", "sighting_of_ref": "indicator--b439b575-0c34-493b-9c8b-3134be3f157c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f103049b-7fe9-44fd-a141-0d6f9fca26bc", "sighting_of_ref": "indicator--b439b575-0c34-493b-9c8b-3134be3f157c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26db7a67-000e-44f8-aada-537edb4b8b59", "sighting_of_ref": "indicator--3b0dbd2e-5dcb-41b1-98ac-ff12469f3600", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6e73b5-f5e3-4ec3-bb89-d9306d4fe55b", "sighting_of_ref": "indicator--3b0dbd2e-5dcb-41b1-98ac-ff12469f3600", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afe7ff8-602f-495b-8ac2-76e46d70ff17", "sighting_of_ref": "indicator--703bffe1-a7e4-4971-bb5e-fbf765b50d7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7683bb-ab8d-4db0-81eb-81870d864764", "sighting_of_ref": "indicator--bebc0d35-1dd6-4ccc-82b2-e09d63a4dd9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9078c455-969a-406a-9011-c8cb165bc52a", "sighting_of_ref": "indicator--79f2a743-8d12-424b-a9c8-d3ef899e7562", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f4bfc3-cefa-4bec-a9eb-af04e4ac6482", "sighting_of_ref": "indicator--79f2a743-8d12-424b-a9c8-d3ef899e7562", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c506f83-bc0b-4704-8b43-1e5b1d3e5f08", "sighting_of_ref": "indicator--0ffab846-0363-4122-8e30-5512db30d918", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153f3cf3-4024-4642-85a1-adafae06fc9d", "sighting_of_ref": "indicator--210f160d-3d4b-4344-bac4-458d4c7ebbc0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eb16b6-f32a-4d32-bd57-151ca947fc3d", "sighting_of_ref": "indicator--b02109c6-1714-4377-abcf-c2a4d8b07821", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeb2293-447d-44c1-992e-b76a96e276a6", "sighting_of_ref": "indicator--3b668e8b-e818-4ade-a0d7-17ab0958eca5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e618d8a-8cdf-48d9-afed-2bccfb55d1fa", "sighting_of_ref": "indicator--30bd3b29-fb82-47e5-9e20-6bc034f56262", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56897ff2-779e-48be-bb6c-3f246c56eb6e", "sighting_of_ref": "indicator--bd003a9e-8c3f-43af-911b-e0ae4b12855d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64259fc-4161-4340-8f53-1c4f96d8c2a9", "sighting_of_ref": "indicator--bd3f288b-7898-4abb-8cd7-fa6bc172482b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fb64dd-00dc-4430-bcbe-86c5f38e6d7d", "sighting_of_ref": "indicator--a84a68cc-c886-4f9b-be53-3bc34d467a32", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddacad0-6316-4217-a768-122eb0758662", "sighting_of_ref": "indicator--58ed7c22-526e-4e57-9e46-b2ead3fbc479", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a73ec02-55ee-488b-88d9-8e248b46efbe", "sighting_of_ref": "indicator--1e2892f3-f633-419f-a167-983cb733d824", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b80145-f280-416f-ac4c-96d441dc21f0", "sighting_of_ref": "indicator--74c81022-3937-49b7-8c9a-43515c8c6052", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6672c60e-f57c-49be-a664-1615e276e95e", "sighting_of_ref": "indicator--3bc54ab3-25bc-4ac8-bdc8-4ac009481a6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52be82cf-086c-4b16-b378-5cfdc32af863", "sighting_of_ref": "indicator--ccd2c65e-2e4c-4710-92f5-b08e1803c555", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8ac546-a9db-4871-ba07-23823d9494d7", "sighting_of_ref": "indicator--ba61268c-2f10-40ca-921c-336e8e4c4e7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd2602a-24fe-4b6d-b040-bc0aa605498f", "sighting_of_ref": "indicator--fdb256b6-3182-42a5-bc60-0097e5ad408a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8879220-651f-4516-926b-d790d816f292", "sighting_of_ref": "indicator--927d557f-e24e-433c-aad2-8bc1c49d6f60", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1010714b-6167-4d9f-8c26-c4085a04e55d", "sighting_of_ref": "indicator--bc3bdbe6-a497-4dd7-9367-b04a215afd0c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c446f50d-fc0d-44d9-81e9-f7171d5d2ec6", "sighting_of_ref": "indicator--3b62e78d-19c2-44bf-9db0-ea0e757a919c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b011f4-3fb3-4ad4-8e1c-e29179b348c3", "sighting_of_ref": "indicator--5139d553-ef8c-4037-82f9-222da20ae579", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171a6c68-9c0d-4bc8-a6d6-9a3680f0bca4", "sighting_of_ref": "indicator--4a82307d-dcba-4b6b-8e52-0a1c20d09984", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bb24b3-5f80-49ef-9f82-2aa44bcda56c", "sighting_of_ref": "indicator--75ed4d5f-85e9-4aa4-a72c-a50eb618449d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f4fa5a-31d3-4078-8b1d-9770f0e5b8b1", "sighting_of_ref": "indicator--75ed4d5f-85e9-4aa4-a72c-a50eb618449d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64090790-2681-4051-ba7e-10e08d8c9770", "sighting_of_ref": "indicator--eb7780eb-5dc9-4fb3-a9ea-6e7d1b714e3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be83d5e7-f50b-4fa4-b46f-5578eb8ac8ce", "sighting_of_ref": "indicator--c15762d8-32a8-4ba1-9bef-48374986e546", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc381b8e-b436-4dd9-8c20-0f9d705644bd", "sighting_of_ref": "indicator--a80743a8-fa33-4be6-891d-c4bf124eda7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc620960-1a28-4c7a-ae5f-7e5e167f51b7", "sighting_of_ref": "indicator--4c4a62d2-852d-4ea9-b74e-97280e4b9926", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecf749a-f461-4591-9be5-ebd1cd16ea93", "sighting_of_ref": "indicator--c80419ed-4ee1-4774-b5c1-0d68ec617687", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36056d9-8d1a-4c0a-a14c-b5425d633d70", "sighting_of_ref": "indicator--c80419ed-4ee1-4774-b5c1-0d68ec617687", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d612b5-00a8-4e04-bb1c-c15a2cd3b162", "sighting_of_ref": "indicator--397e5b79-0175-472f-b328-96c0995358d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edb366c-d529-498f-9956-979afa980f0e", "sighting_of_ref": "indicator--0df1ef84-b771-4325-81b9-7f75b0fd3966", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0103e560-1124-41ac-b05c-37fce3cf4968", "sighting_of_ref": "indicator--5a094fcf-7b4d-4b45-9989-0c2e2e88b26f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13076c8-a8b9-40d7-a45b-4e5b917c851d", "sighting_of_ref": "indicator--2be9f85c-c134-44af-8150-e120d3d51014", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d85dcb0-be24-44a6-a521-e3838263b1a1", "sighting_of_ref": "indicator--4b77b65a-fa2d-4439-b791-c7b9fb853610", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918f729c-b3a7-42f0-be41-27b0a9f86c04", "sighting_of_ref": "indicator--bbe873dd-0834-4793-ad85-7f52e433cb9f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3926525-547a-46a0-b031-27274ed2a254", "sighting_of_ref": "indicator--3f9c5535-5b81-4f7f-9fdb-84bc574b48dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677edab4-edfd-4d24-825f-05df572c0cca", "sighting_of_ref": "indicator--67acf13e-022d-45d1-ae22-276529fc2530", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83b1424-ab40-4b50-8b5d-ad9f6272f8f3", "sighting_of_ref": "indicator--2ebf9f3f-6e0d-460c-b9db-ca0084056b3f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e61f3e0-e8b2-492a-9b3e-b0c13a2a9f30", "sighting_of_ref": "indicator--00daabf7-2b93-4d6b-aa54-01c6dcbdd9e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f72ada-5d4d-461d-89c2-27012ecdd226", "sighting_of_ref": "indicator--39a38af2-8f98-4331-96e2-c7a82d4ff5ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0f98a-4598-4c61-82c3-a73c3f3688a7", "sighting_of_ref": "indicator--4ffb972b-141b-43dd-9361-bedae8798a89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcbfaf2-fb0e-4bc1-b266-2e7af15cda6d", "sighting_of_ref": "indicator--6534c7ca-ec35-4077-827c-a7e8db2b8d03", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ad13c9-840c-4119-8f2b-605399a0dcc0", "sighting_of_ref": "indicator--8abe8bb1-6a0b-42b6-8ebe-75760786857f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7035add-8b70-45b4-a0b9-b5ba5bd038fc", "sighting_of_ref": "indicator--56dd7f37-4a68-45ad-87ed-c1f2668f7b27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d52bd0-df16-464d-b701-4ea3cf157f21", "sighting_of_ref": "indicator--2bec64ad-1183-4892-aa32-4971cc1e4cc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace1fea0-c898-4fb4-852c-ac5840abcddb", "sighting_of_ref": "indicator--5fd6d625-57b6-479c-9de8-8486187c748d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10915242-9d14-484b-a729-9e4a120e93c6", "sighting_of_ref": "indicator--ba8ab69f-92d1-40cb-8238-168dc4a79027", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720f954b-6732-491a-b945-9bfd1f64fb14", "sighting_of_ref": "indicator--6bfbe848-c073-42b3-a69b-2974849ba7dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08fec3-9c1e-4cde-9678-704869ce7751", "sighting_of_ref": "indicator--e3267daf-d245-49f5-a50f-5408948be6ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072b7e88-ac7f-43d5-9cef-51b8256b2fee", "sighting_of_ref": "indicator--a59d2ef5-98fa-48cf-a558-1ee69d3a1aa7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f926f5-ec4c-40c6-97b3-5a59474d6cd1", "sighting_of_ref": "indicator--e0a2f563-3bb7-449b-abeb-2ea0e85b574b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d10919-cffb-410f-8014-6870fa6dbb07", "sighting_of_ref": "indicator--8c015db0-8379-4a42-b64e-5f78644b698c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f88ce2c-2f3e-412c-9704-4a92d9189f8c", "sighting_of_ref": "indicator--62d345b2-d5f8-43e1-8fed-3dd16c3cb468", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18307e2-4cde-4b79-9951-5fb7e51b1ac6", "sighting_of_ref": "indicator--bb34fff3-b89f-4818-98fa-a00deaab49b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d6c59b-e57f-4b96-b2f7-a9daaa6e9f6a", "sighting_of_ref": "indicator--a35aa8cf-40b6-4c3f-b73c-0cc60bcaa666", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2fe5df-4087-4ac1-88af-daf252aee4cc", "sighting_of_ref": "indicator--5662af07-667d-4ae1-a05c-746608525d46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bff594-0880-4b57-8a1b-d884893ed571", "sighting_of_ref": "indicator--e9d58b4a-4d21-46e0-ad96-4ed9b0db2e33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3bfd3a-7572-4c67-b625-1f77ec6b7beb", "sighting_of_ref": "indicator--7d9bd870-8a5c-479b-ad36-9ea5d7cb1d77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf83720d-db6d-4f2a-b4dd-8e3ec17dd2ad", "sighting_of_ref": "indicator--e8b35670-8acf-4d17-90c1-e28704448b3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04b3c97-58b8-48fd-9b8d-9f5e53439e00", "sighting_of_ref": "indicator--0739b1e4-8052-4123-9701-fcc7c99ee5bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b907b2be-d6cd-4f0d-94c1-ad709e2a7a30", "sighting_of_ref": "indicator--ea2c1ea5-5176-45d5-832b-bb10402965e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c026d994-57b6-43fb-974f-c78415bb0c95", "sighting_of_ref": "indicator--522b9cf3-0f00-491a-9b9d-8b78a31398f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a607dfc-96bd-4ba5-95a4-372861f24ffd", "sighting_of_ref": "indicator--285f01a3-b547-4943-8ff4-ef0dc4d3981f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8d53ba-7af1-484a-ad17-9d560f6433c4", "sighting_of_ref": "indicator--0e64ac49-3746-4abd-b95e-58c5051c5d32", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc6da86-95a5-4db2-bad8-ed74aae1258a", "sighting_of_ref": "indicator--aeea88ac-2339-484a-b1e7-61587d9e62fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d0586-1511-41c8-a8e8-f7ad3af9bf37", "sighting_of_ref": "indicator--50ed57f3-8b59-4db9-a3eb-eb7f13d62947", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91959b32-a601-43da-97f1-2f7113c7b437", "sighting_of_ref": "indicator--a1bb873b-4613-4f03-a6c7-fc277a9483b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9ccb89-fa59-4edb-a1f1-02e42d2f596a", "sighting_of_ref": "indicator--31df7738-cebb-4eb3-b470-c0a4d17e6169", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8735d486-7e8d-4569-b037-b9fc09a3b3d8", "sighting_of_ref": "indicator--159f9fc9-430d-4ce0-8e7b-7916328c7cd1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1dc3f5-8b16-4ed6-940e-770840840970", "sighting_of_ref": "indicator--d37fec48-0091-4b91-bab1-f96d3829270c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c97490-7328-4e3a-b7f9-07b1c1825800", "sighting_of_ref": "indicator--d646bf90-071f-4b02-9eb4-9e20ba570796", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29877ad9-dae6-4844-8d06-8bd275a5293a", "sighting_of_ref": "indicator--654648e9-816e-4b14-b146-833b2fdf5794", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca357f43-ecc9-48e8-8a10-a0fb484ca993", "sighting_of_ref": "indicator--db6ed826-96f3-44ec-b4fa-6a57e4f15f83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ebd70e-a0be-431f-8f28-87eef390666e", "sighting_of_ref": "indicator--28d1c53b-01f0-4587-a5c3-2b30d2d40f71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3d95a7-4e66-48cc-a83a-3cd5518d1267", "sighting_of_ref": "indicator--1fa33f7c-7381-4ed5-b0ae-796020fcf7bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be5a594-245b-42f7-9f31-5d41e4338cf4", "sighting_of_ref": "indicator--941ed78f-1df6-483b-9396-eb04dc25e73d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7379da-67bd-43de-8cbd-a0a2c8244cdd", "sighting_of_ref": "indicator--f080bd16-49c5-4727-8536-ab6d494deed0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cf0f8c-c0be-4def-8bf7-877ddcf2d016", "sighting_of_ref": "indicator--9323441a-420f-4dd5-aafe-1ad1872972cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc80d5-8f75-4ce1-b3e5-8073c2217e57", "sighting_of_ref": "indicator--d94487e4-5f4d-444a-b731-b99253e3edea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f200237d-800a-46bd-b28d-16e22c67ece1", "sighting_of_ref": "indicator--4db4eb81-f5d5-4089-bed6-05d544ecbc80", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f1b436-b36c-4c2f-8d25-eec2b7c00633", "sighting_of_ref": "indicator--3eb61795-e3ba-4d90-91dc-737df32443bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851ffb22-206f-4f0c-a478-07793f20a246", "sighting_of_ref": "indicator--d33861f9-1a76-4d71-8710-2708ebef4939", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad7721d-c050-40ca-bbe3-8c285d5cb3f5", "sighting_of_ref": "indicator--d576130b-75f9-4732-b621-9ce2d9c9eb39", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1642219e-3a4e-42af-a84e-cb9008be5047", "sighting_of_ref": "indicator--aa9491e9-4394-48bd-9c57-afd8af1d8c00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66f1262-2d31-4562-83db-06c13c82e73d", "sighting_of_ref": "indicator--957a6918-5c86-4313-9888-32afe5f6282f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f896ca98-72c0-48c8-b148-2bc757997b7d", "sighting_of_ref": "indicator--4d18052e-c0e4-4fee-8015-e1c78d9e44aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaf10d1-c3ae-42b7-8d2c-639c82527a62", "sighting_of_ref": "indicator--c8dd5ee8-4bf3-45db-9bdc-334104e8f546", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b4a97c-0725-4853-80d9-f52de524919c", "sighting_of_ref": "indicator--7948a435-b65d-482c-a2e9-36f49c1c6825", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca92a586-9386-495b-a970-a7b9bc4421a9", "sighting_of_ref": "indicator--7948a435-b65d-482c-a2e9-36f49c1c6825", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfd052d-78af-4514-8340-4fc2709aadde", "sighting_of_ref": "indicator--ec21f7e7-a6a7-4bdf-a37c-9f97a25cd3fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b75287-32e5-4bc8-9dfa-1622a244a60f", "sighting_of_ref": "indicator--d82c5a40-7180-43a4-82e8-ff038866e4da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38abedeb-ab13-4874-a45a-370bf287c349", "sighting_of_ref": "indicator--c573ec63-0d0c-4128-aa22-7e4e060321cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a59760c-864c-42f7-9a12-c377c662f0de", "sighting_of_ref": "indicator--b3e11ff7-7f7b-4cb7-b448-610d93939369", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594478dd-ec01-4456-9e1c-77f2f13e36b1", "sighting_of_ref": "indicator--668c9a9c-a205-4f47-be9a-05023dd45a02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0376fe1c-082d-4c6c-8a57-c93171fe903c", "sighting_of_ref": "indicator--6c1db450-c8d4-4e76-a7e0-8a6d7be37af9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e6dfc1-b3da-4885-9308-11b0c78f5cc9", "sighting_of_ref": "indicator--24271e9b-8755-4230-81b4-4a2d0d3e0aa7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627f1bd1-f8d6-4f76-8fa7-291ce7be0606", "sighting_of_ref": "indicator--3dbf67c7-9d70-4ece-8b93-e765d6c26527", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668d50aa-5fbe-41e3-96bf-f0f77f405cda", "sighting_of_ref": "indicator--96274088-1294-4ea4-893f-199c20b54895", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4caf59b-3837-43ca-bfdb-fcee4612fc0d", "sighting_of_ref": "indicator--ca78668d-c36f-4c84-8238-590c3c30c6fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cdb2cb-6314-4fd0-aacd-0081f3ac2680", "sighting_of_ref": "indicator--05c2491f-5aa3-4da4-9077-ad872d58d371", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccc9746-54b5-413e-b145-26804410b753", "sighting_of_ref": "indicator--4df3273e-b6e5-49da-bfb2-152204baba9a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bc58db-094f-4aef-bc57-075ba31a974f", "sighting_of_ref": "indicator--b18b6767-7b4d-42c5-aa6f-083cebe7f662", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ffa538-9d10-49a8-a0ba-079ce95cb516", "sighting_of_ref": "indicator--68410733-8edd-4a42-9cd5-ca1c7af9b5a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947eb02d-a87b-4cf0-a254-f0812eb42c6d", "sighting_of_ref": "indicator--bb001a53-a34e-4616-bd52-46b9a6c6e5f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5692016-3b9d-434a-bd48-82d0dd0c8b80", "sighting_of_ref": "indicator--737988d9-0f50-4d88-a8b4-e58e29ca8245", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ac4a85-635a-4d56-a73b-661ac9b3f5a0", "sighting_of_ref": "indicator--77893097-e141-4e17-9bdf-d84b5a65da31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e89e0b-8843-4ef6-a49c-604b2200d376", "sighting_of_ref": "indicator--10042c21-62f7-4aa6-a396-a2936342f871", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6227f88-6db3-462e-980d-d63196fc5e3b", "sighting_of_ref": "indicator--e5611940-4025-43ec-bce6-5798c181569e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b37e4b-ff99-4b2f-bcf4-89ed401015cd", "sighting_of_ref": "indicator--5485108d-e07c-4f60-9bd3-8a2cc7120cbd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590a89a8-3592-4de5-a7ce-30f714969744", "sighting_of_ref": "indicator--76b9c6db-a4a4-41fa-8cd4-d206cb88b698", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d48c44-8e0c-4356-98cb-5489b594ab1e", "sighting_of_ref": "indicator--3abbc243-8492-41da-8b8a-31903c6c5395", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb363b94-a195-409c-8cc0-2831c8f4cec2", "sighting_of_ref": "indicator--3b065a16-26de-47d1-a011-118a2ecd8cdc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e881af24-fac1-40d2-b611-c526fb2367df", "sighting_of_ref": "indicator--512bfa16-c1ca-4f71-9caa-46280743b354", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da033de7-7ab6-4abe-9ec3-fb6d18b8eefa", "sighting_of_ref": "indicator--d24f3bdf-ead2-463f-bea2-01476e83630d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0c2153-3b6d-4c2e-8121-26c1229999a3", "sighting_of_ref": "indicator--a4034d6c-978a-4d85-8049-0e6be9e2f7a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621f6ad0-0cb5-4d22-93c1-11a3d549ec4f", "sighting_of_ref": "indicator--16cd4156-1754-46cb-8795-46968438f918", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99240d7-6d82-4fb4-85a4-9f6c4ef302e5", "sighting_of_ref": "indicator--42edf61a-6e74-40d7-8aac-cb87505537e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1203ecff-ee6d-4dd0-8e53-9074ddb22082", "sighting_of_ref": "indicator--42edf61a-6e74-40d7-8aac-cb87505537e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34500cfb-981f-4dcc-8be2-5911d26086b2", "sighting_of_ref": "indicator--2a868e35-1c2e-450f-9a2f-0d02258e3cb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e51338-cd3d-4866-afd0-76ee0f6eb5bf", "sighting_of_ref": "indicator--3ac8b6e5-eb47-480e-b34c-75d51ec2f8b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ae0da6-8e97-49fd-bed8-3067c6041d6c", "sighting_of_ref": "indicator--3ac8b6e5-eb47-480e-b34c-75d51ec2f8b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b751af64-e703-46db-8b69-3a516f21e1ec", "sighting_of_ref": "indicator--642d8558-d0a4-417f-a373-0318628da828", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e80f9d-f870-4080-93a6-43c2f0d3cacc", "sighting_of_ref": "indicator--fb841b6d-193d-4017-b081-99e41fe6697a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3fd3f0-478f-4455-b98c-b346e00285f7", "sighting_of_ref": "indicator--a7ff571b-2ad3-4d5f-86c0-1b573e83cc30", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13a3398-4e10-4dda-a7d2-165fc7c32124", "sighting_of_ref": "indicator--51eb6ca8-cec5-41a3-b846-ac2c895df832", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c554d3-414c-44b9-ad01-2d5eb88a88a1", "sighting_of_ref": "indicator--fa17c628-ed99-4c27-95bf-d76c5d3a8905", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98af9815-11eb-4c37-a8dc-aeb56036d03c", "sighting_of_ref": "indicator--00b8ee2f-e665-4d5f-8b23-26e2ce067e1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc655e07-ce06-439f-b189-99d7031c187d", "sighting_of_ref": "indicator--7c69a607-d188-46cf-840a-a7f926ad62a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14350f8e-fe00-409c-a081-2f1666a63fa4", "sighting_of_ref": "indicator--48d107a4-1d3e-4933-bf9c-6db4f0f99f95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1914de4-f284-4856-9f37-46c71ba74906", "sighting_of_ref": "indicator--e38ebc67-a304-415f-b192-76324030a3b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d167bab-80d5-46ce-89e3-612520451b37", "sighting_of_ref": "indicator--9d2f858c-d61d-44c9-9ba0-a363fc0137f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df723d9-cc0a-4738-91ab-896f6585cc9c", "sighting_of_ref": "indicator--8bb12c56-b7ea-429c-a8b3-8eac44795312", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7806f75c-34a4-46fc-83be-1428b11cf20f", "sighting_of_ref": "indicator--abaf5406-3832-4889-9d3f-f185c223b031", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e004e3f2-dc01-4593-8c44-cc61635e081a", "sighting_of_ref": "indicator--d80a6ca9-4d20-41b6-b4a6-b2d475f1d054", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6a92e3-8fbb-48e7-a594-3fd977fc8e48", "sighting_of_ref": "indicator--8f3789de-8e94-495a-aef6-a8ee6489fe24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365a3acb-8751-4588-aa0f-092745bdaa59", "sighting_of_ref": "indicator--c9cf7a1d-cea1-477e-bed0-403680dc8598", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb20ab9-248a-42c5-a774-29098a3f3561", "sighting_of_ref": "indicator--22187781-64f3-48e3-a5c1-7b129513898e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218b44b-628e-4b49-a51c-26eee3611806", "sighting_of_ref": "indicator--cf71931d-1a3d-45fa-8d62-f1069eeb80ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e272e1a4-5098-4e96-a3e5-9b4d0c3f99a1", "sighting_of_ref": "indicator--ac11c8bb-2fd8-4086-9ee6-3b006495bf3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e9bbb-4a8f-442f-901f-26dd5442d2f9", "sighting_of_ref": "indicator--dbae8147-76c2-474e-8e37-db433a83261a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f92891-03ca-46a4-94a8-29432bbc5d77", "sighting_of_ref": "indicator--7d8c763b-2589-4550-a8c8-7bbb55e0c199", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd4ab51-7409-49e9-9b17-e77eceeede08", "sighting_of_ref": "indicator--a2cc88d3-fbeb-4a50-93e9-753daa98af27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6e083c-4f0c-4a89-8d9b-c26dd26fe066", "sighting_of_ref": "indicator--1421d3b4-b216-48da-b0e0-df4ce75c62ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f90cb7-a421-4d1e-a953-9bf8b35e2de8", "sighting_of_ref": "indicator--076e9ba2-53ab-4e40-8997-51106f1f75d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92116eb2-6e8a-44a7-94a3-86171d8a6448", "sighting_of_ref": "indicator--a3a55f62-bb4d-43e7-98fb-946392c7f96a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a10c91-d081-4650-8bbd-8f175de3985f", "sighting_of_ref": "indicator--32e1a894-4de8-407e-8ebf-b38bf4662651", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcdb2cb-3a96-49f0-9e3e-61f1fe856ab9", "sighting_of_ref": "indicator--e8fca5b2-273f-47d0-b6b9-f0df1914f875", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23938e78-0742-4965-9f28-1f9dbc89c712", "sighting_of_ref": "indicator--26b8408a-1a93-46d4-9d29-d5e1ef782680", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd1ab2b-2e72-493f-bbe9-b237994d06cd", "sighting_of_ref": "indicator--46655bb1-835a-435f-83fa-4ebfbab0f89a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f822195e-4a4f-4ed3-97b3-f2b89826ce4e", "sighting_of_ref": "indicator--40d29756-21d6-4d96-bf9a-efe52ab46d16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e83e9f7-793c-484d-9ae1-a7792bed615d", "sighting_of_ref": "indicator--cc4beb08-a131-4a59-b49c-8335da0ab23c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77c735f-591f-4b35-b190-f008e26427d8", "sighting_of_ref": "indicator--2e2b0aad-7986-4bf4-b4b4-9bebf72c34bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9cd386-5f61-4aeb-81b3-0f80d5ef93e5", "sighting_of_ref": "indicator--9e681347-73ea-4604-b751-f1ad5cbf2875", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be39c7ab-9b2f-4ec8-9c41-602d4cdd3f95", "sighting_of_ref": "indicator--bea57ec8-45d4-43ba-ae61-06a649b6e0e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2c59e0-aaba-4a4a-b6a2-84ad0ab95b8f", "sighting_of_ref": "indicator--60d47868-7523-40d8-8f2b-2978be882a57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa671eba-a1b5-4563-a61b-9c04355535f9", "sighting_of_ref": "indicator--34d532a6-ce36-4410-a07b-cfb5fa7a1b88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f59e7-2e57-4733-854d-dab09aca29a3", "sighting_of_ref": "indicator--8a8c1b2e-53c5-4115-b494-f28040a05a1e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf809d01-f570-4100-8aaf-7e9f2b6ceb20", "sighting_of_ref": "indicator--09f442ac-1a6a-48f8-982f-6616d0d4ef9f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd520926-9ad1-49b8-b24b-023f70443ab4", "sighting_of_ref": "indicator--ef0a95b7-42e5-4afe-9888-b7c135f82787", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b480014a-c377-4d8d-879d-412ecddfeaa0", "sighting_of_ref": "indicator--ef0a95b7-42e5-4afe-9888-b7c135f82787", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5b1303-2e75-48a3-b2bd-60468f73ba8a", "sighting_of_ref": "indicator--2aa20bcd-5d51-44c0-88dc-284d244ae522", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a1360f-22bc-4a3b-a903-31a55cd69540", "sighting_of_ref": "indicator--be37b0e7-d006-469b-a280-935054e61f85", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef131209-a375-4ff2-8210-ad9d97bdc67d", "sighting_of_ref": "indicator--676f2a4b-280b-4a43-8b90-ebfc56164027", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a488a8e4-2639-4f15-a9a3-81ff3cdd9880", "sighting_of_ref": "indicator--9d5fa80a-c2eb-4b33-b615-7b6f16b4f99f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df052f6-b14a-4b9e-8299-db35e44b6503", "sighting_of_ref": "indicator--edfc391a-eae2-4fa7-ac66-e613c9d5fa76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174679d3-a287-4086-b8ab-012be2a3b50f", "sighting_of_ref": "indicator--82b9909a-dee5-4013-82a1-ccb1fdebd21b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68bb9d2-2720-4a0d-962c-c72c5cba5e9c", "sighting_of_ref": "indicator--1b609500-a1e2-4b1d-9bec-d8f4a478a7f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66016178-6e83-4cb0-b93d-5199369a34dd", "sighting_of_ref": "indicator--1b609500-a1e2-4b1d-9bec-d8f4a478a7f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d89d3ec-6a6c-47a9-a22f-9b3d10eb2061", "sighting_of_ref": "indicator--9dfdfc3a-d4ee-4c73-b403-a3ef2d899c11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cfec13-3029-4f49-9fd4-83edbf8d1fce", "sighting_of_ref": "indicator--0a853c40-0930-4b55-92b7-46e3fd01f3f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a842ed45-f307-4552-bd95-b8a8672518d7", "sighting_of_ref": "indicator--584d81d2-7165-4f0b-8051-b8f4acd33470", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12da862e-77d0-4062-b91f-c443a605baa9", "sighting_of_ref": "indicator--68c60e42-c826-48c5-b429-5125904fd738", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bc2424-9170-4245-9643-631f31e9aa29", "sighting_of_ref": "indicator--fc495b7d-b394-4925-a283-0182d1f6d331", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccb9eb7-a7df-4953-836d-10fc95fd6777", "sighting_of_ref": "indicator--656c6d85-ecba-4060-8077-d40404e2d753", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc92274-c831-4f8b-af4f-d2110deff102", "sighting_of_ref": "indicator--89f3dafe-a923-437d-b455-e4933de3fa4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dc7c62-ee82-4658-9928-8dc705630435", "sighting_of_ref": "indicator--6c7e7ceb-9216-42ba-aecd-6c93d78b241f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411ca2a2-0350-4563-8928-bddeb61ca134", "sighting_of_ref": "indicator--7757014a-3d77-4f33-864f-fa4085c1245d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f07b79-e2eb-45c1-a024-8f1db65e524b", "sighting_of_ref": "indicator--2a0b83e2-c672-42a7-a503-3ffca0735aed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0888aa-72e4-42ff-80b4-230fa2cc33ad", "sighting_of_ref": "indicator--466aefa6-cbae-4d62-a302-03a108d96188", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8516eb6-33c1-46b0-8241-c10d6ba8915d", "sighting_of_ref": "indicator--b789e8cc-cb6a-4245-a679-b72b195fd16b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f00db8-2778-4d9c-ac0f-ce1e08e6ae61", "sighting_of_ref": "indicator--806199d1-fca1-46d5-837d-0da283f1bcd9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827092b6-3322-4d02-8789-e9d54567866b", "sighting_of_ref": "indicator--b66fd6c7-8da5-40e2-8ccf-5cb2533ee498", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cd4039-fc94-4089-a6bd-94574ff81900", "sighting_of_ref": "indicator--9adba267-96cf-482d-883b-713d76425847", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ad659e-8824-4046-aa82-50177715454b", "sighting_of_ref": "indicator--edd8b93a-2c1d-472c-aad0-5533e4911883", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fb2138-745c-42ce-83ab-7b181f35b34c", "sighting_of_ref": "indicator--83901acf-d464-4617-afcd-ad1ca8128a18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748f6e98-b74d-4536-8669-82aa4739aeee", "sighting_of_ref": "indicator--e5a43e53-dd5d-4ad7-99ab-d987890ed633", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e2beb8-8a79-40ea-b63a-0089563b3568", "sighting_of_ref": "indicator--e5a43e53-dd5d-4ad7-99ab-d987890ed633", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e2909a-86ab-43a4-87c1-b2877daab7ef", "sighting_of_ref": "indicator--1b6f8842-2722-4dda-a7b5-4bced0f29602", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f1dfa2-4db0-4185-921c-8c74d1cb21ad", "sighting_of_ref": "indicator--70fe1361-1cff-43b1-8fbe-8c4c1cf4c1ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91578bdc-7f5b-4a56-a8d0-7a136682326f", "sighting_of_ref": "indicator--70fe1361-1cff-43b1-8fbe-8c4c1cf4c1ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fec97f7-149d-49bd-ab0c-4c766e85848e", "sighting_of_ref": "indicator--d9df2598-e60e-4c6d-982f-11ab03d778a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91580b5c-2848-4bd8-a6e1-69cc5da3715d", "sighting_of_ref": "indicator--fd8327a8-583c-4348-a5de-ca7436e7cd85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f130f5-d221-4e97-a6c8-ca5ce2ba1deb", "sighting_of_ref": "indicator--bf49450b-f681-4c5b-8f9b-5386b6d49a51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc65fd12-d838-463d-a9c4-275b0bb2a17d", "sighting_of_ref": "indicator--c7147319-742c-4f47-9e80-f637c6bc1989", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bb2b1d-2a1d-4797-aaf7-69c4a23f054b", "sighting_of_ref": "indicator--e0582e21-6308-4ac5-8590-5429ceb3e255", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fabc284-fe86-40cd-acd5-7b1f4a1077e1", "sighting_of_ref": "indicator--79734622-76c6-4449-b37d-51accf0e491b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fd4a71-05d4-4bfa-ac0f-a710f6c17dd1", "sighting_of_ref": "indicator--369bd816-de81-4195-8e82-4ca4c81449bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5df9d7-d730-4cc2-a2c8-d5931d73dd4e", "sighting_of_ref": "indicator--96caf775-f937-49f0-b44e-86410c85807f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705aa400-2c15-4f15-838c-f43a03044e35", "sighting_of_ref": "indicator--e3524291-61cd-4e08-a636-ba7b8de6291b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713af4a1-3047-4722-96b7-2d2c8a3508b3", "sighting_of_ref": "indicator--e3524291-61cd-4e08-a636-ba7b8de6291b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafde188-5c29-405e-a646-9a7e7357707e", "sighting_of_ref": "indicator--0a823fb0-4555-47f7-802a-38b35f46b5a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67a0f91-16cb-4ffb-857b-163dc3505943", "sighting_of_ref": "indicator--fa454ccc-b28d-48e9-bef4-e905d81d32e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d028df07-f4d2-4a3d-946c-6d9de888bc59", "sighting_of_ref": "indicator--0c6ab6ed-8bf7-42cc-839e-5f621c39ca08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf585e36-644b-4d34-8b1d-f2f3d0a0c2ad", "sighting_of_ref": "indicator--da69f686-f336-4b54-b56c-aac28d28a479", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ceddc-7a7b-4e36-8d73-c0a1109a1b0a", "sighting_of_ref": "indicator--71fd2ddf-18b1-48dc-9a5e-228f029c1689", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579efbf5-e2ff-48bf-8a4d-0772082661c4", "sighting_of_ref": "indicator--b0c49f7d-d039-4c30-94fd-4fcb35be125a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a526b3-ad4c-430c-a809-bbb73e5e2bc5", "sighting_of_ref": "indicator--3c9ca6da-b659-4547-9fed-10c8e224d3a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac30223c-a7b1-480b-b5c1-df83ed5764c6", "sighting_of_ref": "indicator--9b0351f3-9d18-422b-ba59-b5dcf91388f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7257709-2ac8-482f-99d4-5c4c256d545d", "sighting_of_ref": "indicator--8ad1e276-1f13-4529-b8fd-5094f30d49a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74689034-67f7-435f-bd18-496bfc562fee", "sighting_of_ref": "indicator--69e47086-00f5-4780-bc67-8a8194e0be0c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b2108-5930-4740-9ac5-eb14388132f5", "sighting_of_ref": "indicator--dac7fe23-6974-4719-8c41-a5309154c386", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7726b45-0481-468d-b22c-7ce52ca79905", "sighting_of_ref": "indicator--5e21a06e-20a4-4814-a617-4bedd16c4176", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b3ed7-b4a2-4d00-a650-97902d7b0014", "sighting_of_ref": "indicator--530e83c2-df8c-4fe9-ba98-4d471bf6ce95", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba10017f-2a29-4f4c-b97a-41b9c8c86f97", "sighting_of_ref": "indicator--77b3e5a5-9c1b-4f5e-a451-480b08e45209", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e41a90-33af-4556-91b3-b121ce3dc923", "sighting_of_ref": "indicator--1dd4f493-b82f-48f6-831a-43d2bfc858c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f800b3b3-aff3-4dd7-a835-e559e01819f1", "sighting_of_ref": "indicator--579bede8-973d-44cc-9447-a8d6f2e66b15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c197e6-84d8-4b86-9f81-8de221360cdd", "sighting_of_ref": "indicator--8d030f46-492e-4f53-ad4a-dcddceec518b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b393c5f1-765f-47d7-b92f-d5ccb81829d0", "sighting_of_ref": "indicator--2bca9965-9bee-47be-bf0b-8ab3e924da8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dcdaa7-a04f-4799-8bd1-865e672ed13c", "sighting_of_ref": "indicator--669ad845-cd69-4981-be41-8deaa614aaf5", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c25ba13-eaf1-4691-9c51-1974efb3aed8", "sighting_of_ref": "indicator--f77216af-1422-4979-b57f-f8557d0ce28f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8ae31e-59a6-4077-b37b-479adf533a55", "sighting_of_ref": "indicator--992c269e-2794-4e93-8ea8-a4d9d349cf08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c743e3-040b-467b-8660-991e922d4827", "sighting_of_ref": "indicator--54a3c7cb-2495-4e60-8bf2-53f17b8d246a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40886346-4bea-492f-8a44-8bc3bcb5bef9", "sighting_of_ref": "indicator--54a3c7cb-2495-4e60-8bf2-53f17b8d246a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bc5cd4-d2ec-4231-bbe2-c1db92ae824e", "sighting_of_ref": "indicator--467d4ede-0957-4de0-a541-74156d3950e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3192f72-fa99-4f08-82e0-a6797b9be20a", "sighting_of_ref": "indicator--5fcdd8ad-d503-406d-a54f-7455e2b428e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5baf27-ba24-4e90-89a9-19e7d0180292", "sighting_of_ref": "indicator--5fcdd8ad-d503-406d-a54f-7455e2b428e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051a4e23-487f-4ff4-87a5-bb3efadc3240", "sighting_of_ref": "indicator--f31a1f53-2d64-41d1-92e5-9218ae56055c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c3d5be-7826-45b3-a8e0-79fa0289baf0", "sighting_of_ref": "indicator--834afc3b-4504-48af-9dc9-97e5524d6210", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd115483-47c4-499b-a59e-80ba3e0e0375", "sighting_of_ref": "indicator--7caea0a6-d581-4f68-82af-ad0685ddb377", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359ec2b0-9967-43d2-9c2e-0887cf16da90", "sighting_of_ref": "indicator--a1d36f54-7cc5-4c17-9046-09394ca247ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd2f308-b38d-4c64-a076-8cc501bc8e0f", "sighting_of_ref": "indicator--e15e2ecc-8b27-4d6a-8b11-3a33c0eecffd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bd6115-319f-4c7b-b50e-7940207e51e9", "sighting_of_ref": "indicator--a6830746-5de0-48bf-980a-2abe0e6e0578", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5966e00-90dc-4aab-9e22-722ea2ac2964", "sighting_of_ref": "indicator--3701174a-884c-46f3-a2eb-51a54d4f9cac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea9f89-06cc-4ba8-a2e6-957304aea400", "sighting_of_ref": "indicator--ffdea915-7176-4f3d-8b68-159ce1e7fe7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602da137-de68-4310-a2bf-414bf60b9449", "sighting_of_ref": "indicator--1eaf1202-3538-4a0d-a517-6deb10ca6ef9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2385e1-89e8-47d0-a086-79480a690483", "sighting_of_ref": "indicator--3f91ca85-60a3-4e2c-aa8b-666fb3f8a3ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3b4fd0-b4e7-4e24-a6f5-d08f87d84cd8", "sighting_of_ref": "indicator--d8933982-4fb3-48e0-902d-cc37a2c79f4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ff006d-f1c5-4afe-a0f6-facde8bdd4c0", "sighting_of_ref": "indicator--ddaed51f-783e-4a2f-9b4e-c9f4802d556a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b590b7-1742-44c5-ab09-77f364d4c651", "sighting_of_ref": "indicator--039ac549-e35f-489e-8725-9f9e0a76c95f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e214b2-b3db-44a0-92ba-ef990453accc", "sighting_of_ref": "indicator--c15ce3d6-9412-4145-a9e9-314c58d1b141", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f67922-abec-4a1d-9cba-4169ae3f06e8", "sighting_of_ref": "indicator--9e1b09e0-d91f-4e3f-82ed-da15bd0708af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0764352b-aa99-4c22-a5d2-39700c3244c9", "sighting_of_ref": "indicator--05eae179-feb4-425c-98d2-a63a94594511", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d23ccb4-b867-4b1e-85ef-abae3b9e336f", "sighting_of_ref": "indicator--1f55f758-ed61-4f6b-97f3-6faa5c554fe7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3a921a-5aac-43b9-881d-2213f125e68b", "sighting_of_ref": "indicator--7e61a779-e16c-4522-81c8-88e223f90028", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4c3156-7dab-4c97-8315-d948f1b3a513", "sighting_of_ref": "indicator--1982cc59-f335-4a88-96fd-9ca1f1ee455b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ad01f-b8ce-415a-bc96-c4529f07c6c9", "sighting_of_ref": "indicator--1982cc59-f335-4a88-96fd-9ca1f1ee455b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e89ca27-dc50-4eb5-a9ac-18cb699ff721", "sighting_of_ref": "indicator--ea348aaf-b2db-4c4a-b358-81fd1dc77c00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0476eb7-55ce-46b4-98c6-a484e91d8772", "sighting_of_ref": "indicator--498affa5-67fd-4eb4-9862-0cc8b15efee8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ece313-a51a-443b-bfbb-3a70989216fa", "sighting_of_ref": "indicator--987cd1fe-cd99-43f9-8ab0-185b9e9c32cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c9f618-b30c-4e2d-bdfd-16ff658ed3f2", "sighting_of_ref": "indicator--987cd1fe-cd99-43f9-8ab0-185b9e9c32cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082814f8-c670-4198-82e7-3634ad742e8d", "sighting_of_ref": "indicator--03f52ca7-fcda-47d7-ba40-9bc8990cd437", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ef9bcb-7205-4fef-8af3-e03f24f0695e", "sighting_of_ref": "indicator--03f52ca7-fcda-47d7-ba40-9bc8990cd437", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c2e416-f98b-4866-a2e4-72e3bd5e4e35", "sighting_of_ref": "indicator--c8540d91-d28f-42dd-a5cf-1056e84078b6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573f0405-f94c-423a-8ffa-58b70fdb0b9b", "sighting_of_ref": "indicator--5c25954f-c43b-4ea5-9513-a20a02c2507a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c967fa40-7a6c-48cc-ab06-64ba51d359cb", "sighting_of_ref": "indicator--c283fb34-4032-4185-a746-e2b3af20e090", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719c48d2-29ff-4a5b-89c3-b90be5725dcf", "sighting_of_ref": "indicator--497e2794-5acf-408b-ab6d-868ad81c46db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dd47d3-a96d-4fd7-97db-037a0d1abf60", "sighting_of_ref": "indicator--84524377-2d94-4761-a0d8-ab0797e534e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b988e8ab-5b7e-4f1a-a1a6-4486a704fcb5", "sighting_of_ref": "indicator--f19a2ec6-fd21-4bc8-9dfd-518a087b7363", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630bde9d-8537-42f9-9052-700f06898930", "sighting_of_ref": "indicator--f19a2ec6-fd21-4bc8-9dfd-518a087b7363", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb178ff-44e6-4350-9366-aa78a8265802", "sighting_of_ref": "indicator--4587f2ac-86b1-4877-b8e1-5ead8fc5a2e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7860d9c4-986f-4012-baa3-26e6deea831b", "sighting_of_ref": "indicator--4587f2ac-86b1-4877-b8e1-5ead8fc5a2e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d03ce8-64ef-4407-ba1f-03bbfc4fe009", "sighting_of_ref": "indicator--b032870a-e8fb-4259-8ae1-6044e610a581", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c65a55-e492-4047-b310-0db7dc1037de", "sighting_of_ref": "indicator--b032870a-e8fb-4259-8ae1-6044e610a581", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5fd442-a77d-485f-b832-cae824327fc5", "sighting_of_ref": "indicator--7929f141-169a-4839-b662-64e97cc2c6e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9869806b-c3cf-4d4a-9266-393f360a20e9", "sighting_of_ref": "indicator--7929f141-169a-4839-b662-64e97cc2c6e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06219ab7-3414-493b-920b-3ef7fac98875", "sighting_of_ref": "indicator--81b45275-36a1-40f0-950a-7f39329a11d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9718ab8-eddd-44e8-a807-591cdc8e36eb", "sighting_of_ref": "indicator--221c763c-45da-45a1-9fd9-c44a286c9e64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf4f50c-e911-4df8-a2b2-c1f7ba8438ee", "sighting_of_ref": "indicator--221c763c-45da-45a1-9fd9-c44a286c9e64", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d330760-883f-4b60-99bd-8e506d3a23c3", "sighting_of_ref": "indicator--d47cce08-7e03-4cea-acaa-c9e245426d08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791b403-8456-4534-b97b-d72c0501ffef", "sighting_of_ref": "indicator--0860b3dc-0e15-4998-aa71-3ede52a5db83", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae8491d-802b-41f0-a894-975505ffc4d3", "sighting_of_ref": "indicator--23c46e61-7592-4e1b-9edb-085269e8ffc2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f505f1-ce99-40e7-8b55-27cb139dbc12", "sighting_of_ref": "indicator--d3f3edf1-4e60-434a-b86e-d60acf557e6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dbdf24-7129-4c53-b712-a3e76f408f95", "sighting_of_ref": "indicator--0f43a400-c083-47d9-a5e9-613672b6a27c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9fbcce-73ad-4456-b2b0-501049fa5cd3", "sighting_of_ref": "indicator--971f778d-12ea-4d92-85c9-fab134357ebb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7e5f4a-ae5f-4b4b-aa0c-7861719cb9fa", "sighting_of_ref": "indicator--d3ef039e-04e9-44a6-b7f8-76d27c80684e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7fdcca-903f-419d-8cd8-7c70623bc7a6", "sighting_of_ref": "indicator--37987edd-a2ca-4079-8d93-da39f1ff1660", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c915f93c-dc0e-4482-a159-907f8c9f909b", "sighting_of_ref": "indicator--74c35af0-2fbb-4e65-9cf5-8b7621e0f4e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9598df-b8fd-4060-be7d-8e01080bac83", "sighting_of_ref": "indicator--c077014d-ce00-44d3-aa82-8e8e243e77b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1886f79-c64e-46b1-82d6-68573c786d24", "sighting_of_ref": "indicator--9ad4a885-f61e-49de-b519-1f688bc732c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fe3dbb-063a-44d6-a724-5a2ffabb4d05", "sighting_of_ref": "indicator--263826b6-d355-4f49-bfb7-144faead6c08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093aa238-d89e-455b-8acb-89f30a433149", "sighting_of_ref": "indicator--b9e6a5e1-4d77-4188-b8b2-4311546322ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef889b-75df-4631-b167-fda2745f6a85", "sighting_of_ref": "indicator--7ea0d443-1d92-412f-abfe-a05508f376e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f942e4-8465-4247-a6e1-cbfa53160aca", "sighting_of_ref": "indicator--7ea0d443-1d92-412f-abfe-a05508f376e2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e713d8-d89f-4b29-9b56-0800c1f41214", "sighting_of_ref": "indicator--0ce63bba-ef8d-44ff-ab1e-730c84c4c933", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03af323e-0e9b-4aee-a100-8c347df160bf", "sighting_of_ref": "indicator--e03301af-7761-4a82-b7a5-2655e2a39ed1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b22734-5389-4d33-9961-55f0000a0374", "sighting_of_ref": "indicator--ae41cfe5-1c22-47ce-bcfe-a1a8ab2c44aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a1c2f8-4fb2-427c-9e32-6a66f63fca5a", "sighting_of_ref": "indicator--ae41cfe5-1c22-47ce-bcfe-a1a8ab2c44aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b34337-f4f0-47a2-92d6-d60eff315e13", "sighting_of_ref": "indicator--2b1272ff-c0e6-445d-8070-edece7230e3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b5cadd-bc73-4ddc-91ad-66ea393ca7d3", "sighting_of_ref": "indicator--99408d8c-c5d6-4006-b4e2-3243045c7a94", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df63ab2-1c6d-459c-b9db-32c69bd332c6", "sighting_of_ref": "indicator--323520af-9d93-4889-937d-6686c209e9dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfff28d-b793-455a-8c34-6e3e7ba27e63", "sighting_of_ref": "indicator--323520af-9d93-4889-937d-6686c209e9dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d092454d-24c0-485c-ba17-8e410dd8f4d9", "sighting_of_ref": "indicator--0f04a57b-3de9-4b7e-bdbe-0f9634bcdd23", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa507e55-90f7-44ae-b037-cfc53f8df201", "sighting_of_ref": "indicator--0f04a57b-3de9-4b7e-bdbe-0f9634bcdd23", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d2e92d-f3df-4d09-a0a6-6beb4faaa7a5", "sighting_of_ref": "indicator--e6b39a41-fb0f-4056-8457-078e530fbccc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e012c80d-5496-4889-b4f6-3e391fc251dd", "sighting_of_ref": "indicator--4a1d9c68-783e-40c7-8ae4-69f6324628f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afc2a85-2099-45a3-aeb5-4cd1b5509fb9", "sighting_of_ref": "indicator--65af6850-cf5d-46f3-8b5c-f13fb5d89b76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53247e49-89cb-474e-a52f-815fe2f67a96", "sighting_of_ref": "indicator--65af6850-cf5d-46f3-8b5c-f13fb5d89b76", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd219e37-959a-4a69-9318-d391469107d3", "sighting_of_ref": "indicator--36ebb858-0e13-4e40-9cd9-747dcd614588", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee894e-4f84-4327-bb65-5d45305e2522", "sighting_of_ref": "indicator--36ebb858-0e13-4e40-9cd9-747dcd614588", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854b730b-df93-4202-be80-9e55a9d086ae", "sighting_of_ref": "indicator--5eb333c9-6459-4862-92b0-ef86d57e33b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5d417a-c27d-49dc-96da-e7a9b1dda231", "sighting_of_ref": "indicator--6a5ecc5c-a0da-4090-86ba-b56f21bc4671", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f99084-200e-4113-bae1-6190cefbebe6", "sighting_of_ref": "indicator--6a5ecc5c-a0da-4090-86ba-b56f21bc4671", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d896b4d4-9bc7-4a77-b0a4-7508a2dfb200", "sighting_of_ref": "indicator--b4e2181e-cce1-4e47-a198-1e5d9ed9248e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a845a-bafc-42d8-b703-87ebf28d9e0c", "sighting_of_ref": "indicator--b4e2181e-cce1-4e47-a198-1e5d9ed9248e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c5df9c-e42d-4d8f-910b-c309afd5aa79", "sighting_of_ref": "indicator--3ff225dd-0e74-4b9a-a363-2ae0966da5d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d4781f-d0fc-494c-b655-c5750ef7f887", "sighting_of_ref": "indicator--a6b79644-00b9-4123-a461-28d584c5e681", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933ec102-aa55-4339-aca9-b997abf4d756", "sighting_of_ref": "indicator--cd50b22d-e462-41e4-9b92-fb2d75f7bf1f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1269cd74-a7c9-413b-b8c6-18930f178e05", "sighting_of_ref": "indicator--cd50b22d-e462-41e4-9b92-fb2d75f7bf1f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022d21cb-2058-4bf8-87e3-bcf6dfd54c9f", "sighting_of_ref": "indicator--3be6e8ad-7f5a-4c43-96c2-5d00ddbd54c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa1937f-0e91-4582-8566-93986a04c356", "sighting_of_ref": "indicator--04c51c0c-e0a7-4db7-96d4-0960c5a045ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf24b3d-2b8a-45ed-8d88-7e94c86c443e", "sighting_of_ref": "indicator--04c51c0c-e0a7-4db7-96d4-0960c5a045ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8391fc62-9fd4-4a6c-abb5-7665bde0d7b3", "sighting_of_ref": "indicator--dd28482c-6dcf-40b5-8936-283fc19d5184", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180d941c-f679-46f5-b38f-d41011548349", "sighting_of_ref": "indicator--5233c051-a9a7-4c48-9f4a-18d5847dde20", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7fabae-223d-49e2-99ff-b0f81a541c16", "sighting_of_ref": "indicator--5233c051-a9a7-4c48-9f4a-18d5847dde20", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5afe42-9374-479a-baa9-c597e6065f6a", "sighting_of_ref": "indicator--846f36a5-2076-4957-91a5-824f96f60ddb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059c7305-715f-4b7b-a686-a5d4dc224409", "sighting_of_ref": "indicator--df6a8610-a2f6-41d6-bfa9-bae55abc7b7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3872d7-c3c7-4da5-924c-fd261cad388e", "sighting_of_ref": "indicator--df6a8610-a2f6-41d6-bfa9-bae55abc7b7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1a0ef5-1394-48e1-aa36-e1a065b6f2a7", "sighting_of_ref": "indicator--db1d01c6-9d9d-4a8a-8fc6-a6d8e0efb79c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc031858-0bf3-4c36-b93c-135c5ad3cfd3", "sighting_of_ref": "indicator--58f3ec25-5bff-4044-8def-00ab35c45e31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf92d54-2ca1-4df2-b2c9-c855767410fd", "sighting_of_ref": "indicator--b425c177-2048-4619-b4c3-4f6a5f3f054d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d724c53-b6cb-4c35-9770-ea9fb2847d43", "sighting_of_ref": "indicator--8407614c-123c-490b-b3b6-c329a8f07c2f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78769b8-e0e9-49b7-8550-3fba090cc032", "sighting_of_ref": "indicator--ea9ba870-5aea-4cb4-aecb-cb0d875b2fdf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774e0ac-a4ec-4a94-962c-69eae34236de", "sighting_of_ref": "indicator--c63aac18-2db3-48cb-a4ba-2cc0cefcc911", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15239f7-12ec-4d6a-bd23-530d3a48914f", "sighting_of_ref": "indicator--c63aac18-2db3-48cb-a4ba-2cc0cefcc911", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24a6638-a897-483b-a6ac-fac2234ccb20", "sighting_of_ref": "indicator--9f484710-3167-4a29-8b78-436107e54de0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2c2a5b-aaaa-4633-ad9c-28ffae1c9936", "sighting_of_ref": "indicator--9f484710-3167-4a29-8b78-436107e54de0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c410ae91-ccde-4f93-8c58-d4fc8c967be4", "sighting_of_ref": "indicator--1f3f578d-9baf-41ef-ab24-3bb7d1b6c018", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a472ba24-9bc0-40e4-9811-6c5e972aae60", "sighting_of_ref": "indicator--dc7d6d61-3f46-4b50-ba8b-687052f2653a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8a6c4c-edaa-44e1-b80d-a28b1c022eea", "sighting_of_ref": "indicator--06740963-08f9-48ce-aafd-47effac62379", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d5c970-05f2-4467-8311-a874f7b3d558", "sighting_of_ref": "indicator--cbcc60f0-9eec-466e-a980-4159ea73eb51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55069842-cb20-4ab2-9537-f1eb085e68fa", "sighting_of_ref": "indicator--67419c5a-e187-471f-96c2-68c295d7a344", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb1ead1-d8bd-412e-bf13-59f6e370c6a1", "sighting_of_ref": "indicator--3a7a724b-fb9d-4727-a127-714112753281", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde47090-d389-43b5-b112-ff4e9df48b67", "sighting_of_ref": "indicator--3a7a724b-fb9d-4727-a127-714112753281", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef02f52a-ea57-46e9-831e-089823acedd0", "sighting_of_ref": "indicator--4ca1e0d3-fa9f-4f1f-bedc-9e316224536d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ea12de-77e0-4edf-9064-6e501b00a4a0", "sighting_of_ref": "indicator--4ca1e0d3-fa9f-4f1f-bedc-9e316224536d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a45578c-ba27-47bf-bdee-7632151876ec", "sighting_of_ref": "indicator--20a4b644-c843-4ef1-9a66-43a8c59de687", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c9c95-ebcd-45a5-aa04-5242f640d622", "sighting_of_ref": "indicator--d1f05e3a-6886-4620-94c9-fd4cbf3abb5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab2082d-adc8-4029-9851-c5fcac289589", "sighting_of_ref": "indicator--d1f05e3a-6886-4620-94c9-fd4cbf3abb5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d917033-e0df-4b05-8a0c-f17129d01f11", "sighting_of_ref": "indicator--7afb0624-a712-45d9-9d61-fc02ff77b9cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a35a99-4b18-45ed-b2b5-ec2fc782c5fa", "sighting_of_ref": "indicator--7afb0624-a712-45d9-9d61-fc02ff77b9cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4f4472-5de7-4a8b-b2d5-bba8068613ae", "sighting_of_ref": "indicator--14ad3a55-0b7d-4872-8650-759c7c2922d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c7f488-e4e5-4f8b-984d-c3a79a5279ec", "sighting_of_ref": "indicator--46779da2-0127-4000-9a58-d217431fb8cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96cf991-b72c-4f0b-95d3-6bd8c250d9cb", "sighting_of_ref": "indicator--92bfd7e9-e67e-4e2e-a24a-7bd60fb3697d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b7dfb1-b3e1-4423-bd3b-2eeb22cb6a8d", "sighting_of_ref": "indicator--92bfd7e9-e67e-4e2e-a24a-7bd60fb3697d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c70e6e7-b5fd-4c99-92eb-7c2eed91e61d", "sighting_of_ref": "indicator--897e8a10-e566-45b8-9763-8f3e2c0a9178", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db4a01-c135-4ae9-a190-d39c0e953d66", "sighting_of_ref": "indicator--e761a3bc-3bb1-492c-8485-175419c224b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c8a2bf-43dd-43ae-bd05-492a9134aebc", "sighting_of_ref": "indicator--e761a3bc-3bb1-492c-8485-175419c224b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c540cd99-af87-46d4-adcc-c75e8545fd4e", "sighting_of_ref": "indicator--2542b7f7-f7dd-47c7-ae93-426d05aecd3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa780f24-054b-4c6b-9ed2-7cf15d8c8697", "sighting_of_ref": "indicator--82f3d166-9349-488f-a619-5cf494d62bb6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178e8c51-0b97-4fef-8f1b-74f3960afcbc", "sighting_of_ref": "indicator--9c484803-f7e2-43e3-92f0-335f2430c192", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086ac63a-255b-4dd4-ada8-e7be84212e92", "sighting_of_ref": "indicator--9c484803-f7e2-43e3-92f0-335f2430c192", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9a63b8-9f6b-49f8-93ae-410258d5545d", "sighting_of_ref": "indicator--cd61aae8-8abe-4609-968e-6c275ba9b028", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8586e53b-4eeb-4527-91f4-289daafce805", "sighting_of_ref": "indicator--cd61aae8-8abe-4609-968e-6c275ba9b028", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475c520f-5910-458a-b855-22ab5a9db484", "sighting_of_ref": "indicator--1f8bdbe3-9967-4e13-a113-f8e1ec6e1cda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7beab7-b7d5-4e8f-91c6-c7101844b182", "sighting_of_ref": "indicator--b289c78b-c54d-44f5-ab1a-611f8a00e9ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c9855e-e731-456f-b06a-fb9e45a51fa1", "sighting_of_ref": "indicator--55436763-028f-488c-817e-d631b51817c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01c86e9-383f-48dc-a6ae-88cb61d055bd", "sighting_of_ref": "indicator--fa588875-5985-4735-8933-d2f0728ca5cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401103ac-2c4f-4ae9-8fab-709bac8ca35e", "sighting_of_ref": "indicator--45c27480-a61a-4d8b-b5af-54dba48a5d1f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517d7849-6840-4ab7-81d3-e435d0a6d719", "sighting_of_ref": "indicator--cdee8b95-1a88-415a-affc-216a1608b590", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b56eed8-ca65-4f70-8750-0bf56d8027de", "sighting_of_ref": "indicator--0eab9ca5-77bb-4a9b-b632-52f2fbecb898", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be433c42-0eec-4c5c-8eb0-fcd86df2be86", "sighting_of_ref": "indicator--482bf53e-724f-43c3-9c2b-e78c50c6e2b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774686aa-f1f4-4963-9a38-7cbeafc9258b", "sighting_of_ref": "indicator--2cc3d3b1-6e22-44dd-8f74-3b6dd4cc5f5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83253f8b-0fbf-41d9-845e-e60402d83381", "sighting_of_ref": "indicator--0309beb1-6271-4a89-bd4d-f44a26ea6978", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754805c2-b4d3-4ed0-8dbe-01fff9ae9427", "sighting_of_ref": "indicator--227542a9-b302-447f-831c-f01af51b9646", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026d0a34-596d-4b99-af1f-206862979277", "sighting_of_ref": "indicator--f5f921b4-2bcf-4aac-9738-58f8bd0b6880", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc2d644-a2d4-47e6-ac68-e052f06faeb9", "sighting_of_ref": "indicator--b54b0fe4-0c59-42b9-b7cd-e060e7465b49", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478ca19-fd71-4bb1-986c-86d796ce3e2a", "sighting_of_ref": "indicator--b5b200fd-7f18-43f0-b0cb-cf889ab8aff3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6844cebc-9809-46c9-ad23-63249cf2746f", "sighting_of_ref": "indicator--b5b200fd-7f18-43f0-b0cb-cf889ab8aff3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5916b9e-97b0-4c00-969a-5abf67249eb5", "sighting_of_ref": "indicator--93af3068-8594-45b7-83b2-6649e4929dea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9219cb62-b95d-4914-982f-b7898ad3428f", "sighting_of_ref": "indicator--fe770dae-3224-40bf-9a4f-16b2546ebf8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417fc2f5-dd54-439f-bce8-705c58c8e890", "sighting_of_ref": "indicator--09ede80d-3e8f-4f69-8d2b-0d0036391d27", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b3bec4-e7be-44f2-94ab-3d68d72ee78d", "sighting_of_ref": "indicator--2413f0f9-dba1-47e1-a843-b646a5fa1947", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf46428-415a-4b21-be78-d8bf211347fc", "sighting_of_ref": "indicator--04f45263-25b8-453a-8ceb-00525832d17b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df0927e-8cb7-45a3-b7d9-fc274174170c", "sighting_of_ref": "indicator--3ff94223-8367-403d-9eed-0d9355592c38", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50830bfb-2e25-49fe-97c9-94e0935985b7", "sighting_of_ref": "indicator--cc3d1be1-755a-4527-a55c-b9f406389c5c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868802bf-871d-4c1e-8e0c-695bcccbea48", "sighting_of_ref": "indicator--cc3d1be1-755a-4527-a55c-b9f406389c5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd698d78-ce7a-4af9-abee-21c19b599281", "sighting_of_ref": "indicator--0bedfc65-f4a7-4f96-8bf7-14cb0516c41e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c982e-65ab-42e6-a0c8-2fc58957c78c", "sighting_of_ref": "indicator--a7a93335-7527-4c4b-88e2-b227d9d9b9ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300432ad-693f-4657-99a3-cc5295962da5", "sighting_of_ref": "indicator--b7b28893-26d5-4f16-9ee5-ba5879d6697d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea13ad1-6459-4132-98b0-6aeb4b3fbffc", "sighting_of_ref": "indicator--b7b28893-26d5-4f16-9ee5-ba5879d6697d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeecd4d2-16da-4475-a006-a1f04c0635c4", "sighting_of_ref": "indicator--10358b03-8e22-4ae5-9831-af5efa4cef4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f9bbd0-93aa-4020-a6cc-d0d9c0438d8b", "sighting_of_ref": "indicator--57e471c7-296a-4714-b3fc-0813e46b9140", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923fcebd-2939-4997-b6fa-300127e512c0", "sighting_of_ref": "indicator--57e471c7-296a-4714-b3fc-0813e46b9140", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4239651f-13b6-4e4e-b933-37de1d3389d5", "sighting_of_ref": "indicator--5e483cf5-a5ca-415e-b8dd-dab8388b870b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a3e9cc-774c-4727-aa33-bf6e302a4d17", "sighting_of_ref": "indicator--90e5199c-611a-4e93-8970-402a95347622", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45c6ef-185a-4bef-a83c-e3274041b74e", "sighting_of_ref": "indicator--f639ace0-cbdd-4743-a494-79d1b1594ef4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b603ff-aa8a-475f-8d54-e9eadfb055be", "sighting_of_ref": "indicator--f639ace0-cbdd-4743-a494-79d1b1594ef4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9b7e1a-2f55-4574-837c-8c592cfc2633", "sighting_of_ref": "indicator--363002b2-379a-4b90-b310-9c591373b324", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1359ffd5-cbf0-4ed8-9ef2-ca73e86a6adb", "sighting_of_ref": "indicator--72df808f-29e4-438c-879f-69fd32412a3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb945e9f-aafc-41bf-8549-91fcb5063db9", "sighting_of_ref": "indicator--eed33821-1e1f-414a-825f-41c7e3c09257", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f97b31-150d-4e2e-a235-bdcc331924b2", "sighting_of_ref": "indicator--44718dd7-4646-4b5c-9653-2b2ca4c8a7da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896ceb12-0266-4775-857c-8021a951beb9", "sighting_of_ref": "indicator--44718dd7-4646-4b5c-9653-2b2ca4c8a7da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1934d45-d14d-481a-8df0-2fbdb7fcaf17", "sighting_of_ref": "indicator--d5a2a532-b9cd-4730-a6f1-2784862c506b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf7bc74-529e-4007-8ede-5a9b5e22d0cb", "sighting_of_ref": "indicator--218fc4d9-9269-4265-ae22-9052e842450d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b481cc-1564-45ee-9ba8-6a84f149672f", "sighting_of_ref": "indicator--984c0ab7-9136-4691-bb90-6f074ebd8950", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb2ffd-e12a-4d6f-b893-97cf21dec2b7", "sighting_of_ref": "indicator--c9b4e86a-3e85-4ab4-86ad-8ab5d995a17b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a739b864-e210-413e-9cfe-58154f6a9751", "sighting_of_ref": "indicator--c9b4e86a-3e85-4ab4-86ad-8ab5d995a17b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f622ce57-b4f1-46f2-804d-1244c596bdcf", "sighting_of_ref": "indicator--87398485-f46b-4f4b-a455-70b8d70a4b98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb639432-e283-4d38-a441-8e4909a4574f", "sighting_of_ref": "indicator--b2e426cb-bb1e-417a-b12b-135966096580", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f319dc0-437a-4cb5-9cb5-9fc1cb812f44", "sighting_of_ref": "indicator--cb7801df-e1ee-4e40-8894-84198f4d5a0a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efbd21f-9cc1-4a2e-a0da-4d9bc09b0cc8", "sighting_of_ref": "indicator--cb7801df-e1ee-4e40-8894-84198f4d5a0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a69d18-8209-471d-9f45-50bad99ff243", "sighting_of_ref": "indicator--d74934fa-66c5-490b-81b9-ce47efeca5f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08b31a6-7fe6-443a-9502-c6dc5ddaabe2", "sighting_of_ref": "indicator--d74934fa-66c5-490b-81b9-ce47efeca5f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3023d262-d4f2-4edf-86d1-9fe6bc876ce9", "sighting_of_ref": "indicator--5b5a4de2-52fa-4e52-96cb-30a3eb0d396c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fff504-9565-4aa4-9ade-5fa36bccd71d", "sighting_of_ref": "indicator--5b5a4de2-52fa-4e52-96cb-30a3eb0d396c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa3838-85a4-4000-a7d4-6eaec7ee17be", "sighting_of_ref": "indicator--5b5a4de2-52fa-4e52-96cb-30a3eb0d396c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbf7aa0-9f0f-4d82-90b9-704f6a6771f0", "sighting_of_ref": "indicator--e325964d-d09a-4264-874c-5af992234835", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64936550-b42f-4b56-b8e0-8935b8148ac4", "sighting_of_ref": "indicator--e325964d-d09a-4264-874c-5af992234835", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4547da-f91e-4ec6-9acd-97ebd7b0fe20", "sighting_of_ref": "indicator--3e2e0973-ed97-4e4f-aba5-98cd287b8518", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76276db8-2a21-4e57-a373-d9056bcbfc6a", "sighting_of_ref": "indicator--43d40a61-90d1-4247-a79d-e4738bfd2aa2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ea9d8c-9aa5-482d-a596-1d1b9d4bc452", "sighting_of_ref": "indicator--226fb687-77ed-49c2-8fa3-e0c95e582121", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780ac6be-8b5e-4e81-a422-c81df2fdd395", "sighting_of_ref": "indicator--da438e94-43e1-4a9e-8cbb-824520cf8655", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d0e0d8-5d14-43e1-9b8a-ee2df969e818", "sighting_of_ref": "indicator--2fca09d4-4aa8-495c-b6c0-f1a978e18240", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7125ce-7fc2-4fc8-ab30-02c8b1f5131e", "sighting_of_ref": "indicator--2fca09d4-4aa8-495c-b6c0-f1a978e18240", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f288ab-85a8-4bf9-92bf-ec181d28ee7f", "sighting_of_ref": "indicator--326609b3-7cbf-41b4-a38c-97ec179e03fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ab0e8b-d38c-43b0-bdef-fc81c673ee8d", "sighting_of_ref": "indicator--326609b3-7cbf-41b4-a38c-97ec179e03fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160b7c53-ca52-4812-ab57-2f87c515e977", "sighting_of_ref": "indicator--ec60f5c2-2366-495b-a2e3-ea024616b1a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfd52d1-66aa-4a27-af8f-176a3c1c1154", "sighting_of_ref": "indicator--891b9984-9d18-45e3-a056-d425592e4db9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bd9650-25ee-4a98-bc8c-1f83a0efadad", "sighting_of_ref": "indicator--4e3d60b8-1550-4da3-a9e9-499facecc9b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b418b5c2-a0cb-4ea5-a163-b53c508f8564", "sighting_of_ref": "indicator--4e3d60b8-1550-4da3-a9e9-499facecc9b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d35d41-7e4a-4ba1-907b-bbfa879f48bd", "sighting_of_ref": "indicator--9e298275-dc7a-4752-8fa3-5f4a10b6d201", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d206372b-1c62-4231-8a91-a3c845cef4b8", "sighting_of_ref": "indicator--9e298275-dc7a-4752-8fa3-5f4a10b6d201", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d89cae-1f99-4c6c-a4b5-bb373747209d", "sighting_of_ref": "indicator--93017fdb-a643-4d7a-aa2f-d4f51c9702de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8198b194-d2b8-4b6c-8684-35a93d9780cd", "sighting_of_ref": "indicator--3e0db085-1e45-4412-99d3-f5ecfe4e30c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d90dc2-b7b4-4934-991f-b3ba1e658e09", "sighting_of_ref": "indicator--2e4ef9fc-1f6c-4ce7-8f15-62bf2626474a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c64e6e4-b951-4dd0-9034-3725f0fca6ba", "sighting_of_ref": "indicator--2e4ef9fc-1f6c-4ce7-8f15-62bf2626474a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706820ab-a486-461f-a9df-09cbb572d61a", "sighting_of_ref": "indicator--2edf78b7-dade-4887-b46d-d8a58b79963f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0893924f-71c1-44be-9b80-3b70805e2456", "sighting_of_ref": "indicator--7804cfbe-063c-4eef-b3e5-958cc4bc573a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b82f921-1285-403e-96c6-ad56d4be11b2", "sighting_of_ref": "indicator--e2c321e5-57fc-4409-a018-a246b31c363f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78600d64-fcff-49cf-a1f9-487b4966796d", "sighting_of_ref": "indicator--b5064336-23c3-4d2a-bb46-f51092244718", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4243b7f7-0cff-499c-b246-98178107f620", "sighting_of_ref": "indicator--b5064336-23c3-4d2a-bb46-f51092244718", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebe9406-b2ee-4981-b088-c8a73da25027", "sighting_of_ref": "indicator--5e77346c-4a12-49b3-b8f3-10f87b25def3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca646b6-4dfa-4039-afe2-f118e82ba69d", "sighting_of_ref": "indicator--5e77346c-4a12-49b3-b8f3-10f87b25def3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc6bd64-1c2a-4346-8378-226aad81fd26", "sighting_of_ref": "indicator--d8881402-902f-4d46-b43c-91bf055ffc39", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27487f86-7b36-42a4-bcb8-63a47d909102", "sighting_of_ref": "indicator--974dfc02-980d-4cd1-9079-9bbb21120d51", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2605b7-cdc8-49a3-87a6-6395e96db2e2", "sighting_of_ref": "indicator--974dfc02-980d-4cd1-9079-9bbb21120d51", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025635ef-afe3-4a47-ab79-1cdf598a94c0", "sighting_of_ref": "indicator--5d92fd1e-af7a-4479-a679-f3a623147c81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53e670b-1a29-4d43-971f-f178dd139752", "sighting_of_ref": "indicator--4ee39d46-62ea-457a-9072-8c92c29463a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542e7791-4560-4f82-b7c7-ceed522a0522", "sighting_of_ref": "indicator--4ee39d46-62ea-457a-9072-8c92c29463a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cf9c92-1cb9-436d-91c3-c13deba7c0cb", "sighting_of_ref": "indicator--fae611cc-fb44-48bf-b658-914b43fa7b3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe289e09-5814-4127-9e9c-195536fabc28", "sighting_of_ref": "indicator--fae611cc-fb44-48bf-b658-914b43fa7b3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c32bbb9-5f14-41e2-a019-116a1862d60c", "sighting_of_ref": "indicator--94f182c9-c8a9-4d73-aefe-b430a46aec56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadef1b8-6d68-4fbf-9203-a1a5d04742cd", "sighting_of_ref": "indicator--94f182c9-c8a9-4d73-aefe-b430a46aec56", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c03fe4-884f-41bf-80cb-396d3297021c", "sighting_of_ref": "indicator--7abed393-b7ed-4910-8dbd-720bc3d77880", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be74e88-35b4-4f17-ab8d-0d80a4c507b5", "sighting_of_ref": "indicator--cc281efd-6198-4415-a23a-fb6f1fbfeba7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1606b355-ea8b-48f3-b53f-6c89612ebab2", "sighting_of_ref": "indicator--e34f4e2a-d162-4dc7-99bf-291ad5d63f08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a4634d-4d32-45f5-bd5c-365b56533f5c", "sighting_of_ref": "indicator--b28f2fbd-379e-4dcb-8326-bfafe56d4191", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1112fd24-ef90-4a37-ba1c-85d972ce0d20", "sighting_of_ref": "indicator--ace005b4-50cc-43a8-b93a-847acad2213d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e788364e-749c-4a4a-b98d-dc87c684dc4c", "sighting_of_ref": "indicator--f22e3b5c-c5a6-4d46-9ef9-a569a49f6d95", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a5028b-d0a4-403c-859d-34a8bb2324eb", "sighting_of_ref": "indicator--76b2fc13-a12a-4e0a-bc15-45a4844b9964", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f495adaf-aa42-4525-910b-a23a7aa2b003", "sighting_of_ref": "indicator--76b2fc13-a12a-4e0a-bc15-45a4844b9964", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb497274-22a3-44ae-a2e3-612d55c792cd", "sighting_of_ref": "indicator--58170d29-007b-41f3-b54b-b5a587d74b88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba1eeea-79cc-4b68-8613-5cf3af539fe3", "sighting_of_ref": "indicator--c4164d6f-069f-4ad9-bb9f-21df88df2fc7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1398b89b-4f03-4f9e-b672-a51092327afc", "sighting_of_ref": "indicator--7526f4ce-7fa2-46a4-82c2-0d7173b0e75d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c6040-37a7-4b3f-8c6d-50cb6c14deab", "sighting_of_ref": "indicator--29b74c8a-0ab6-4390-a904-22c821d34646", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535c6f19-a875-49e2-817d-4a52f2c6d67d", "sighting_of_ref": "indicator--5bed0c3d-b16b-452d-9f95-3e56b6f2a977", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ba7098-7f5e-4e3d-8dc6-eb4f05aef06c", "sighting_of_ref": "indicator--5bed0c3d-b16b-452d-9f95-3e56b6f2a977", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a50f538-32b9-4ddb-b358-62deaa0a4a0d", "sighting_of_ref": "indicator--633c6b23-4424-49ca-9601-b6c79f531161", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8299186-67ab-40b4-9548-57dfb1db87bb", "sighting_of_ref": "indicator--3687ac5e-0851-4e7f-a307-54f06bc52a6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94d4cf1-344c-4cca-9772-535ec518f2d2", "sighting_of_ref": "indicator--f1249c95-758d-46e8-baa6-b60badfe9ee5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1047fb9-1984-4309-81f1-5af211b57aa7", "sighting_of_ref": "indicator--6a802f7d-ff86-4bef-b3a0-d8ca0a4007c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f093fe4e-d707-48a3-8f13-7f95c707b12e", "sighting_of_ref": "indicator--ed09f4f3-5213-49f5-9a02-d41a38c6fb36", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa32a5ee-12e7-4933-a2b7-935447de6376", "sighting_of_ref": "indicator--1fb5daa6-1a78-4bd0-a3e4-31c7f9409f60", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcd604e-4d09-4824-a428-3552b409cd20", "sighting_of_ref": "indicator--894bff87-30f1-4a86-91af-1f210255e2c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd90fae-949d-44cf-ac57-bb1235efb975", "sighting_of_ref": "indicator--2264d971-0dba-462f-bb0c-43c5532bd4cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9675a2-fe89-403c-a987-b2201531cc84", "sighting_of_ref": "indicator--16524fb6-1fa3-4ce9-b2e8-8dd14cb6dfbf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5691a0-9cac-48c5-8e3b-8a423c644541", "sighting_of_ref": "indicator--1ee0bbf4-1c7f-4fe2-99b3-8539ee1c932b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10192ff0-9cce-4a51-9236-97d22fda8a63", "sighting_of_ref": "indicator--3122a8c3-e4d4-4022-aa1c-8f61f9d599f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ca0695-5de1-4fa5-abea-c167ca339642", "sighting_of_ref": "indicator--3122a8c3-e4d4-4022-aa1c-8f61f9d599f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c36010-9482-4234-ace8-4511cb721ba2", "sighting_of_ref": "indicator--ced908dc-0cfa-43af-97cb-84e716243158", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc55c1-5ab0-4c7f-a5d3-05b52ad25152", "sighting_of_ref": "indicator--ced908dc-0cfa-43af-97cb-84e716243158", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbbc285-4bc6-4b0c-b585-ad47927641b9", "sighting_of_ref": "indicator--fc568560-3224-4438-8a14-9333e454f97c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12307dbf-9e11-43e2-882c-3feb55f37284", "sighting_of_ref": "indicator--5068f1c3-e6be-4ff5-98fc-ab759d751cc4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5f10b8-c27b-4dd8-a8c5-748d7cd35b19", "sighting_of_ref": "indicator--a1f44680-25a2-4e8f-b9af-e6f3e6147615", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965e6e5-71f5-49a2-b421-689e0e555d67", "sighting_of_ref": "indicator--eb17c318-949c-4df1-937e-4c4795252ed6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa33ebaf-a786-401b-ab88-2375b7d58276", "sighting_of_ref": "indicator--eee87c0f-25a5-4972-97f8-48c7afb9f987", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114e5ef-5f6a-401b-9f25-c280dbc6ee6a", "sighting_of_ref": "indicator--45c9ed19-f6a3-4ae1-b2c1-bf06a8c389f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fa1390-0fdc-45ee-9471-22a10ff042c0", "sighting_of_ref": "indicator--45c9ed19-f6a3-4ae1-b2c1-bf06a8c389f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57de4b1-f68f-463e-9d38-94ad769f518c", "sighting_of_ref": "indicator--4239ae0b-1d1f-4df2-abda-735e4810e529", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e25d24-b20a-459f-9070-b2ed21c246d8", "sighting_of_ref": "indicator--4239ae0b-1d1f-4df2-abda-735e4810e529", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc60bd5-a98f-46ab-8fdd-ba3e74c4ad00", "sighting_of_ref": "indicator--7a9f201b-45fb-4f82-8d3b-a4e628c9419d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0595b07f-a1e2-442c-b676-656840e96840", "sighting_of_ref": "indicator--8fc06448-2a11-45a8-a464-d72b8c54232d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb16db9e-23ab-4e03-b7ed-3f608e63e126", "sighting_of_ref": "indicator--8fc06448-2a11-45a8-a464-d72b8c54232d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66638a63-695e-42d8-985a-99543de2c1b8", "sighting_of_ref": "indicator--e41d7938-0ae1-412a-82e8-ddde80e6e539", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7610346e-6da7-46e1-9ae8-3f5dd8d93fb7", "sighting_of_ref": "indicator--e41d7938-0ae1-412a-82e8-ddde80e6e539", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f171ff-42b7-4eae-a4c8-575c0a6f01dd", "sighting_of_ref": "indicator--4a06f7b9-71bb-419e-8f7e-c473b78fc897", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf409f21-da11-4e00-8fda-ed5674cf5afd", "sighting_of_ref": "indicator--4a06f7b9-71bb-419e-8f7e-c473b78fc897", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7259aace-d7ac-45e8-a9cd-56b15a9b1464", "sighting_of_ref": "indicator--a5e8c8be-989d-4bf6-aa55-d1ab6ed6b56d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f2c9f-d9de-4d4e-be06-ef01a95bdd8b", "sighting_of_ref": "indicator--a5e8c8be-989d-4bf6-aa55-d1ab6ed6b56d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968ee4ea-e5ff-44c0-9ee3-ae62a1ab3a3d", "sighting_of_ref": "indicator--d3ac3a55-5435-4aa5-9747-b547cf725b82", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cea97ea-7e45-4b13-a56e-1a10e7218037", "sighting_of_ref": "indicator--d3ac3a55-5435-4aa5-9747-b547cf725b82", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0088b1b0-db18-4b35-a3c6-9e8981a78e1f", "sighting_of_ref": "indicator--8a19b106-2026-4912-acaf-813535789f85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599a71d3-9807-464f-bb7c-f5df9d0cd6b5", "sighting_of_ref": "indicator--8a19b106-2026-4912-acaf-813535789f85", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128223aa-a2d0-4ccb-877a-a81e59526830", "sighting_of_ref": "indicator--37d01031-5ba2-40fe-a739-43e45790c610", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb93e8e-4c20-45af-b96b-175a4de65b72", "sighting_of_ref": "indicator--37d01031-5ba2-40fe-a739-43e45790c610", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8ca25f-ff55-4033-bb4c-fecaad9f77d8", "sighting_of_ref": "indicator--7d0f0d07-32ef-445b-abe0-b605e242245e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1c5a25-5255-4b6e-a957-7d6b1176fdee", "sighting_of_ref": "indicator--771acf7b-ac98-4e93-ae62-0d48d02c5e59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd447f9-6777-44b1-97e4-e7a1d783a198", "sighting_of_ref": "indicator--6dad768f-5248-40d0-be36-bf2f5da2c19a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db599b9-1925-41bf-a82f-db73758c56f9", "sighting_of_ref": "indicator--6dad768f-5248-40d0-be36-bf2f5da2c19a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758f325b-a490-43b9-8535-3bad1b823692", "sighting_of_ref": "indicator--ff76fd00-0441-437b-a9b1-57224c82ade0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecaed44-8ec4-402c-b384-c05c9744dfe9", "sighting_of_ref": "indicator--ff76fd00-0441-437b-a9b1-57224c82ade0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bd23ef-4171-447d-84fb-1cfdf389dc56", "sighting_of_ref": "indicator--7c970956-e78e-4daf-b53d-88de6b6812d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2111c0a-87a8-410f-89bb-fa2254e3ca3b", "sighting_of_ref": "indicator--7c970956-e78e-4daf-b53d-88de6b6812d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d33342-e9e6-49e5-9a68-05a77a87c633", "sighting_of_ref": "indicator--1c1da24b-40ac-450c-82e5-9dcd69cfb2c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1445a6-2e54-4bb6-a2fd-0e2b5ec3bf19", "sighting_of_ref": "indicator--0580221b-4229-4a58-a72b-5cfb802631c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a58e246-8cec-4216-8b51-d88a6dde572d", "sighting_of_ref": "indicator--b57950f9-e7bd-4ac4-a2d1-2e427edc9b5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea15dd15-35e8-4442-8a53-df3a805e6f38", "sighting_of_ref": "indicator--58a868fe-780c-4087-ae98-37b2de2ee15d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21537573-9663-4907-bb92-a0bbbda4aac0", "sighting_of_ref": "indicator--58a868fe-780c-4087-ae98-37b2de2ee15d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4590891-bce3-45ee-b376-f2652637d605", "sighting_of_ref": "indicator--424ebd0a-67f8-4d3d-8361-5db1e2be373e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bb80f8-0af3-4d9a-8bd9-1d5a8ef9635d", "sighting_of_ref": "indicator--1e0a7617-6b1d-4498-92f3-4782060a884a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a861afc-92b2-4c24-89be-5fc42825e96e", "sighting_of_ref": "indicator--59aa1330-98ae-447a-b390-c9ec822f2b1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1be09f-97a6-429e-8487-d18fa893fec8", "sighting_of_ref": "indicator--be5822e4-19d7-4a3d-8e65-420e4abcd1c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008ec57c-0a6d-4242-bb19-d7e345638e4c", "sighting_of_ref": "indicator--be5822e4-19d7-4a3d-8e65-420e4abcd1c0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406e9f10-a261-4b7d-a2b1-5a45a65cead1", "sighting_of_ref": "indicator--46690233-c2ef-437b-99f3-ef4d90320e35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ef8fd2-4206-42e7-8cc3-307f0dd3413d", "sighting_of_ref": "indicator--d58fa353-31d4-4178-93d8-f15b6117dfbf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d149f3ef-d430-45a3-b0eb-8f964a6d727c", "sighting_of_ref": "indicator--781e17a5-da44-41e1-8fa7-97658ce4de07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5200b1-47cb-4a55-bb60-b749e34376ee", "sighting_of_ref": "indicator--916b7046-021c-46f4-8e10-97689b084943", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eaa863-66fa-4f9c-81a2-4d3fcd45bcdd", "sighting_of_ref": "indicator--2f6232ee-e8a9-40b7-8e0b-0fe6aa641952", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137089c5-967b-41f0-84e0-ff8583f63da4", "sighting_of_ref": "indicator--471b7f99-0294-4854-93dd-49837b820c8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fcfb02-f3cf-48bb-a875-a258b21e33da", "sighting_of_ref": "indicator--7079928c-d32a-4526-95ac-911cc39695c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dcfb38-4adc-4bad-8dee-ee7347b68ea0", "sighting_of_ref": "indicator--18f357fe-1e76-4811-810e-237c3d1146bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d711eee-a8ca-47af-8046-0e38ca1dab23", "sighting_of_ref": "indicator--1aecafc6-72c8-4b68-9d4c-1ff2bf8fe6b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc4ca55-7a41-405f-ad6a-aa076a035eff", "sighting_of_ref": "indicator--ccc1c8e4-3d50-4a4c-bd61-fd6f091f5ee9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02587f03-98fa-4f10-82a8-76b86f2555d8", "sighting_of_ref": "indicator--ccc1c8e4-3d50-4a4c-bd61-fd6f091f5ee9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afcb034-bb0d-4c0c-94c1-e056698f9614", "sighting_of_ref": "indicator--bdc7da6a-ca51-4fd5-ad0d-bc4fa2e8e3a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea258d0-307b-45bf-9f52-aeac9c6e802a", "sighting_of_ref": "indicator--bdc7da6a-ca51-4fd5-ad0d-bc4fa2e8e3a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72245382-a2d9-407d-a356-739979b3af13", "sighting_of_ref": "indicator--6d3742bc-4e40-4329-a5fd-5590511722c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7e2b5a-836f-44f5-8559-792fdc25d040", "sighting_of_ref": "indicator--17ff3711-59d3-41c9-88a6-ae184e156305", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f6977d-3ce7-40aa-8231-9114f7f0c1ac", "sighting_of_ref": "indicator--083c4fff-61fd-4a81-950a-3e256b402767", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94626f99-4740-4627-b31a-26e8ee068aa3", "sighting_of_ref": "indicator--ba46c44d-e7d4-4313-b37b-c7b33cb8f929", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fa8a04-27b7-4cdb-b828-5d8d853d0822", "sighting_of_ref": "indicator--b2431c33-546b-4a96-b9e9-89a4dc848d55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8347ebad-2dd5-4add-b2a8-c709bd352b2c", "sighting_of_ref": "indicator--b798edd2-034a-4370-8738-780bc514163c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d032da-e5b8-4e40-9a62-e0ec3c4dc883", "sighting_of_ref": "indicator--9a9e1e80-b3bb-4a4f-b0ad-f714e0475ee2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa670cb-06d7-4ab6-b5b1-491c3b724d17", "sighting_of_ref": "indicator--40830cb7-22a7-4463-b0ab-c89261dfb797", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8247eb7a-b78a-4014-9bae-afea55ec93d0", "sighting_of_ref": "indicator--3807a00a-4b59-443c-93da-0f38f565dd2a", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de00f536-3d46-4174-ba00-ece67ee9d689", "sighting_of_ref": "indicator--3807a00a-4b59-443c-93da-0f38f565dd2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9f2a58-3191-4766-b6d5-7773ec65f059", "sighting_of_ref": "indicator--d0b1a490-10d6-4269-8895-edfa65ca00f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a18b28-a2b1-4b56-92f0-ed09e7f317f5", "sighting_of_ref": "indicator--d0b1a490-10d6-4269-8895-edfa65ca00f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4d4a13-2f5d-4f36-8ac5-88183c22e176", "sighting_of_ref": "indicator--85d6eec6-6711-45be-ac6a-31068a04eb6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce54fdf-ebfc-4a15-b8a7-030ef021e611", "sighting_of_ref": "indicator--4dcac69e-6597-499f-a1b6-e2371db34df9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fedbb3c-3571-4faa-9434-ba30b4732b52", "sighting_of_ref": "indicator--e8f99e36-3e87-4a16-954e-1df849a6db8c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f607575-1f80-4899-b645-03016526e5c3", "sighting_of_ref": "indicator--e8f99e36-3e87-4a16-954e-1df849a6db8c", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2383f46d-7710-4b63-801f-9e93f8c746c7", "sighting_of_ref": "indicator--72448db3-98cf-45cc-9796-42fbaa9549df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04539c26-f006-4bc7-adad-5e3f6a37dfde", "sighting_of_ref": "indicator--72448db3-98cf-45cc-9796-42fbaa9549df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a133085-936d-4bd3-ba05-71c86a93d409", "sighting_of_ref": "indicator--fe580061-5627-4b93-85b4-b576f5f2b298", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3296dea7-6231-4f68-bb4b-7debda7052ef", "sighting_of_ref": "indicator--7b617169-09f0-40d3-897d-468329fa7223", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ec16cf-7e80-48c9-9e4d-3fa40be8c58d", "sighting_of_ref": "indicator--7b028cd3-eeb4-434d-a906-bcb75f1c54c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57117f3-d925-4eae-b7a4-34df9147cdfb", "sighting_of_ref": "indicator--61ab3924-ee69-40ad-843c-f1406b5a2fe2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471eee29-fb37-462b-9c19-03e364851b6f", "sighting_of_ref": "indicator--62ebbad1-869d-4866-950d-0017f680c529", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1343d4-0ed3-4ae5-b1b2-c551b381f0c8", "sighting_of_ref": "indicator--7a24dd4f-3a2e-437b-8a05-b95940a824f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cbb9f3-71d5-42d4-8267-437b408bbf9c", "sighting_of_ref": "indicator--7a24dd4f-3a2e-437b-8a05-b95940a824f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f444ac-d650-42df-9aed-43e160ff21e5", "sighting_of_ref": "indicator--74305885-35ba-45c9-8595-3146ff59cb14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a8b064-1096-4e9b-a0d4-64b3353228ae", "sighting_of_ref": "indicator--0be8e011-75e7-4b2b-b2ba-d632cd8bbc1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ef552d-2cbd-4bb2-80e6-12d188522f58", "sighting_of_ref": "indicator--51b8e1d7-c440-44c2-ba28-77c8d548e461", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07007250-16b3-4c86-9165-343287cb1529", "sighting_of_ref": "indicator--51b8e1d7-c440-44c2-ba28-77c8d548e461", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597e29a8-0b54-4125-98cd-2eb5504c218d", "sighting_of_ref": "indicator--b34ddf49-4bfd-435a-aca3-994d9a7e1053", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b205fd-a76a-4e87-a6d3-fe5575bc12a2", "sighting_of_ref": "indicator--9e59644e-3a39-4d2a-a267-5b1c83c10ffd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c9a160-d490-4932-a10f-fdeaebe7ec54", "sighting_of_ref": "indicator--62e28507-5f53-4e4a-9d58-5bea8a687919", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2864c2ee-df3a-4fb2-a8ad-f64b7a3905cb", "sighting_of_ref": "indicator--9aef9d85-ad00-4065-b85d-d4a474dc363a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f548db-2e47-46fd-9068-37ccd7be96c5", "sighting_of_ref": "indicator--6f2af59a-5cee-4e91-9fd8-6b060af7f4ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9c3052-8623-4872-bf87-e720d20f9ae3", "sighting_of_ref": "indicator--9dc573e1-6519-43ea-975d-d7e42d238dbf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1685d8-8837-4e90-9df2-90d50e6a568d", "sighting_of_ref": "indicator--9dc573e1-6519-43ea-975d-d7e42d238dbf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21947db2-806e-4a97-bd6d-2b61716d94fa", "sighting_of_ref": "indicator--3b727c6b-0592-46fa-b77c-e0987875bda3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b86904-6cdd-4081-a16a-4628c63c266b", "sighting_of_ref": "indicator--3b727c6b-0592-46fa-b77c-e0987875bda3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7bc12b-4b2d-48f7-8f7c-f3938122dfb9", "sighting_of_ref": "indicator--d8b9e266-24dd-400a-b57c-59b3f838e5fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0063be8f-c53a-4dd9-bb84-ebf4a7db6469", "sighting_of_ref": "indicator--90d2599f-c51d-4fe3-83e6-adf21111c79b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bfe92c-d553-4b35-889f-213767519b91", "sighting_of_ref": "indicator--4273fd36-70da-4915-834f-098425c33c93", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506b5636-6b96-43a2-b033-a29e937b395e", "sighting_of_ref": "indicator--b1dd581e-e096-4512-a5a7-ed6a78595f16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7788041d-518c-48a5-9012-905b954ff08d", "sighting_of_ref": "indicator--b1dd581e-e096-4512-a5a7-ed6a78595f16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b080a21a-5f3a-4fa9-829b-48c282912237", "sighting_of_ref": "indicator--f8a6ca06-bcf7-48be-8a52-01c5351e67dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba5a340-94a6-4b29-bcd8-7debedf8279d", "sighting_of_ref": "indicator--f8a6ca06-bcf7-48be-8a52-01c5351e67dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cba0871-97f1-4493-ad01-a3cf16f9a1fb", "sighting_of_ref": "indicator--6b98c1db-9671-4f18-a1aa-0b41395a1847", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe957eb2-ae13-42ce-a2b5-d5a98c82c780", "sighting_of_ref": "indicator--6b98c1db-9671-4f18-a1aa-0b41395a1847", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fd038b-5ec1-4c35-a8ed-c7c680be6888", "sighting_of_ref": "indicator--0db309b0-4d14-4279-89a4-a92458cf2253", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d23d5-39ad-4bc6-a39d-d8aca4322b4d", "sighting_of_ref": "indicator--eef8bbdd-f9f0-4806-b598-be822f3f58da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ba1a8-4e86-4ac3-84c0-7549e2161b75", "sighting_of_ref": "indicator--24dc502a-b4fa-4763-ad2d-4811a7203a14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbee77d-c3a3-4e30-9285-d9fc0cfbbbbc", "sighting_of_ref": "indicator--5ed9ad80-eca4-4cc1-9aeb-0b07a5ef7fdc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae2f255-4179-4da3-8b65-c0d00f4b25c5", "sighting_of_ref": "indicator--963e6986-c4fe-4a09-84e0-7d4e0e477ccc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795b68d4-f20a-4b83-b3ad-65148a4e35d5", "sighting_of_ref": "indicator--963e6986-c4fe-4a09-84e0-7d4e0e477ccc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05ef2be-ecd8-4b24-b2de-c389a8eacc33", "sighting_of_ref": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba1e01a-cd21-414a-9b48-2288a2ade601", "sighting_of_ref": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e9748a-4774-4f77-9b18-2b6043cc6b41", "sighting_of_ref": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2b3bad-1506-42be-ad6d-42722148db25", "sighting_of_ref": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e1fbc3-9e98-47aa-858e-e174d964fd30", "sighting_of_ref": "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc50cf8-1f93-4c33-9baa-641b93915cb3", "sighting_of_ref": "indicator--3d7094cc-8fe7-4baa-a93b-1f23e1bb5202", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a810f7-f264-47de-872d-f146e1ece463", "sighting_of_ref": "indicator--3d7094cc-8fe7-4baa-a93b-1f23e1bb5202", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d506510-177e-477c-8e91-d0c4e9df7249", "sighting_of_ref": "indicator--dda4aa41-3fe6-420d-afd8-f902a1740934", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073bad04-fa63-4b7a-b565-81d447015b04", "sighting_of_ref": "indicator--dda4aa41-3fe6-420d-afd8-f902a1740934", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc412ffe-8f3c-4ee3-bc60-9a290a61c2ec", "sighting_of_ref": "indicator--d074cc6f-0a76-4945-9a49-6bd66e853fa9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e1b480-efd6-4042-ae78-9c2b358fd31a", "sighting_of_ref": "indicator--86792cdd-0e13-4cc5-87fc-0922d515de70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f548bdf-4109-4808-b6c7-72d9bcdc84d2", "sighting_of_ref": "indicator--e6bf1f17-5177-483a-a6d2-554a72d3a7cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adcd1b8-cd7d-4276-a299-ba86dbae1e69", "sighting_of_ref": "indicator--146e423e-3544-4112-8263-08579575ec77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0cb03e-1d51-488b-85b4-30c025c73a7f", "sighting_of_ref": "indicator--1fa3be11-7bda-47a4-bc7a-4db838aa4eb4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438d871c-f158-4086-94cb-a6b122e63121", "sighting_of_ref": "indicator--73d9132b-e6d3-4f7f-bc9f-f7ce0b661a29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9497d7-a8ee-40cb-ba8d-f16579753d74", "sighting_of_ref": "indicator--8061f57a-a330-4aee-b6c4-8a9245d77798", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e0fd5-73e0-4127-83f7-a95dc461f350", "sighting_of_ref": "indicator--ac5d33f4-1ff0-40b8-b70f-094d18360ec8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fcfd9e-c8d6-4e75-b79c-4cccb81bb8a6", "sighting_of_ref": "indicator--ac5d33f4-1ff0-40b8-b70f-094d18360ec8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3a3dc0-8d26-416f-90c7-8506baa0f870", "sighting_of_ref": "indicator--f8a26f70-66d0-475d-8d5f-8e14a94b47c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11a8d5f-71f6-43e3-b5bf-3cbb5ee711a3", "sighting_of_ref": "indicator--ecec8be2-7c06-416c-a96b-a6f52648f6de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda95990-c3a3-4e50-8ffd-548280002a95", "sighting_of_ref": "indicator--cea76065-2f45-4afe-8639-874bd75ef0d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506b523d-f3cf-4caf-9a53-990052485eba", "sighting_of_ref": "indicator--3b3f49f0-ee20-4d98-833a-ebda977b253c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ea69d6-7d63-4213-ad0e-53180024e1ce", "sighting_of_ref": "indicator--79a1d0e2-4497-4a41-a2e3-a1c8457599d2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc05948-19b1-47df-8b76-572f64cfd9cb", "sighting_of_ref": "indicator--79a1d0e2-4497-4a41-a2e3-a1c8457599d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0037c057-09f6-4836-ba2d-9db63501b6b6", "sighting_of_ref": "indicator--68310d66-cd90-4ade-a047-fc38868411e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b208c672-252a-43ce-b03f-1459d54a5bf7", "sighting_of_ref": "indicator--687dd355-4bd0-41ef-abf0-664ca50a3a38", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29815cd-7bdf-4d06-84e8-968d8bf1adb9", "sighting_of_ref": "indicator--946c9aed-1661-4009-b1cd-fef9b1e40d41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab9c468-7c89-43fe-97ee-8dee109b9828", "sighting_of_ref": "indicator--946c9aed-1661-4009-b1cd-fef9b1e40d41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0821aa-d809-4ac1-a5bb-5aca8d5f24c9", "sighting_of_ref": "indicator--23315b91-e21a-4a5b-a553-41a4c315b4ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d25fde-adb3-4ae2-b250-a7ea941d4f7d", "sighting_of_ref": "indicator--93a91fff-4bbf-4538-82a8-bc9359a20e22", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c23254a-eb50-4396-bb52-7bc8047a5766", "sighting_of_ref": "indicator--a86c6eae-f0a3-4d80-a087-62cb60b27ef9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951119c5-f0b6-4c45-91ad-82ab57d4f595", "sighting_of_ref": "indicator--6bc52b89-b66c-47af-a5d6-dfab8a0708c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654802c1-ea4b-4018-87bb-a6e479ef029a", "sighting_of_ref": "indicator--51f1e423-37fe-400f-b73f-b7623e882c98", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe7960-3040-4b3d-870b-7cfc831ed49f", "sighting_of_ref": "indicator--8c782b04-5a26-4bff-b791-a9ba3a3276f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cedcb95-a175-4d09-9649-09a245870b58", "sighting_of_ref": "indicator--dfbed7b0-8eb4-4ff7-8aa0-dc55e08a4fa8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c05808-c5fc-4803-a42d-fdf13d6dfee1", "sighting_of_ref": "indicator--b2139a33-c59b-4cab-be9e-eadd56308865", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27def9b-3613-445e-9964-04eeffa4b766", "sighting_of_ref": "indicator--82bf8255-cd81-4aa7-a643-b080d336862a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12210608-3f52-4cdf-a596-ecaed90b6440", "sighting_of_ref": "indicator--116eb1ad-6fca-4aba-b720-de4f740afc8c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995664fe-da99-4235-a1db-e7778d2c6a71", "sighting_of_ref": "indicator--bc07a1f3-ecb8-4a3b-85dc-3dcfdaf803ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93063e2-5e2e-4071-a6b1-4a0a85bff89a", "sighting_of_ref": "indicator--2d1c6039-b176-45e3-8299-2ededed5c1c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed382f28-3b73-4cd0-924b-c98e2e53a631", "sighting_of_ref": "indicator--151523ac-8f70-43a9-abe8-247e3060db1f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79d5dc0-5f04-4eb6-a172-fbb239fd4a2a", "sighting_of_ref": "indicator--b2db617b-c553-4af3-98a7-7dcc73bdde33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce763003-0aca-4654-a8e1-b7a93021b4f4", "sighting_of_ref": "indicator--b2db617b-c553-4af3-98a7-7dcc73bdde33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64bdb0d-2655-4261-a73b-4a7c57204d35", "sighting_of_ref": "indicator--d909a9ff-9cd9-474e-85d8-9619605a279c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8d286b-cd1a-4e0a-b661-692be4693627", "sighting_of_ref": "indicator--59746f9b-adda-4b7d-b6e4-c282f3ce9a7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af275ffe-202d-4d99-9513-804f6769b5d2", "sighting_of_ref": "indicator--1a878207-275e-48d7-b404-b8aeef3fca9e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea59aef-6f40-455e-b701-7c0d87627a5d", "sighting_of_ref": "indicator--ff7079c9-d47e-4276-9ada-4eaf14245ea4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd917965-dd35-4dcb-95e1-9f3e61289cc1", "sighting_of_ref": "indicator--d96ecc36-5592-4046-bf9e-d268c7155163", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652c5a4e-792c-43c3-8f78-daa39905f8c2", "sighting_of_ref": "indicator--36ca4e57-7580-4b78-8649-68f46fa75c58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d7969a-e2fd-4739-a25d-da7cc85eae39", "sighting_of_ref": "indicator--5bac62ac-e7a6-4861-9eca-a37a0b1d8dc8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565958e5-0bf9-48a3-8e04-c076ff9d15fd", "sighting_of_ref": "indicator--1cd3fefd-f0ee-4273-8972-af1b659c699c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dc830e-bc4d-4a8c-ab4a-9a830145e794", "sighting_of_ref": "indicator--74701794-8c1f-40b4-9d86-dcbaf193f0d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a379911-9499-4461-9b98-3262aa3a5f94", "sighting_of_ref": "indicator--3c777c53-2050-4045-b286-8c238a30da18", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc5b68d-608e-42e1-9bdc-a4399d066b63", "sighting_of_ref": "indicator--d3a312c4-9632-4733-9d2a-85d01a37f428", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6152f8-ba2e-4feb-a55b-62dc5b49cd80", "sighting_of_ref": "indicator--d3a312c4-9632-4733-9d2a-85d01a37f428", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9351cf7-e803-4503-97c4-9c9e3cd6bb1a", "sighting_of_ref": "indicator--6647755f-15a9-4127-8156-12392d030c07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f92771-a652-4d81-bb79-007910027b0d", "sighting_of_ref": "indicator--6647755f-15a9-4127-8156-12392d030c07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d198e4-8e60-4160-8709-bf859a857849", "sighting_of_ref": "indicator--300fb296-ad30-4205-a7ee-02cc28318af0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589be360-896d-4c3f-b707-ada40b04f560", "sighting_of_ref": "indicator--f54bc742-a695-42d1-a9ea-a08c289d2e97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd613bdc-a113-4558-b349-1e5e67d000ff", "sighting_of_ref": "indicator--f54bc742-a695-42d1-a9ea-a08c289d2e97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e0dfec-197b-4a0e-b336-bc33596152dd", "sighting_of_ref": "indicator--c2834d91-5806-455a-849a-19f8b9d93500", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d428883-a796-4021-a75c-c57e7863b73f", "sighting_of_ref": "indicator--c2834d91-5806-455a-849a-19f8b9d93500", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ab5080-2b76-4a38-84ff-09036d014c96", "sighting_of_ref": "indicator--21c0cf44-e346-4d41-8172-3e061f4e2471", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba87a99e-fbaf-457a-89c1-14cb5b228c47", "sighting_of_ref": "indicator--571ddc5a-6ba1-4e8a-87ad-8ba7de4df287", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ab5b22-bb23-41d9-9d2d-146d91a991eb", "sighting_of_ref": "indicator--e639c2d1-e356-44d8-8220-e1f09eba2000", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc4119e-0e03-4b98-b47f-082709677de6", "sighting_of_ref": "indicator--e639c2d1-e356-44d8-8220-e1f09eba2000", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbd05a4-21fd-41e1-81e1-d7b27fb972a2", "sighting_of_ref": "indicator--2f30150a-0d94-42f5-8334-743f0969648e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4b44f5-8846-4150-b865-533661357152", "sighting_of_ref": "indicator--2f30150a-0d94-42f5-8334-743f0969648e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191b91ef-47d9-460d-8134-29a978970b66", "sighting_of_ref": "indicator--697fae0b-cc82-4e5c-8f7f-03fdaf97c01e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc98696e-5ddc-4f72-b1b8-3d8590699883", "sighting_of_ref": "indicator--cd452828-cbd6-4f8e-be85-0b4469666f70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34876cec-9856-4267-b195-40dc08302cb1", "sighting_of_ref": "indicator--4023a803-c5a9-4aba-a961-542f10619d6c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cceb9b-73ba-4246-9d46-6b82fb252b66", "sighting_of_ref": "indicator--5da03762-a475-4217-95c6-d2e47c6c3777", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24463fb0-e238-4874-8af3-f1f3901350e6", "sighting_of_ref": "indicator--af62598e-4002-4fb4-a907-a9c6474e02e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e578467f-8857-4535-aae6-8b15ae18e0ce", "sighting_of_ref": "indicator--af62598e-4002-4fb4-a907-a9c6474e02e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b14a2fa-6fb5-44ba-be41-43b18ab6d700", "sighting_of_ref": "indicator--b3716e36-29ff-46c1-9882-a6869333d570", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeeeebe-7d84-4820-84aa-24b359207264", "sighting_of_ref": "indicator--b3716e36-29ff-46c1-9882-a6869333d570", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999feffe-fba4-41cb-a442-3b1744e6685d", "sighting_of_ref": "indicator--07eb089b-e05c-44ac-980e-7e134b66bfcf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ad70dd-c7cf-41d2-83f8-0cdeee3998c6", "sighting_of_ref": "indicator--07eb089b-e05c-44ac-980e-7e134b66bfcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91213a0-63e0-402e-9c2d-b3631810674d", "sighting_of_ref": "indicator--95dcd10f-2807-4b3a-b3be-c2739985e32e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f76a113-0efe-4fbc-b200-382416d6e7ab", "sighting_of_ref": "indicator--95dcd10f-2807-4b3a-b3be-c2739985e32e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab8b8d2-dcab-442c-b0a4-61f4cc9c8051", "sighting_of_ref": "indicator--18214d06-9bde-4161-a0f9-7554f7673ca4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aef6c5-3c15-4fea-a2b7-e4aef7c04a3a", "sighting_of_ref": "indicator--18214d06-9bde-4161-a0f9-7554f7673ca4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921fffac-70a8-4708-9df8-7e750d966442", "sighting_of_ref": "indicator--ad8a8f34-92d3-481d-8bef-37f0b52bcd01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf665f70-7216-4c35-b6ac-f99ad69b6263", "sighting_of_ref": "indicator--ad8a8f34-92d3-481d-8bef-37f0b52bcd01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548c990-680c-441d-8f46-4d17e1430e50", "sighting_of_ref": "indicator--8e282697-17e6-4102-b037-f2aeae326eab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb09356-c63f-4e4c-84d2-5dd4f3236e50", "sighting_of_ref": "indicator--8e282697-17e6-4102-b037-f2aeae326eab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8731ef8c-07e4-4408-a29f-2bc1257e70f0", "sighting_of_ref": "indicator--6136aba8-e967-472e-9030-75aa252ee4c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d8a1dd-a8fe-4563-84eb-be00593d6353", "sighting_of_ref": "indicator--6136aba8-e967-472e-9030-75aa252ee4c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fa44dc-a7f5-4091-ae3c-1ff070d03d56", "sighting_of_ref": "indicator--6774ac36-e81d-44f3-810b-2a05ee13c07b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a86d1f7-4623-43eb-8c9d-7edc0f97175a", "sighting_of_ref": "indicator--36e2a026-45b9-4003-a031-35f176a76181", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5357d-e8ad-42f2-b3cb-899936dcbeae", "sighting_of_ref": "indicator--cd2dd3fc-4ded-4306-aa2d-98fb45d42069", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fafd29a-a4d1-4453-a0de-729ecf30ddda", "sighting_of_ref": "indicator--dcfaf094-69ff-4899-9b77-b8985cb23ff0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b803ef-163b-418b-af03-89115eaacc85", "sighting_of_ref": "indicator--9e0b0e21-01d1-44cb-b108-ba0f54703ff8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c741544-700a-4e88-919a-1536994fc2d9", "sighting_of_ref": "indicator--9e0b0e21-01d1-44cb-b108-ba0f54703ff8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ca3f4e-841d-4557-8dca-0d9bc13debee", "sighting_of_ref": "indicator--4c17de0c-c473-4ebe-8a6d-4ecda5a8df71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2ce477-719f-4cdd-9594-4e6c6de2cdea", "sighting_of_ref": "indicator--4c17de0c-c473-4ebe-8a6d-4ecda5a8df71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dd5723-6742-4686-84b4-a75b39fd8b9c", "sighting_of_ref": "indicator--3424be2d-82f7-41b6-afb4-e7fccca63277", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc3dd5d-56c0-403b-a7c1-a9fd810b9733", "sighting_of_ref": "indicator--3feaaaf3-1a45-4647-9d06-34e65471da91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441859cc-0e78-4459-8c2c-ff4d28e57638", "sighting_of_ref": "indicator--c25991fa-b07f-4e30-ab44-342ce33df684", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de30fd67-f5aa-4dc1-96c6-4b849cc27351", "sighting_of_ref": "indicator--97892d34-2cd8-4b9a-8c0e-8c47ad426606", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c213618-422d-4314-9310-50efeedef1ee", "sighting_of_ref": "indicator--97892d34-2cd8-4b9a-8c0e-8c47ad426606", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56de4e99-bce9-45b9-92d2-1315877a8dff", "sighting_of_ref": "indicator--4a64fed0-f016-4025-ac9c-239daee007df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104a62d3-c5cd-4ce0-8f21-1583e14cfd72", "sighting_of_ref": "indicator--4a64fed0-f016-4025-ac9c-239daee007df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a9be2d-a382-41ba-ab9c-c76bd297130f", "sighting_of_ref": "indicator--ef70ef1a-4790-45f1-841d-fdb7db42486f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca34634-41a6-4eb9-9f13-c69fbbbfcd8c", "sighting_of_ref": "indicator--e0e8d0a1-eb7e-4be4-93d2-cf92b09ebcb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbf36f7-f80b-420f-8ee3-5c963f1132d1", "sighting_of_ref": "indicator--c838d24c-414e-400b-990a-d252f6f20d2b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ca7cd0-894b-46ed-b422-a7f32f0f3e68", "sighting_of_ref": "indicator--9bee26fc-00e6-4484-8885-7b7def35ef67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048533cc-c5e7-433e-a02c-b0176b77f409", "sighting_of_ref": "indicator--9bee26fc-00e6-4484-8885-7b7def35ef67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f666220f-8bc5-40a5-a7d0-befbe263b9b4", "sighting_of_ref": "indicator--aaf4d2f0-df36-4a75-884b-04ec5cd57368", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e029a6-5f91-4120-a606-53da31edf76f", "sighting_of_ref": "indicator--aaf4d2f0-df36-4a75-884b-04ec5cd57368", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef45413-bf48-4385-a4e3-45de66ee9a3e", "sighting_of_ref": "indicator--a448804a-6a1e-400e-9996-48b44b4e7baa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad6ee3b-730f-404f-b29d-f4eaefd66a77", "sighting_of_ref": "indicator--383859e7-2e18-4aed-b4ab-ad8718862f73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a50bf8-500c-436f-b7d3-9a860bb3c4c2", "sighting_of_ref": "indicator--383859e7-2e18-4aed-b4ab-ad8718862f73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe0e83b-27c2-4aaf-833f-f21757ecfc76", "sighting_of_ref": "indicator--b835323e-843d-407a-9c3a-5e6ad9fe0c98", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c549cda-3ffc-4992-901a-237f2be5872c", "sighting_of_ref": "indicator--b835323e-843d-407a-9c3a-5e6ad9fe0c98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cc0bd6-4857-44a7-802c-e32af16f24e7", "sighting_of_ref": "indicator--5b8bcb54-b6ca-4fac-a617-a7525012f315", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb8c1e9-75f1-4e7a-a4a0-57a9989e6655", "sighting_of_ref": "indicator--5b8bcb54-b6ca-4fac-a617-a7525012f315", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484d1faf-cc66-4bf1-83c8-5faf590f4c8d", "sighting_of_ref": "indicator--24496ab5-50b6-40d5-9f5e-a883775b4665", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3046aa82-8e33-4776-ab61-544780677750", "sighting_of_ref": "indicator--def0a61e-42b2-49b5-b1cb-d7b63121c4e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2114e872-ef66-47b3-8003-98031641fe8b", "sighting_of_ref": "indicator--60ffcc4d-a3e2-478d-8a69-3a087bf50b86", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becb0b00-d5b2-4bcf-bf19-7ea17c72c7ed", "sighting_of_ref": "indicator--60ffcc4d-a3e2-478d-8a69-3a087bf50b86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa94885-857b-47ea-b852-f9386caaf045", "sighting_of_ref": "indicator--2c0a6617-eaa0-4bc1-a41d-4d194f6d72be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e407f160-69b3-4233-85a8-352c8760ec7d", "sighting_of_ref": "indicator--7fc56d57-9b89-4e89-b850-ed185646aef1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2ed5f9-a6ed-48f0-b9ac-c08d3e330e51", "sighting_of_ref": "indicator--0efa6f74-7f72-4c1a-b005-da6b1bfe1e78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10885836-9c37-4278-bd87-6e9bf6b0d97f", "sighting_of_ref": "indicator--0efa6f74-7f72-4c1a-b005-da6b1bfe1e78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a3d60f-e3cb-4586-aaf5-2fa39d73950b", "sighting_of_ref": "indicator--87bc07e0-f202-4d72-8462-18e8a1311279", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b82e7b-54a8-4abc-bccc-73e4d5c45a87", "sighting_of_ref": "indicator--839695e4-78cf-44fc-b2c5-d45ee87e5f7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b003bd-75b4-42c6-beaa-39334365673b", "sighting_of_ref": "indicator--839695e4-78cf-44fc-b2c5-d45ee87e5f7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20db054-247c-49ef-81b5-97b929eeba12", "sighting_of_ref": "indicator--a4f862e5-e270-4ad9-9e09-94707b7baa5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d36f0a-f536-4836-897c-4f0dd4a05432", "sighting_of_ref": "indicator--a4f862e5-e270-4ad9-9e09-94707b7baa5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf982f5-f584-459d-a5b4-be0f075b82a5", "sighting_of_ref": "indicator--486b7ece-a323-4bcb-8117-f93ccc44a954", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abffa1f2-56d8-47c1-8f9b-f1ac2d5dd6e1", "sighting_of_ref": "indicator--cd33325f-5956-4c42-871d-be8a9743139f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc895ae-8f60-46f3-88a2-75e9f358eb04", "sighting_of_ref": "indicator--cd33325f-5956-4c42-871d-be8a9743139f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a26d0a6-f24c-4e96-aaa8-2323694a4ed5", "sighting_of_ref": "indicator--6125f65f-70d9-4f94-a9ca-ff4bd487748e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b4035c-8df2-4924-92f4-a0d9fd2d5158", "sighting_of_ref": "indicator--13bbec82-c55e-494e-aa73-1a116b01b663", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbb1442-2a2b-411d-9135-b07605017c6a", "sighting_of_ref": "indicator--13bbec82-c55e-494e-aa73-1a116b01b663", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e1059a-1059-4c40-846a-acb76da2a196", "sighting_of_ref": "indicator--45348893-e430-480e-af93-b83d8cec938f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41836e74-f99b-4f01-a4b0-05ff5ae12e33", "sighting_of_ref": "indicator--45348893-e430-480e-af93-b83d8cec938f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bdf50d-5725-412b-b065-a70dc52d8f53", "sighting_of_ref": "indicator--f19abcba-fe33-4bfe-a296-8eccef4145ff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cccc61b-5d42-4a0d-863e-141969f3faf5", "sighting_of_ref": "indicator--d400735b-a4f6-4283-86f1-efed7a5b013b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35160739-7467-4e2a-9528-c1b022da5f29", "sighting_of_ref": "indicator--d400735b-a4f6-4283-86f1-efed7a5b013b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a3582-1057-4d56-93e1-9a310ca37a53", "sighting_of_ref": "indicator--9fb8d44d-5048-4290-8ae8-1be7a5eb4b15", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ab6736-86c0-431f-b5ef-5994fa5a30e6", "sighting_of_ref": "indicator--9fb8d44d-5048-4290-8ae8-1be7a5eb4b15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f3f855-542c-47b8-83b2-76f64e815af4", "sighting_of_ref": "indicator--63b3cc1c-ca99-4017-bb5c-ec4aec2921d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bfd3da-50e8-4473-ac42-a1f20cacb551", "sighting_of_ref": "indicator--73a0c9f2-e713-4f6d-b8b1-1f33a2b5a411", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade11f8b-abb8-4c50-84de-e0089e7aee1c", "sighting_of_ref": "indicator--73a0c9f2-e713-4f6d-b8b1-1f33a2b5a411", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec415f41-9807-4c06-813f-491bde505845", "sighting_of_ref": "indicator--1fd3b477-8b8e-47b6-b932-5c838641e4ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9962d54f-0809-41fe-83ae-e26a8628b7d1", "sighting_of_ref": "indicator--1fd3b477-8b8e-47b6-b932-5c838641e4ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcbcbf3-c58c-4f7c-853e-3f6ae7fbc920", "sighting_of_ref": "indicator--f816d55b-3898-4029-96bf-c8a49519ae7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876785c2-24e5-4c5f-9eff-f25f423d699d", "sighting_of_ref": "indicator--f816d55b-3898-4029-96bf-c8a49519ae7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5138d3-445e-44f0-a405-2e17ef79c9dd", "sighting_of_ref": "indicator--970f233b-8fdf-414e-b013-ced085877941", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6d0a3f-762d-4311-8888-0e0975489867", "sighting_of_ref": "indicator--a84996a9-bc91-42b9-96b9-08fc36efe969", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a63fbcb-a16e-4a52-b739-c7ac68d53d87", "sighting_of_ref": "indicator--3110d940-acf6-4f21-b223-2e902b0baa28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a26635a-a56c-4576-87d0-700efff3572d", "sighting_of_ref": "indicator--3110d940-acf6-4f21-b223-2e902b0baa28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548cd530-76ff-45b3-bd8b-501795edf54b", "sighting_of_ref": "indicator--d555a375-b4b2-4bed-8237-27db2cf3d8db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555ae232-5504-4577-826e-97f833eae34b", "sighting_of_ref": "indicator--02e591b1-2d3d-495e-be60-e53d9fb567a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8508c33e-3396-44d9-8718-d543b651264c", "sighting_of_ref": "indicator--49dadaf2-5091-4b25-a563-ee53bafdf812", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b6137e-5ec6-475b-8d51-2552d9f5c4b4", "sighting_of_ref": "indicator--bbf9bf30-8c35-4627-a5a7-e5ed5ddef3b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14440759-ad2f-440e-8ebf-1c1d47469e4a", "sighting_of_ref": "indicator--0d16f230-807e-47a8-ac46-391d730ed0f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcc0b11-8b4a-45be-b2da-b65034ac1086", "sighting_of_ref": "indicator--15586205-cd79-4bb8-952d-48c36516468d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566bc5b4-1112-4fad-a833-eaae83293625", "sighting_of_ref": "indicator--37c57145-1f3a-448a-bc69-5a60c36cf584", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45652263-80c3-44ac-8513-91d68f570914", "sighting_of_ref": "indicator--58b04133-23d0-4a57-8acd-501c156bab37", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39ed7cd-1030-4265-a82e-ffb0b5ca3d00", "sighting_of_ref": "indicator--58b04133-23d0-4a57-8acd-501c156bab37", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2ead61-fc6d-40cd-8ced-93f3c50c97ed", "sighting_of_ref": "indicator--92c216ee-f185-42bf-ba53-ffac2cad2135", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b797118a-9e15-4a09-9414-9572f67171ad", "sighting_of_ref": "indicator--92c216ee-f185-42bf-ba53-ffac2cad2135", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9c015e-0fd3-421b-96f6-54721bd1a04d", "sighting_of_ref": "indicator--a1e2a1e9-0640-489e-960b-5868bb9d5b20", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a083c28-9ef4-4521-b1fd-a3088749c2ac", "sighting_of_ref": "indicator--e11b774f-a2ab-4bf6-9bd5-3ef94fd64675", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beed3663-af5c-448b-8719-34f7dbb39d7a", "sighting_of_ref": "indicator--1c1e0650-7b2f-49af-a072-b0feb7201262", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d1415b-539d-4f85-9f46-c05f171fa168", "sighting_of_ref": "indicator--d7c09c72-4dcd-467a-9efc-4cc5bd7103d8", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc89ba2c-6ad3-4847-a258-cdb94d999a2b", "sighting_of_ref": "indicator--df78c10f-db9b-4ec7-a4f2-cc9b6aeeff35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516f8b4f-a87d-47ef-abb3-0f5d817164c2", "sighting_of_ref": "indicator--df78c10f-db9b-4ec7-a4f2-cc9b6aeeff35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861a34a-c3f9-4fe7-88db-babf2c1ea58c", "sighting_of_ref": "indicator--59d3f23d-4ec0-4b15-b87d-03f139880335", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d639287-6d95-4adf-9dfc-3e447867d884", "sighting_of_ref": "indicator--4107eded-e05c-45b5-936b-733933a5dabf", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48547361-da7f-4f91-b61c-7457d004eb7b", "sighting_of_ref": "indicator--f3852471-87a8-4492-ac75-fa36020a79f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a508d53a-e890-4305-81e9-e5832b84f213", "sighting_of_ref": "indicator--85c8da2f-91b2-4b0c-8cf9-b235e1df49a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5777282a-3fbe-42bf-8b2a-a2d88de71488", "sighting_of_ref": "indicator--912cf59a-9f65-4fa3-95ff-c6b1d5edbbc1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6113372e-315b-4dee-aafe-860dfd91a0f4", "sighting_of_ref": "indicator--e2184766-2f3a-4167-85c0-15663ccb7e55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873acf63-7c5b-4054-82d6-22f58baca6db", "sighting_of_ref": "indicator--2c271364-101f-4ebf-9519-310a40ac2653", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91d8118-b741-478d-a42f-b0e21606eed2", "sighting_of_ref": "indicator--be70c93e-e7af-4bca-87d7-3ccd6ee33e5f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82b6e92-1eab-4d15-86e1-0e12ec8bb970", "sighting_of_ref": "indicator--9178d904-4918-4022-a476-bbe96f5e210c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d0e5a7-8954-40e8-bcf8-2d291f53cb9b", "sighting_of_ref": "indicator--52dab82c-26e4-4563-aab4-69f10aeeb160", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a913880-4f4e-40eb-a017-97dda53a9a1b", "sighting_of_ref": "indicator--bcaccd3a-d239-450e-a634-1a4d2ad74623", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed28b85e-d7ac-4aa2-b9c2-407e550c4c69", "sighting_of_ref": "indicator--34a7f1f4-1eac-4ca6-8180-f5ae2ed31b23", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79124c35-6666-4320-8e8b-8b22e4edc61d", "sighting_of_ref": "indicator--bf87c1af-b9f1-4fb3-b64f-11e88f8e2bb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9032db7-8dc3-4484-bb37-76ee02f041f8", "sighting_of_ref": "indicator--34b1cb05-b96b-4c45-8e86-77565bf3c281", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bdcdab-c790-4607-917e-f30025fda287", "sighting_of_ref": "indicator--4893100d-32d2-4224-88d4-02c36c458be8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebd6ec3-6145-4da9-82c9-277c1e44bbbe", "sighting_of_ref": "indicator--7cb2ff8d-f29b-4861-977c-58cc755d4104", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d45315-b61a-4810-b770-0c2730994df6", "sighting_of_ref": "indicator--7deed357-ef0c-4bd3-a3fd-f1950c334a70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce54c168-733b-439f-a0dd-c6e773198a90", "sighting_of_ref": "indicator--ae6344a8-3130-4f68-a45e-9dfaf60e55ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e085628f-57c9-4508-a92f-b9a60a94e017", "sighting_of_ref": "indicator--54911062-98f4-4065-b737-cad1564063e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4e4936-1cc2-4271-9029-168b5e054be6", "sighting_of_ref": "indicator--653095a0-96c0-4c6d-af05-583157f995a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d098d9-86de-48af-bb40-7a1c6310132a", "sighting_of_ref": "indicator--78d81fc7-4327-420c-b4ba-38109d5bfe9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef1e61c-bddc-40d7-aa10-20043f69ef14", "sighting_of_ref": "indicator--12981739-4504-43dc-aa9d-8df38e545ba6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194c87e0-1c22-49e7-bd86-09e35e497a0b", "sighting_of_ref": "indicator--97bb2409-eb9e-4f97-a672-0dc831b951c0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc914d5-015e-4184-b252-34760e71d5e6", "sighting_of_ref": "indicator--ee063c58-5065-4716-80ac-c37abcfeb657", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca28282-64b4-4a24-8df0-80f7fdc33b14", "sighting_of_ref": "indicator--2fcb4ac7-727b-4586-88e9-b61f6bba3cea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172ccf73-0709-48a5-b9bb-b62b881a914f", "sighting_of_ref": "indicator--f579722b-4d8c-4c34-85aa-b519d262c22b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844253f8-cc44-4807-ba64-c57dde18ff2a", "sighting_of_ref": "indicator--9841c481-d466-4888-bd23-b4378d7712ba", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec90ad34-d517-4394-b2f8-5652fc4cb2a9", "sighting_of_ref": "indicator--c5040f4b-fed1-422a-a2c6-2a1ce43a9b09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061db8a4-ddb2-470b-9104-a2b5e9f15c9f", "sighting_of_ref": "indicator--06a86dfd-f41f-4f18-83a0-84025701044e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6a27ab-7ec2-4518-b363-8fb8f9ec1fe7", "sighting_of_ref": "indicator--4ce647c2-330b-458f-89f7-2b1463db12cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf62ddf-68d9-48b3-b3c4-c7c640862646", "sighting_of_ref": "indicator--354bce12-6a73-4285-8a39-98c95d223aed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07e90d3-4cb2-48ba-9e80-ed604a6d3491", "sighting_of_ref": "indicator--84f3bcb7-4c1e-44fe-b976-02eab5f8b507", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc627285-1d88-49d9-9693-731c7b4632f4", "sighting_of_ref": "indicator--84f3bcb7-4c1e-44fe-b976-02eab5f8b507", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca36e171-a2c7-4b4d-a462-0d75065906b8", "sighting_of_ref": "indicator--89ffa3c2-3e13-4bbf-b3ce-374131df30cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2225537-5105-4c84-be68-f6094108ae79", "sighting_of_ref": "indicator--1806b33f-41b4-414a-b6ea-f64db890531f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0917d23-81c1-416e-8e0b-8981305cc4d8", "sighting_of_ref": "indicator--1806b33f-41b4-414a-b6ea-f64db890531f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b859fd2-e099-471a-8750-2c0dfd65354e", "sighting_of_ref": "indicator--c6f1c5d7-ce7f-4554-b10b-9a315530296e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5761bda6-df47-4a27-b639-9ecbfc6d9d46", "sighting_of_ref": "indicator--04bc966c-8236-4245-b699-e1222af40b3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d6dc90-773b-487f-bcbe-c8303b01f1ea", "sighting_of_ref": "indicator--04bc966c-8236-4245-b699-e1222af40b3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d20938-019e-44d9-aa8f-1330896cdc1d", "sighting_of_ref": "indicator--a35c0ff9-6978-4aa8-b82f-afc2d93da9ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41567eb4-77f7-4e49-aeea-cc372504b2e4", "sighting_of_ref": "indicator--a35c0ff9-6978-4aa8-b82f-afc2d93da9ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fd28fb-88ba-4abb-9b38-a31747ed9a59", "sighting_of_ref": "indicator--b5539256-f0d7-47c0-8d5e-d06c80521bf2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094b4a18-66cc-4a42-a0e9-195696c76dd0", "sighting_of_ref": "indicator--b5539256-f0d7-47c0-8d5e-d06c80521bf2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcb7d02-cd0b-4375-8046-cecd1b816bf4", "sighting_of_ref": "indicator--373e93dc-541a-48fd-bd81-0a6a5aabe87f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc991323-c0f0-499d-804c-101dbb06ae5b", "sighting_of_ref": "indicator--373e93dc-541a-48fd-bd81-0a6a5aabe87f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7da07e-c76a-4d25-a48f-65ef668a39e5", "sighting_of_ref": "indicator--e19f0561-fb58-416b-8c29-27acfb42b254", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e705fc5c-f7a5-4ef7-9c3f-63756ba4f2bd", "sighting_of_ref": "indicator--1e31782b-686d-4da4-8ca2-a6383f160666", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cab62f-6bea-40b2-935d-1f7b62a23fc9", "sighting_of_ref": "indicator--1e31782b-686d-4da4-8ca2-a6383f160666", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeb63a2-3e4e-4471-b053-1a06bb760e2d", "sighting_of_ref": "indicator--83082bba-040a-4a00-82bb-bc44891d1946", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200ef342-6dec-483e-a3fe-414411636a96", "sighting_of_ref": "indicator--2ebec7cf-cc7c-474d-a599-aab74e996230", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8c5a7f-ba2f-496d-b2f8-60b99ceb9edd", "sighting_of_ref": "indicator--bbd0427a-ae50-4d2d-a804-9d6691ec6f4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9e8931-c5df-4cd3-8e6d-9f61902f8b95", "sighting_of_ref": "indicator--c5f6687c-82bd-410b-924b-1608aa1807f6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313cc125-ea89-4e5c-a29d-e613a26a2bd7", "sighting_of_ref": "indicator--a028834f-8af0-42d8-8df2-29d384398576", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aada9201-2274-47f3-a4d3-def73dd87762", "sighting_of_ref": "indicator--2dbdb0eb-0f32-4d20-8ffa-4477d848e5db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5136fb-23d4-4a2c-8b32-dc47f6eb1409", "sighting_of_ref": "indicator--2e5d3add-2955-4a3f-af17-b3e056a3a20e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aa5aa6-c199-472f-85d4-8dc2517642bd", "sighting_of_ref": "indicator--2e5d3add-2955-4a3f-af17-b3e056a3a20e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18658757-e08a-4444-927a-4f7029ff4d41", "sighting_of_ref": "indicator--a0f4f904-ca3b-49ed-bd4f-c356a2d523c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916528c9-f3bb-49f5-b9f8-cd20edc90e9d", "sighting_of_ref": "indicator--2d697722-f477-4c05-b6c8-313b175b04d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ead598-e737-4ce8-b120-ad94dad37a18", "sighting_of_ref": "indicator--2d697722-f477-4c05-b6c8-313b175b04d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e313a7d-c04a-4a6d-bcbc-01a9e6d471a4", "sighting_of_ref": "indicator--3401ab2b-a8f7-4109-bf4d-691867215d09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebb6a39-dcb7-4c6c-8824-b20614d9165d", "sighting_of_ref": "indicator--5a2db80b-4e6a-42ed-98f9-a4a579297c25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff6891c-0868-4631-b5ae-84fa0150c622", "sighting_of_ref": "indicator--e554e509-3b38-4e0c-9c2b-4a5ebc6a320e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5030b1b7-ab79-45c9-9102-a4f5daedea22", "sighting_of_ref": "indicator--0c10d156-40b3-472d-ae53-3a87c682ed53", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83946fd-4a58-4f62-9cb2-2f4e31d878ea", "sighting_of_ref": "indicator--a32bad9d-b17b-4098-a6d8-e653ee25159d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0f3311-ed53-4f26-837b-57861c71d858", "sighting_of_ref": "indicator--a32bad9d-b17b-4098-a6d8-e653ee25159d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0a7742-1d6d-4b6d-bb00-fe4608c70225", "sighting_of_ref": "indicator--72b6c2c6-06ee-4e5f-9559-d90d00559e57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea68f8d-b5ed-4fc7-bfce-cea4ce60c75f", "sighting_of_ref": "indicator--e15dd353-bdc1-44dc-9da3-5088315e7d5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7818f386-517e-4664-9584-ce5737176cad", "sighting_of_ref": "indicator--29f91938-eb8b-4610-ad99-289110455ad7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b9bcce-758b-458d-893d-148cb8fe91ef", "sighting_of_ref": "indicator--8a0edd4d-3ad3-460c-bad8-ee863ef8e338", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d34c659-1468-4742-9809-2dbe4a0208eb", "sighting_of_ref": "indicator--8a0edd4d-3ad3-460c-bad8-ee863ef8e338", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7993f7-1c0c-4b05-88fd-21088f380b84", "sighting_of_ref": "indicator--a1eeae1a-fe59-4af2-857b-8ddec315d9f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0d19ea-9d42-4b9c-aea3-78efee17566c", "sighting_of_ref": "indicator--89d133b9-1f5c-4656-b001-bce67c58a10d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ea695b-d36b-41b0-a2d2-cc1492c2861b", "sighting_of_ref": "indicator--e1d099ce-ebc7-44f8-a084-5e16aeda33ab", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f69150-7497-4a2c-a96c-159ae41c8cd1", "sighting_of_ref": "indicator--e1d099ce-ebc7-44f8-a084-5e16aeda33ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93a5dfc-cf1e-43b5-913d-492ed39716f6", "sighting_of_ref": "indicator--ba17215e-eb3b-4779-b65d-8550d2add48a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580e4ecd-5d88-4832-adaa-9aeacedab758", "sighting_of_ref": "indicator--70ac80d6-832b-43ca-9822-7c3b2063eba5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedf87a6-5719-45f1-9158-de9f4138962f", "sighting_of_ref": "indicator--4214224b-ce4a-4d56-bd6c-9cb81d1d7cf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bee99b-1020-4323-8fb0-1e0310b6e4d6", "sighting_of_ref": "indicator--b6712c71-b035-48cc-bf7b-6cf912c3f93f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27877b84-2822-41f5-a47f-e9763a2c24dc", "sighting_of_ref": "indicator--b6712c71-b035-48cc-bf7b-6cf912c3f93f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377c9f7e-2328-4389-83c6-41d86045d721", "sighting_of_ref": "indicator--f4857d41-87cd-4a53-9d2f-36caf9714506", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e611b71-6537-4eb0-ba09-617c17b94dc5", "sighting_of_ref": "indicator--4a316f81-404b-4af8-b08b-52e55b55e887", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3057b318-a10c-4669-b421-96757cdd5374", "sighting_of_ref": "indicator--546ba1b7-6aba-4a8a-b567-006e0d740368", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f4cb98-2bff-46b6-9b91-d35abfeac3c8", "sighting_of_ref": "indicator--546ba1b7-6aba-4a8a-b567-006e0d740368", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a6dd01-346f-4c20-91f0-b27f926aedbc", "sighting_of_ref": "indicator--6e55a2dc-750d-454d-910f-95a0d1a565b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd0f5a8-eb27-4d2f-938f-069d798c2b62", "sighting_of_ref": "indicator--6e55a2dc-750d-454d-910f-95a0d1a565b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b35a49d-64a8-4999-a699-bec784d6c52f", "sighting_of_ref": "indicator--4dd33b30-18c2-4a54-829b-24712c3b0d87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be58dc61-881c-42ac-b7fc-8b6ac5de2bfa", "sighting_of_ref": "indicator--5952f9fa-c361-47c5-830b-f69d6c85dabf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f76110-7015-4bb7-85b8-fbf7ce73131f", "sighting_of_ref": "indicator--5952f9fa-c361-47c5-830b-f69d6c85dabf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd2d5fa-1ece-42e4-90b0-4091d5fc586b", "sighting_of_ref": "indicator--b6611e7f-f182-4345-9a53-b1115c7fea61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1843b5c-b407-4be0-9ad2-7c1bea6746f4", "sighting_of_ref": "indicator--83725211-1193-42d7-9e39-e4edcaec86de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b56c8d-fbbf-4ea8-a456-8ce0fb69cbac", "sighting_of_ref": "indicator--6bfa7b39-29cd-4cd1-b1fc-d7db9d2d54b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f0f3d9-c036-4974-97c2-55a66bad6b79", "sighting_of_ref": "indicator--d0a6da07-fe0e-4344-8dda-020c2bb8caac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728b69f2-25c3-4b0f-a775-15177c5a7cfe", "sighting_of_ref": "indicator--7d67807b-bf68-4e43-90ea-53b1d321fe1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df14f699-059c-4c13-9892-594a9b9d29ac", "sighting_of_ref": "indicator--7d67807b-bf68-4e43-90ea-53b1d321fe1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f12491-c146-494e-94f4-e8a1b7bc7f27", "sighting_of_ref": "indicator--66f56bd5-19b9-4b4d-8034-e3569949d1e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc4ceff-9c35-44ef-9dc4-82516fd418b0", "sighting_of_ref": "indicator--b010b17e-0888-47a3-8458-3d30e33c4e1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323249a9-31e7-42f5-b29c-afd8b67d5176", "sighting_of_ref": "indicator--f5db7793-e904-4123-bab4-de3892841c35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a6a48-235e-4345-b08c-ba9c84693547", "sighting_of_ref": "indicator--616662db-e1e1-4be4-815b-05a9b3b05965", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17735778-6ce4-404f-953b-271190b28327", "sighting_of_ref": "indicator--eafec12d-9ba6-4566-a7ee-302d9f2a16bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35229285-2b27-4207-8cab-b7b1f68b0ba1", "sighting_of_ref": "indicator--fb6030c8-715f-4b35-8050-07e84a6f83ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eae76d-c259-4329-bb33-e261554a967d", "sighting_of_ref": "indicator--f6049eb8-c893-4a1f-8a78-83d177efd4ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79274281-8d51-4311-a9e9-c45a0605fb97", "sighting_of_ref": "indicator--d32b68de-6ef6-4bbb-a224-aaa1d07c5f3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28cd2c1-4b82-4cb9-96ac-3e7968dfbad6", "sighting_of_ref": "indicator--690becf5-da0e-4a43-97fd-c8c94b51d20f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1f42b7-d670-45dc-9dcc-c454372d1650", "sighting_of_ref": "indicator--d2b3864d-643a-49a8-94aa-a1e51621a650", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3113d573-a366-40d1-9f04-fbd55f5df620", "sighting_of_ref": "indicator--afb1d847-6481-43e5-95b4-54fa5b5d8d71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e069c9-be1f-4e2e-b2a0-dd38f5fbffda", "sighting_of_ref": "indicator--c884983f-e842-4f41-a5f5-83e80138f567", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21aec145-4515-46f3-8b4b-f2eb930f61b5", "sighting_of_ref": "indicator--d303f22e-20e5-4f11-bc61-d1fd52700bd0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7323d027-ed71-4fb5-bcb5-27d92a127696", "sighting_of_ref": "indicator--d72d3905-f225-4af9-bcb7-d637cd4fab7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af49c3c1-858d-4478-8fb5-edb06755c830", "sighting_of_ref": "indicator--c0a6d449-27fa-42d9-834e-bcd5a822bb6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b61f735-4696-4c98-bb36-c5ef872fa312", "sighting_of_ref": "indicator--62bef4e7-58ef-4e81-a72e-43c27cacb586", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ede55da-1c16-42ee-bc42-56b15e7eb7a5", "sighting_of_ref": "indicator--6edd1df7-fdd5-486b-bc15-eb5faa0d72b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f0afdc-9076-48b7-aa45-3efe9919d1b3", "sighting_of_ref": "indicator--6edd1df7-fdd5-486b-bc15-eb5faa0d72b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8e727d-822c-403b-ac9f-b291c8d88279", "sighting_of_ref": "indicator--63759ceb-2076-4f35-bdff-db3b20d1c77a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c281bd-7486-442e-a4b9-5c231b4f4778", "sighting_of_ref": "indicator--63759ceb-2076-4f35-bdff-db3b20d1c77a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8512cc86-5d0b-477f-9c80-4fa711a85ddf", "sighting_of_ref": "indicator--f8ba182b-8b81-4eba-b7b9-dd82cb8c2d96", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554b844e-90f7-4969-923e-3c32562ff841", "sighting_of_ref": "indicator--f8ba182b-8b81-4eba-b7b9-dd82cb8c2d96", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964a57b2-c93a-4a3f-a5ac-1a5e322c9e74", "sighting_of_ref": "indicator--31254fb6-8bbc-4490-b447-a3e7dfde0dc1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3d0e88-0fb2-41e7-8e9d-6896edbd3f79", "sighting_of_ref": "indicator--0748715f-61fb-4730-8a29-7998387f87df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ea0aac-7f65-477a-b080-2e88868ad050", "sighting_of_ref": "indicator--0748715f-61fb-4730-8a29-7998387f87df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a5bfa1-730e-4c96-945c-c9e4f1ba1ab0", "sighting_of_ref": "indicator--3721e834-2060-4df6-8b0a-b251adb18b48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ae14b-20f6-403f-a8a4-0d72c26d5602", "sighting_of_ref": "indicator--3721e834-2060-4df6-8b0a-b251adb18b48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef74e6b-2b64-4fa8-9cc5-2e272cd6eed5", "sighting_of_ref": "indicator--60da08bd-bdd0-4f12-a3ef-00f37868e61a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962ec784-bbb2-4ba6-99b3-765ddd243a4c", "sighting_of_ref": "indicator--ea6af437-9b80-442e-9724-e3d5a199834d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b72fce5-6773-4daa-9a40-dede0471b3a3", "sighting_of_ref": "indicator--329b21f1-0012-41f1-b747-b3760152992a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123cf47a-0d6c-45a6-9995-b6980cf9718d", "sighting_of_ref": "indicator--329b21f1-0012-41f1-b747-b3760152992a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b757ed-e520-4220-bb6e-dbf0594cffad", "sighting_of_ref": "indicator--b295fd2a-3237-478c-a866-e911cfef9edb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73634608-4c54-40ff-a76f-fb28b725077b", "sighting_of_ref": "indicator--5eb5601c-1960-482e-ae53-bdc634776c0d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eff34a4-eb7e-40ba-8825-da01fcca04ce", "sighting_of_ref": "indicator--0003d626-b9d6-4008-9a9a-578592435de5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82717b3-e617-4873-a6f7-8534cd4c6374", "sighting_of_ref": "indicator--08860348-9037-4846-b3b6-ce1c5e4af7b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0d367d-3d1f-4d36-a280-fd846f372f65", "sighting_of_ref": "indicator--76e84910-b898-4e61-9966-912fbb153d4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3e43a8-f3b3-4534-ab97-1ba874e9c056", "sighting_of_ref": "indicator--4c507414-8f13-4cf2-b5aa-6be973d8114b", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8729a17-4798-467a-80a8-398545a45991", "sighting_of_ref": "indicator--2021bf1b-096d-4eab-9fac-5b4cf169cba6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ae0d21-943e-4e12-80bb-48b99573109a", "sighting_of_ref": "indicator--040ffe41-075e-4cfa-9d97-2bf76cbdf84f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc14acd-79bc-4757-af4b-ccb8d19adcb9", "sighting_of_ref": "indicator--69cd91c8-d449-44f9-b6f3-dee4396e8ba4", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e394abf1-5fb3-42f8-8072-8948520b29bd", "sighting_of_ref": "indicator--65363332-182d-438e-a4ce-e8dcf8b741e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeb87d3-323a-4cb8-99ea-754509e81042", "sighting_of_ref": "indicator--720cc4f2-038d-4316-96f3-90f3e888117c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8a2dd5-6f08-4e4b-8a8c-ddf22d708abe", "sighting_of_ref": "indicator--e6f66191-b071-4a7f-8118-497a3275870b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbdb5f4-aa1f-494d-9a8d-e2ce69239b55", "sighting_of_ref": "indicator--2a0366dd-f590-4b92-9519-7deb8e072bcc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eb11d1-c539-4578-afd6-a5b91d69fbd8", "sighting_of_ref": "indicator--2a0366dd-f590-4b92-9519-7deb8e072bcc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a4189-ecdc-47e4-88d7-e92a4f89a068", "sighting_of_ref": "indicator--da3a23db-0b18-4dfe-8a8d-4041b9d1fa29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe39d3e-d884-469d-b1af-a82323afa663", "sighting_of_ref": "indicator--79313899-2be3-4989-a514-7ee789f143a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4218e0-d6ff-462a-ae42-50ea7b1cd07d", "sighting_of_ref": "indicator--dfce1bd5-63f6-4e02-8589-2d7c0fe624d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43a4255-1757-4dc5-a0dd-e6062784633a", "sighting_of_ref": "indicator--764327c9-832c-4d99-9458-be38b4393930", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4a4480-b624-47a1-95e0-e4e6a3c06a6d", "sighting_of_ref": "indicator--47ee0e7e-b271-4bf6-b31c-8dd7316e5535", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48212d7a-fc80-4d15-bbfb-34247010c510", "sighting_of_ref": "indicator--3a4c0b94-da41-4faf-8e88-98452250cb5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91b292d-3654-4936-bd95-0863ad16ee83", "sighting_of_ref": "indicator--0fe70195-88d3-45b7-85e1-b7aa08f88f90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a68351-468b-4a28-a85a-af18418e1370", "sighting_of_ref": "indicator--0a4274a3-a258-4133-9b6f-796800dc7cf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5229a8-a813-4422-8e5d-d3ee5c96ccc4", "sighting_of_ref": "indicator--8d2fa4c7-1a8d-48dc-964f-ee42b6e90e81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa6479b-374f-4767-a8c2-71d1051d93ea", "sighting_of_ref": "indicator--031adb7c-d2cb-4ab0-b9a0-51476dbd8f3d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ea0d4a-fa6d-4e33-a24e-849b60716bbb", "sighting_of_ref": "indicator--031adb7c-d2cb-4ab0-b9a0-51476dbd8f3d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4a7827-9509-47b2-a517-de308bd1594d", "sighting_of_ref": "indicator--a520896b-4101-4099-be99-1b46c2394cb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3164f8-9dfa-476f-b626-1af560d4bd2a", "sighting_of_ref": "indicator--a520896b-4101-4099-be99-1b46c2394cb8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18676966-6240-48d0-a781-97131caba71d", "sighting_of_ref": "indicator--0348cfe3-0f72-4d3c-b6cb-594c85ae7646", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038454cb-0b1f-4818-9223-3de14bb0b855", "sighting_of_ref": "indicator--e44fc556-139e-4cd0-bb87-b482b0e8b5d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ab0a16-5a74-4ddd-bb1d-58a618601387", "sighting_of_ref": "indicator--23576ad9-cb83-47c4-9a30-7982f0ef029c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3abe36-23a7-4f4e-9870-3504b0cfab5b", "sighting_of_ref": "indicator--9d57093d-edc4-42b3-9b4a-7d457395aef1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73215b27-ab51-4f9b-8124-077e21330b6f", "sighting_of_ref": "indicator--281ef150-2b3c-4a98-aef7-6e2eee329730", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba60c9f-466b-4aae-9f1c-fc0e3f302459", "sighting_of_ref": "indicator--281ef150-2b3c-4a98-aef7-6e2eee329730", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8628ba-bb1c-41c2-b7fe-8c1842208d6c", "sighting_of_ref": "indicator--0704832a-1dde-4548-91e4-8090c87cd37a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f824f01c-95e6-4b56-bec1-ddbedae58ba4", "sighting_of_ref": "indicator--0704832a-1dde-4548-91e4-8090c87cd37a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2406cfa1-c839-43ef-9063-be8b400ee5c8", "sighting_of_ref": "indicator--cf215ba3-4e6e-4bdc-aa5f-d79f7c27b232", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11d0b9f-7a7e-4751-810d-2dfe663643fa", "sighting_of_ref": "indicator--cf215ba3-4e6e-4bdc-aa5f-d79f7c27b232", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c5b48-b509-4881-99e2-747208847849", "sighting_of_ref": "indicator--2265d259-abb4-42d6-b409-dfdfd1331403", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa7283d-28df-43d7-92a1-4e1ce7b41e64", "sighting_of_ref": "indicator--2265d259-abb4-42d6-b409-dfdfd1331403", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615c1ece-d00d-43e9-85a1-89b8bf681c99", "sighting_of_ref": "indicator--fa5bfbd7-1f9e-4444-b1ed-2deb51345aec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334f6b4d-8db1-4e1e-9057-fed72c57eb40", "sighting_of_ref": "indicator--fa5bfbd7-1f9e-4444-b1ed-2deb51345aec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d021e29-46ba-4321-9cac-175cdd889cd4", "sighting_of_ref": "indicator--022f401d-5f17-4dca-b37a-d44304133d35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0bfadb-5000-4048-bf8d-0898746039a2", "sighting_of_ref": "indicator--082b9c1a-709a-4008-acb3-7b9558c6291e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cbe22d-1a84-466a-bc03-6d84ae6b37ae", "sighting_of_ref": "indicator--082b9c1a-709a-4008-acb3-7b9558c6291e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28777d28-4a3c-4d60-b154-e0e097335be4", "sighting_of_ref": "indicator--f784de22-147c-4b17-838b-b1dd083df01d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a410c0d8-187e-461b-ac81-35b7f3e68b5e", "sighting_of_ref": "indicator--b64734a3-de42-48fb-a6c8-dbb65c8cd3b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aca1b2-7ca7-443b-a4a8-42ebb47acd7f", "sighting_of_ref": "indicator--b64734a3-de42-48fb-a6c8-dbb65c8cd3b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c28c44f-9cc6-4225-8286-694749808a3c", "sighting_of_ref": "indicator--38023155-5382-44a7-a377-64c9bf4698fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853c3ab5-96d0-48d6-a8b9-3c72c42f7474", "sighting_of_ref": "indicator--38023155-5382-44a7-a377-64c9bf4698fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99672e63-a5c5-4af9-bb6f-f4bcb4bf13f9", "sighting_of_ref": "indicator--aa615528-a120-4f5f-a718-6afcdd4f6f59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2296c5f-f765-45d3-91a8-4c640d719309", "sighting_of_ref": "indicator--1c03482c-624f-4ea8-a0aa-9ab9145782ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb970b68-8c2d-4d3f-b85f-87ee9cb4d980", "sighting_of_ref": "indicator--66a71833-fb18-4544-b728-1be753e07daf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d35ce54-419e-4f7f-8d8c-b5dd87467a21", "sighting_of_ref": "indicator--66a71833-fb18-4544-b728-1be753e07daf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5864c70-3e80-4e33-9588-1568bb10d4c1", "sighting_of_ref": "indicator--d1a5bc88-8dbf-4cbc-bd35-5c82728500bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a1d6c1-36e5-44f2-b595-f95071804e14", "sighting_of_ref": "indicator--d1a5bc88-8dbf-4cbc-bd35-5c82728500bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e9205e-db5b-41e4-be9b-f5d77b9ca67c", "sighting_of_ref": "indicator--d3bb872e-2e79-45a0-b06c-6b9878ec1d65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b653342-6b46-4f67-b556-ba3ca374f3a4", "sighting_of_ref": "indicator--4aa2c9a8-7333-4eb9-bfb1-cec4fa1c8423", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fed2e6-5cbe-4298-b59f-9260629be0b9", "sighting_of_ref": "indicator--f7cfbd6e-9d2a-4359-9616-9a06de20b338", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba00cc04-cb47-4aa5-bdeb-8f8369adbd7f", "sighting_of_ref": "indicator--dad73380-df7a-4b25-b81e-e7b189c766f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4447b1-315a-4b4f-986f-b3cc789b7d09", "sighting_of_ref": "indicator--27e63d1a-6200-4b04-9785-25e95fdb61ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f1d365-392e-4e3c-a1ce-9188be0c6dee", "sighting_of_ref": "indicator--363189cb-24ae-4e90-b69d-080832bf42e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833ca2ee-d76e-47f0-bf8a-1e135b9abc14", "sighting_of_ref": "indicator--6d254571-653e-4de7-8e3e-82c745653941", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9697eb45-ae9b-407a-bd89-d9567bb312e6", "sighting_of_ref": "indicator--6d254571-653e-4de7-8e3e-82c745653941", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f735a0-4fd0-442f-9aaa-2ec20f0b1722", "sighting_of_ref": "indicator--584c19f5-ed10-4cd1-b57f-88517152eb0f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a70f1f8-7419-4862-9672-42141c69e4ef", "sighting_of_ref": "indicator--381deea4-ed6f-49b0-b3fc-94da94cfa909", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823d54b1-a5c8-424a-9173-9cc985b13acb", "sighting_of_ref": "indicator--381deea4-ed6f-49b0-b3fc-94da94cfa909", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebb3de1-0c10-4bdf-89cb-090cae391330", "sighting_of_ref": "indicator--7e8836c5-96a1-4f8b-bd6f-e9a810291099", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0092351d-b5f5-46be-992a-4ab4fda5413b", "sighting_of_ref": "indicator--7e8836c5-96a1-4f8b-bd6f-e9a810291099", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bd4409-4041-4c2e-a0d4-32c2887dbd31", "sighting_of_ref": "indicator--0e9d671b-46cb-4076-aeb9-0f9b98f2ba45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc568c7e-8031-490f-bbe1-eabf021f4c74", "sighting_of_ref": "indicator--739365eb-ec6e-4555-bb56-74fb06466dc4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9e9a7a-04f6-4d56-b25b-97d621d88f77", "sighting_of_ref": "indicator--420a57c6-33c7-4d77-adfd-e6b2d00788f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585917a9-edc5-4daf-b026-b7d708bf4ecb", "sighting_of_ref": "indicator--53061ee2-a396-4614-808e-01d14f3634ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ebc2ff-c4ed-4de7-974d-07052952ba2c", "sighting_of_ref": "indicator--30df31f0-2850-44b4-89a6-9b449786c8dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b78469b-a95e-444c-b227-e1ced4dc0be9", "sighting_of_ref": "indicator--7063388e-f36c-47e7-99ed-82018254a2e9", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc9e86d-b502-4d97-be6a-367a54f6923a", "sighting_of_ref": "indicator--397e9b6f-7381-4571-8af2-86fb6dba4c78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e414c937-f26d-4fdd-b4a7-e7be35bd3107", "sighting_of_ref": "indicator--bb6ba7ca-5941-48de-8e63-af77cf1355fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7460e9e-718b-4cd7-a223-bedd23e55d24", "sighting_of_ref": "indicator--eda53e61-14e8-4b5b-a2b1-81cbdcfeb48b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef10859-3023-4538-a757-c6a6f551f2ac", "sighting_of_ref": "indicator--1570d21e-bb1f-40a9-ba64-31f39fd79bc5", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e53433-21af-4522-9664-1d5bc365fcfd", "sighting_of_ref": "indicator--345594ac-deec-4745-ab7c-4561411d3b0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849da6c5-c9fe-401f-9223-b9a11274c311", "sighting_of_ref": "indicator--84be8e81-2a3f-4848-807b-9b6518ff998b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f2fab7-753b-4284-a1c2-c0a48a8539db", "sighting_of_ref": "indicator--58367c5a-1551-4837-8004-f6fb906c45a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b51ef8-4985-4553-9f0e-8aaf404e1a8b", "sighting_of_ref": "indicator--58367c5a-1551-4837-8004-f6fb906c45a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061a3520-b66b-44d7-a11d-6ec8ef2b38b2", "sighting_of_ref": "indicator--d122f67f-e615-4cdb-b503-454a7af6ca1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5776403-e350-46e0-af7e-5befc8efa0ca", "sighting_of_ref": "indicator--6d59ea53-123e-41d8-a3d9-acdefa2e8e77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14feb45a-d82a-436a-9af3-4623a7bf37b7", "sighting_of_ref": "indicator--47d8a0fd-bdff-4e29-95bd-975961e1aab8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3deb6bb-6f8b-47ab-93b2-e3503f162ad3", "sighting_of_ref": "indicator--ae00c2b0-fe62-4d6f-a1fd-aef52735c2ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75f6d3d-ef57-49ae-809e-2d35f271f006", "sighting_of_ref": "indicator--3f51bca6-41a8-4c53-97b3-72afb213a4ea", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400f0075-aade-45a0-9398-7894dfa34942", "sighting_of_ref": "indicator--65b172fb-4d58-446b-8d96-f45dbda99069", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a064f-473b-43a3-b1c7-bb918b802df6", "sighting_of_ref": "indicator--c49d9ebc-4e9f-470d-875a-a53603117432", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91b679c-b090-4d7f-bd0f-b2f8c77ada1c", "sighting_of_ref": "indicator--c49d9ebc-4e9f-470d-875a-a53603117432", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6f11f5-8855-4234-8a75-6e7daf0af677", "sighting_of_ref": "indicator--1045b5dc-0119-4337-a1ab-9c29220aa2f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeec9e4a-5a44-4fe9-bee1-d27eaebf524d", "sighting_of_ref": "indicator--8c43d839-6a4e-4330-b2be-175ba3c135c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd418489-8fa5-40c0-81da-3b876d2ad533", "sighting_of_ref": "indicator--38a562b8-d702-4678-ba66-f428eede1c0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf09ba1-b973-4714-9796-d90c2a691edc", "sighting_of_ref": "indicator--59541917-7c0a-4e9a-8fc8-09bc7efe90c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e44bde-9d5c-436b-a322-df67b8ae7668", "sighting_of_ref": "indicator--b2dcb917-d64d-4d24-a208-6b835850e287", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0401b3-43bf-4ddc-8f38-0efd772cb5c5", "sighting_of_ref": "indicator--d22879c1-aea9-45f1-ba2c-8180924482d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a130b1d0-d730-45a4-9140-24cf12d209cc", "sighting_of_ref": "indicator--d601bd4d-70b3-4ead-a753-a76d0db5ad57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22553929-751d-4fe3-b733-ab06aee73be5", "sighting_of_ref": "indicator--d601bd4d-70b3-4ead-a753-a76d0db5ad57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f733151d-4cf1-4337-a618-3bac66ff85d1", "sighting_of_ref": "indicator--41c0b602-fd7b-4053-bbb9-08bbd5ea79ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f743002-85fa-48db-aae6-35d897e10ddf", "sighting_of_ref": "indicator--41c0b602-fd7b-4053-bbb9-08bbd5ea79ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44482a-9677-4ea0-8c00-c940648591fd", "sighting_of_ref": "indicator--61c5c7b1-3927-4957-984e-68e9eabea3fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483b27a0-951a-4381-bed0-c505627fac63", "sighting_of_ref": "indicator--e05c9cc8-4023-4b94-b81d-fadbb870c0ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ababb8a5-5f16-4def-951b-a6ed74e8812f", "sighting_of_ref": "indicator--e05c9cc8-4023-4b94-b81d-fadbb870c0ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7348cce-5830-4685-bd33-88c65f954a37", "sighting_of_ref": "indicator--2601e58b-edc8-4fec-8293-03416f0cd69a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd873155-7b81-4705-b905-ad0d0556a253", "sighting_of_ref": "indicator--2601e58b-edc8-4fec-8293-03416f0cd69a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8feacf88-a640-4722-a93d-de193c6d3ad7", "sighting_of_ref": "indicator--4efbd07f-9b00-4dce-8d98-0d46efca5e19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41db59-a7ad-4f93-84e5-58bff6452955", "sighting_of_ref": "indicator--4efbd07f-9b00-4dce-8d98-0d46efca5e19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053adddc-5ae3-4d21-88dd-86fd31048178", "sighting_of_ref": "indicator--158924e7-3efb-483c-af73-d626a955312e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3470b7a-cf7d-43c9-b43c-ce180647fd3d", "sighting_of_ref": "indicator--158924e7-3efb-483c-af73-d626a955312e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467b5781-a5d6-42a8-8a3e-8368cd17ff0c", "sighting_of_ref": "indicator--308cde88-3e2e-4746-b757-1f384bd69415", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeef857f-7e05-4df2-801d-e8ad1446614b", "sighting_of_ref": "indicator--6ab979cb-48c8-45d6-8a3a-29117db33f2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baadb01c-f3bd-494b-86a2-49b9c8ef3415", "sighting_of_ref": "indicator--6ab979cb-48c8-45d6-8a3a-29117db33f2c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb388e79-8d5c-48ef-9ea0-70d59a46e130", "sighting_of_ref": "indicator--287bd1fa-550f-45f3-8fb1-f1dd0a6542cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf46ade-757b-47ad-8b7e-836c006e02b4", "sighting_of_ref": "indicator--f6cc0ccc-5cd9-49d7-803b-ea428969ba28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbaaa22-6c9d-4551-89b9-8bc2aa5de84e", "sighting_of_ref": "indicator--ff9cab3e-353d-402b-b93a-6fb8c99a7e8c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7789e6cd-db8c-4c23-af8a-445a674d6aa4", "sighting_of_ref": "indicator--9fddee5a-b78d-4cd9-8ec7-481563fc26aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5462c139-4b28-475b-a4f2-ec7aa344df39", "sighting_of_ref": "indicator--c885cfe3-a73d-48c9-b911-064327507cc7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fd6ce2-2cb6-4eeb-9ea4-6019e53f1e7e", "sighting_of_ref": "indicator--514156e1-6426-4428-b574-2d479af52d7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff525f80-f158-4d95-83f9-e7e852731a3d", "sighting_of_ref": "indicator--514156e1-6426-4428-b574-2d479af52d7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785cff07-e6d3-4498-a918-3236a89a1d91", "sighting_of_ref": "indicator--94f94f9b-7986-4d57-8397-337c0e0d9ad0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3689a1a9-a439-45fa-a085-8921000bce69", "sighting_of_ref": "indicator--94f94f9b-7986-4d57-8397-337c0e0d9ad0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7abe5d-cb2f-4769-9696-19982698ab21", "sighting_of_ref": "indicator--281b6e7e-3e86-41e2-ad10-7ffebafce811", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb6fba-c406-40f2-8d4a-5de067d6e20b", "sighting_of_ref": "indicator--935f39d1-7214-4966-9d7e-8647af1489ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9488322-9db3-41a0-85e5-ed01d2278581", "sighting_of_ref": "indicator--dae2832c-1673-4dd0-bf67-0b8ddf2ef1fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eaf00a-fde5-4219-a7f2-4169a6d4f713", "sighting_of_ref": "indicator--0f653457-0ace-4ec1-82d5-347d773bc8d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b771ce-dc1f-48a2-b554-56d3989fe578", "sighting_of_ref": "indicator--0f653457-0ace-4ec1-82d5-347d773bc8d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f70508f-cf43-4f6d-b130-032c0a91b085", "sighting_of_ref": "indicator--2e25cb2b-a470-457d-8aca-286b6465c39c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01942c3-ff66-428a-bc72-a7b1a5f79703", "sighting_of_ref": "indicator--ae1dd067-7584-4aa0-abc2-cf2ff080f658", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fe2ddb-597f-482d-9d10-842da58a2146", "sighting_of_ref": "indicator--d1fa2488-7b41-40fa-bef0-d69db0956f7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff72571-cbf0-4589-824c-dbdc4e339e37", "sighting_of_ref": "indicator--d93529cc-f54f-479d-a383-4b6a4a6a85a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3a11b9-5791-4d76-bf94-3ae73e703e34", "sighting_of_ref": "indicator--e3541ed4-8a00-4914-bb1f-e97bdc450476", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbe2757-742e-48c7-b881-9fe6061e0727", "sighting_of_ref": "indicator--e3541ed4-8a00-4914-bb1f-e97bdc450476", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373f0cbb-03b2-454d-8b56-555b03ccff0d", "sighting_of_ref": "indicator--399b0249-3110-4a77-84fc-99e63e26652c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc071b-2623-4d8b-8dc1-632f066d5667", "sighting_of_ref": "indicator--645295e2-b76e-45cc-865c-caba4de7f2ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12454dd5-af03-418c-869d-0774ed42636d", "sighting_of_ref": "indicator--0f700c9c-f9cd-4d8d-863b-4f77ca81fb7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37424bba-b878-46b1-a479-da2f52012177", "sighting_of_ref": "indicator--2646b60f-6723-453e-bcb3-250d19538c74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0135ac37-9576-4c89-9650-0a16a002e025", "sighting_of_ref": "indicator--2646b60f-6723-453e-bcb3-250d19538c74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545ec8a7-49ed-4239-9484-562f4ef0f684", "sighting_of_ref": "indicator--c0edb77c-bbbf-48bf-af90-c83abdc9b900", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36032fcc-1e3a-4009-8f0a-349b67c26dc3", "sighting_of_ref": "indicator--1122f1cc-4fed-42dd-b345-2d45b84c2bbd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7918bab1-ad44-4c5e-bfd3-c45cde61c58f", "sighting_of_ref": "indicator--931f94bd-dbb2-48d9-9ce2-1b5753606918", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847fd339-43f7-4767-8755-c7e5153de896", "sighting_of_ref": "indicator--1990c691-a224-4da0-a0ad-33d8bf62eb3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f67e77-ed0a-4e50-bd79-04272673c99a", "sighting_of_ref": "indicator--1990c691-a224-4da0-a0ad-33d8bf62eb3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9060eb9c-2b67-49a0-a7e0-043053d91e1e", "sighting_of_ref": "indicator--d51a641b-05e0-4000-acd5-ef7e558b6dea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e639fd-4904-422f-85dd-781c9be12ab6", "sighting_of_ref": "indicator--d51a641b-05e0-4000-acd5-ef7e558b6dea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1e1093-aa13-49f7-8e63-82100f1a5400", "sighting_of_ref": "indicator--2f1be6b6-42a2-49cb-903b-12af94b00ab3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b1e1b5-d814-4b9e-9c27-ae656eceb9d1", "sighting_of_ref": "indicator--c846f402-9ac0-4772-9dc2-9b923b3daf36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd53c124-2525-453d-8c1a-4f0c2676fcd8", "sighting_of_ref": "indicator--c846f402-9ac0-4772-9dc2-9b923b3daf36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42cb595-fc00-4b5f-849c-5592e1e24ef7", "sighting_of_ref": "indicator--36854511-837d-4721-8bb4-9feab3e2c198", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5f99a7-0e65-4665-9c0f-21647b2ae573", "sighting_of_ref": "indicator--36854511-837d-4721-8bb4-9feab3e2c198", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c096939-db7e-4ce4-9a49-d5df00b9a38d", "sighting_of_ref": "indicator--425e89d0-a0ad-4dfd-810a-23b56eb511de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee1cbf4-3c8f-4457-bf65-50ca9338614c", "sighting_of_ref": "indicator--742b0d0e-7645-4030-a49c-86938398463e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955a1efb-9ca5-4d8d-bbe4-85f0e3cd9dfd", "sighting_of_ref": "indicator--0b316fff-658d-4e1e-b4f0-888543208f1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40084e43-b805-4458-a6cb-ee20f24de67c", "sighting_of_ref": "indicator--0b316fff-658d-4e1e-b4f0-888543208f1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c5bf60-ecce-481e-8a75-f5ced7dfb541", "sighting_of_ref": "indicator--c247e2f9-158a-40ad-b404-c0cf51dc1afd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f543915-2292-49a5-ab02-d7ac35dcc5f7", "sighting_of_ref": "indicator--c247e2f9-158a-40ad-b404-c0cf51dc1afd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a73d82e-266a-488b-b078-d74138e86d47", "sighting_of_ref": "indicator--a6c9ea75-76b7-4018-aa66-f78d9597c6c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c19072-ea1f-4752-a9e1-5d06dec2cb69", "sighting_of_ref": "indicator--93866448-892e-4b9b-9460-240b9a3f8bee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07f5664-84ce-415d-a22c-c9e0fb9468c9", "sighting_of_ref": "indicator--6156d59d-93ac-46ca-b6cf-6c0851c5b526", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f52978-3834-4516-8af9-d4564e51c490", "sighting_of_ref": "indicator--10b46970-18df-4f13-ab2e-7e596f1ec0af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97c22e8-214a-46cf-ab4d-0b490e7d3f53", "sighting_of_ref": "indicator--ab4c76c9-10c1-4ee8-b59a-a2ba1e0875ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b84e80f-eb7a-4c9e-8c17-670cc02d2ac8", "sighting_of_ref": "indicator--ae4bf206-da7e-4882-b282-7c6c4d7c4b03", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8bcca3-b084-4639-86f8-3a6108830dd0", "sighting_of_ref": "indicator--4407208b-a8c3-4b2e-8b6b-92a678cb7f21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161699ed-3c11-4b31-a66c-d97785f9cdf7", "sighting_of_ref": "indicator--4407208b-a8c3-4b2e-8b6b-92a678cb7f21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993efb09-45f9-4312-893f-a8ff4ae533d8", "sighting_of_ref": "indicator--12e4bf5b-abc4-43aa-98d4-afec7df8b5d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda2fcad-c54c-4c7a-937a-db1a8c65ee4d", "sighting_of_ref": "indicator--dc39b69e-92e5-412c-8631-5e9d9b0e2b8b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c5e231-f9e1-48cf-994e-184b7d573ee6", "sighting_of_ref": "indicator--0022f62e-08f2-453c-926a-7aff52550df6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea13c42-dd89-401b-a00f-d6736cb7377d", "sighting_of_ref": "indicator--f9e3c3d0-38b6-4a4c-b283-a66fb9abcb40", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6181a09-63f4-4ce3-9b85-d339d41e9b97", "sighting_of_ref": "indicator--a8297d56-a169-406d-9d01-2b19da4efc75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a3f2fa-c012-4052-866a-d15a01c41438", "sighting_of_ref": "indicator--59304ec9-0ddd-4bdb-a288-10c86abd6843", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def25d7e-835f-4c98-877f-7940ee105f39", "sighting_of_ref": "indicator--f27e220f-e952-4a8b-822e-efff95e22959", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4cb131-4ef7-4668-a38d-3c9b7d998792", "sighting_of_ref": "indicator--c46801f8-078b-4eea-b3f1-8ca092eda9b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ab6203-ba43-4cc6-a76a-73d4553b1e87", "sighting_of_ref": "indicator--ca7a4ba8-25dd-4090-81d6-10d6e1d0cdcd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd2d628-8641-4c8a-a21f-a4885ac278aa", "sighting_of_ref": "indicator--ca7a4ba8-25dd-4090-81d6-10d6e1d0cdcd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be20c642-d519-4b4d-9f08-a606d087dc14", "sighting_of_ref": "indicator--c4457e69-5570-4c76-a85d-2faabc46bdbb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605a4bf6-03d6-404b-94a7-935d48d52667", "sighting_of_ref": "indicator--4e0dad29-9138-4c4a-bef5-9b53e3e6103e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2fd6e2-5e3c-4353-b084-a7578fc3cd91", "sighting_of_ref": "indicator--37b3da28-67a7-45e7-a13e-24d56d45dc50", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0417bfa-99c1-4bf9-99c0-ea506ddb7a8f", "sighting_of_ref": "indicator--37b3da28-67a7-45e7-a13e-24d56d45dc50", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143093b9-decf-48ad-bcd2-552f46dec767", "sighting_of_ref": "indicator--e6327301-526a-4682-b7f0-715c5699489f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9740d19-3d5b-42d9-96d8-848f4784706c", "sighting_of_ref": "indicator--0b7e2b12-faa0-4538-9deb-bf98ec88ea73", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b032359f-58d4-409a-8c38-940f4bbfbdaf", "sighting_of_ref": "indicator--05bbd16b-dabb-44a5-a277-cd0f28a0f8a3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220dcb2e-b299-440d-b06b-539d8800b18a", "sighting_of_ref": "indicator--9e4f338b-eb49-4fad-876b-e4418aa0b414", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d91ab1-ad48-48ca-b5dc-058f8dfcf0a2", "sighting_of_ref": "indicator--715df47a-c79f-4851-b27b-d794318b0a78", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3097982-4d52-4f24-97b1-260143e55dce", "sighting_of_ref": "indicator--715df47a-c79f-4851-b27b-d794318b0a78", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965d8891-18ac-491a-9f97-34a35e597c57", "sighting_of_ref": "indicator--00b2cf16-575f-4d61-8449-e6407267b817", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6046204-e423-48de-8b1a-45df65e01646", "sighting_of_ref": "indicator--00b2cf16-575f-4d61-8449-e6407267b817", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5581aa5f-8003-4c9c-abf8-eb13158641e4", "sighting_of_ref": "indicator--f535bbea-3d0b-4605-8283-1c90c00ddfa7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa3a725-2802-4f7d-95c0-67c0a2e6c384", "sighting_of_ref": "indicator--93066713-1a6a-402c-96f0-c8ee3bf02e07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf6cf77-3b93-4c3c-bccd-b35cf65affad", "sighting_of_ref": "indicator--93066713-1a6a-402c-96f0-c8ee3bf02e07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2bcaff-bc1f-46f1-a53a-19c18eb8e072", "sighting_of_ref": "indicator--7b58d929-3627-445e-92bd-704653521b21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db9816a-2292-4f0b-8c4f-5c87e7844e37", "sighting_of_ref": "indicator--7b58d929-3627-445e-92bd-704653521b21", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700ed1c6-c3bf-4f5d-8440-3da1e9438846", "sighting_of_ref": "indicator--14d0f2f6-929e-4b4c-83fd-189738d84088", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3a4ba6-ecc7-4117-a470-58f547394d64", "sighting_of_ref": "indicator--ff1babf4-37e8-4b84-a272-c2b013f7a0f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdcbe97-f9ed-4e69-b950-abe6515201e0", "sighting_of_ref": "indicator--ff1babf4-37e8-4b84-a272-c2b013f7a0f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb8fda0-9924-4aa0-a877-f63ad8341e21", "sighting_of_ref": "indicator--8bbacbf8-a299-4318-a881-0b94ad9ef6c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaf7e3e-0629-4d76-bbc8-de70b3f08523", "sighting_of_ref": "indicator--8bbacbf8-a299-4318-a881-0b94ad9ef6c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230e5a72-270f-457b-ad16-2dcfaabdd958", "sighting_of_ref": "indicator--bcd7b1a8-6663-4348-a4b4-acac747d941e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301a3412-78ad-44b8-b71c-87c4211a8fda", "sighting_of_ref": "indicator--bcd7b1a8-6663-4348-a4b4-acac747d941e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a889218f-08d1-4090-b0b7-8119eea7a910", "sighting_of_ref": "indicator--3f286cfe-b245-4fc7-b407-4dfcce1118e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255a84c3-e943-426b-ad54-d6f844e8762e", "sighting_of_ref": "indicator--df239504-4a92-4a07-8e1f-d579d7bcb36e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973bf89c-68d2-4ac5-9709-af2ff93a75de", "sighting_of_ref": "indicator--1785eb2d-aa8c-4c5a-8685-5b80e19cb69a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44284586-34fb-4349-bdcc-d3df8306ef0a", "sighting_of_ref": "indicator--50d129db-05ac-43de-b3b7-8668e788be89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a986ae9-c3e6-4175-bc23-5099fd05b87b", "sighting_of_ref": "indicator--985a1473-8e9e-4a86-9a6b-def626077104", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c7e20-a13b-4afe-8d49-4fc6e19124d7", "sighting_of_ref": "indicator--985a1473-8e9e-4a86-9a6b-def626077104", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557d0dfd-a19d-49f0-9c3e-a32b52d15d70", "sighting_of_ref": "indicator--b23717a6-e51a-47db-9285-d8167424ad7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ad53fe-6682-4ff5-ac8b-3a66d8b1b991", "sighting_of_ref": "indicator--b23717a6-e51a-47db-9285-d8167424ad7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7acd9d-aac3-4995-b1fb-1ba8d7c29993", "sighting_of_ref": "indicator--488beb51-0eee-44c3-875b-a4055fdd7c68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb22bce-9359-432e-a48e-25726612ac2a", "sighting_of_ref": "indicator--292af905-85dc-47d0-9b62-0830294fc9bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fabe3e-8b74-47b5-870d-67cb77cbacd6", "sighting_of_ref": "indicator--8a04b72a-4c25-4310-a3c0-12e7ca66b784", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87d7927-38dc-45de-803f-c947f9ff08d4", "sighting_of_ref": "indicator--8a04b72a-4c25-4310-a3c0-12e7ca66b784", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb59cc1-43da-4888-ab5e-0d1a99f9da3e", "sighting_of_ref": "indicator--48db8713-5839-40b4-9235-89156ddbca6e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1439946-3cf5-4996-8f87-44ab64990de2", "sighting_of_ref": "indicator--053f18b4-73db-4a02-b65e-db4538f80f3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5624a416-0673-459f-af8c-dda502a797e5", "sighting_of_ref": "indicator--8789b052-1ce9-489b-a829-fb4b4c5b017f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea7af72-0419-49a3-a5d0-cf237a8531df", "sighting_of_ref": "indicator--bea3b5f0-a3af-4b52-935c-ac27a15f613d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2ef51a-9925-40ad-af62-179fa548e389", "sighting_of_ref": "indicator--01f1b25e-ff6a-4c74-83bd-f4406369aeff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee71ef3-019e-4bd5-b948-b20f9089c3aa", "sighting_of_ref": "indicator--cb1c5a22-250e-4884-855c-99e98cd06703", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d21d4e-d052-4e44-a23a-eb9da065a9ef", "sighting_of_ref": "indicator--573a208c-8b4c-49a2-9331-9ea70c287cc8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e50e45-aeda-490c-b476-9d049a38af13", "sighting_of_ref": "indicator--573a208c-8b4c-49a2-9331-9ea70c287cc8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275d6bdc-c8e9-4764-9b11-c27d54045b12", "sighting_of_ref": "indicator--b04cdbb8-34a2-4c92-a8e4-fc07c1294df2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78e4a8b-38c1-4f32-86f6-376d9c094250", "sighting_of_ref": "indicator--1e930451-7b9f-42b1-8a52-9a658c0def72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d829f7-2e01-4e4a-8bd8-9edab678a1e3", "sighting_of_ref": "indicator--a100fe84-9abe-41d8-9500-10d6f20f3cff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb62292a-17e3-4f79-ac4d-696d5122eb0e", "sighting_of_ref": "indicator--15acf48f-624b-4a43-93b6-e108ec96134c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2486ba89-0aa4-4a52-a718-4057b114049f", "sighting_of_ref": "indicator--798f2f51-b384-43ff-a694-63f46cdfa558", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3e5500-bce6-443c-8a49-0ad8407fce9c", "sighting_of_ref": "indicator--798f2f51-b384-43ff-a694-63f46cdfa558", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47372be6-b5a1-461e-b1ed-c17312109d7b", "sighting_of_ref": "indicator--d84837df-e6d0-4c10-9259-17083220a762", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b99b8c-6b79-4d3f-8f43-f498b5ee1768", "sighting_of_ref": "indicator--e643e740-9a48-4607-b660-729d2b109d6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da38cb02-4a62-444a-90bd-2af171f3deac", "sighting_of_ref": "indicator--04a5a811-dda3-4532-99e7-c69affa73d57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61003a27-4415-4dd5-a44d-bff488486e0b", "sighting_of_ref": "indicator--04a5a811-dda3-4532-99e7-c69affa73d57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b6f104-c8c7-4203-b894-eef9d56a7ea9", "sighting_of_ref": "indicator--296571d9-0a9b-446a-83da-64308f8e2c5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e58312-99b3-43d0-aae4-43807cde32e3", "sighting_of_ref": "indicator--8e672b38-b385-43a0-8307-f0da129986fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88fce4-bc46-4c22-b0af-85249fc811c7", "sighting_of_ref": "indicator--8e672b38-b385-43a0-8307-f0da129986fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d151d0a-a3bd-483f-b420-0eb9102eaefe", "sighting_of_ref": "indicator--943c3265-e0d6-4b2c-8556-a78056b9031a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e415a87e-595d-42bd-90d1-3e4443a6723e", "sighting_of_ref": "indicator--c4195910-0aa7-4337-9140-d52f15d35258", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76be3c0-db86-43a5-9bda-b53001572573", "sighting_of_ref": "indicator--c4195910-0aa7-4337-9140-d52f15d35258", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b914e5-586f-4988-accd-585e27590fee", "sighting_of_ref": "indicator--6a431835-6f58-456b-b538-44c36c55dd69", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e130527-954b-4dd4-bb43-b983ae83da1a", "sighting_of_ref": "indicator--a5d70126-da3b-454a-97d2-00a70b355bfc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd92949-5dfe-4ca1-91fe-5c6953f75104", "sighting_of_ref": "indicator--d4a11e62-dbd0-4ef4-a3f3-1576822d322f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182cc324-c693-4b1c-b207-892913daf6cb", "sighting_of_ref": "indicator--d4a11e62-dbd0-4ef4-a3f3-1576822d322f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81487f34-1134-443c-b65e-af2d46809efd", "sighting_of_ref": "indicator--e97986f3-79d1-421c-8c9b-feccf70fd603", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b67947b-f411-4506-8477-e932f4a05234", "sighting_of_ref": "indicator--d4d2d6be-3285-421c-9ef2-f349b16f78f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ea9efe-5591-4a7b-9f8b-28dcf828bcd3", "sighting_of_ref": "indicator--d4d2d6be-3285-421c-9ef2-f349b16f78f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b808e973-b2ae-4835-b4aa-160fd7e2490b", "sighting_of_ref": "indicator--4e08b402-fdef-4cbf-9cb0-c950f96069d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4724195f-65c1-4ac8-9bab-b8c87b03efb1", "sighting_of_ref": "indicator--8d21f8c9-d47a-4dcc-bc65-b6e17c386ed2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fb8009-116a-4b19-a82c-11f08db0de04", "sighting_of_ref": "indicator--022d44ba-8e03-4025-9ac8-6cf2fc6703b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de30863-7b87-45a7-8f24-c76d8b2d14cc", "sighting_of_ref": "indicator--08f9494e-725b-4001-bb3c-d08f72e5a367", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec91502-4836-4d10-8619-f3f854201c23", "sighting_of_ref": "indicator--08f9494e-725b-4001-bb3c-d08f72e5a367", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c4c5c7-8401-4a26-bc87-727fb9c2972c", "sighting_of_ref": "indicator--e63f3a64-ffa2-4e48-96f8-72c0ca5d4793", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e9d149-7c37-49d1-a07f-216d50e2063b", "sighting_of_ref": "indicator--01f5d65c-57f8-4fd0-b01b-b02063520788", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a04da0c-14ce-445a-b8ca-267983286eb1", "sighting_of_ref": "indicator--6a2e2e4d-fdeb-4e79-a496-a10c7919c765", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c344a4e5-1f00-41e5-9e63-c6cb3f1a912e", "sighting_of_ref": "indicator--89d90d56-5085-49ca-b0ce-82d79282bed6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ab84d5-a2c4-4465-aefe-9e12d51fbd03", "sighting_of_ref": "indicator--89d90d56-5085-49ca-b0ce-82d79282bed6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256402e2-2399-4915-a6c0-8227be6c3e04", "sighting_of_ref": "indicator--214d0ce0-0926-4a5a-9449-193eaa90a194", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764268a9-498d-429c-85c8-5985a2873064", "sighting_of_ref": "indicator--34b3a1b9-4259-4d9f-8ae9-1b8915d483c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf0aeed-d192-4483-bc85-1a50b85c4284", "sighting_of_ref": "indicator--dd124595-69cd-4166-a294-7c067783396d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d19b7-7e52-4069-bdc2-3fd3664d5cc3", "sighting_of_ref": "indicator--98cbc974-286d-4376-97b8-f29be62c5cb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c709705-a5f9-4f16-88d6-bb1d920ad58e", "sighting_of_ref": "indicator--2916c3d6-b75e-43d0-a622-9041ec41aa45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd840b33-e395-4a35-9b24-97c311e18593", "sighting_of_ref": "indicator--f4e478dc-9d6c-4417-9439-35d29bdb8bde", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c712a083-52a0-4fee-8039-f66cf42a77e8", "sighting_of_ref": "indicator--87ebaa89-0ce2-4625-a8f1-30d73d387c71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430bc070-3cd8-4234-877a-44a5643d47e6", "sighting_of_ref": "indicator--02e8981a-45a9-4226-a43d-730b75118ab2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27ba9ce-8d57-4dc6-a7eb-b3505673f920", "sighting_of_ref": "indicator--c92cb686-273d-4927-bec5-b1d30d44a8e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bfc1d6-3a08-4841-86b2-3419a30237d0", "sighting_of_ref": "indicator--6b98c07c-bde7-47e3-8920-76b93efa23b2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e3482-aafd-4870-9cc7-20bc85a27f52", "sighting_of_ref": "indicator--97d1f34d-8436-454d-9cc0-aee935efbf96", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db51dd89-79ce-486f-b793-7977cdcea3b7", "sighting_of_ref": "indicator--dfe983a2-4bde-47b0-901b-798bb34c0eca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d955299d-558a-4364-b830-3f8a5433e84b", "sighting_of_ref": "indicator--42b7f605-c6dc-475c-ae6f-0aaa1249701c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566f685e-3cb6-4793-b2a6-823002a9bb48", "sighting_of_ref": "indicator--42b7f605-c6dc-475c-ae6f-0aaa1249701c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18929016-34c6-4d9c-a473-a0899b35e672", "sighting_of_ref": "indicator--af887b2a-016b-4d54-bdc7-d52aee761a0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e994de0b-15b9-4591-bbcd-6ab66cc84be7", "sighting_of_ref": "indicator--af887b2a-016b-4d54-bdc7-d52aee761a0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08b168d-ab24-4e04-ba7b-e5a0254d8da1", "sighting_of_ref": "indicator--be301cd6-7037-4c00-a58a-697a773dc396", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb62ab42-6c9b-402e-a9fe-e7126c4d35a5", "sighting_of_ref": "indicator--32208856-8f03-4172-a7f2-839c9b526050", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cbdb47-6248-470b-a3a0-68551a34d37b", "sighting_of_ref": "indicator--9f284d61-6ad1-4979-9f14-2b4e34f4f762", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c494b-93a5-4925-9e01-dd2276f52707", "sighting_of_ref": "indicator--07ea2c70-5398-4f73-b1b2-4ce42907e651", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824d0ea3-baed-4fff-8340-09c423479af4", "sighting_of_ref": "indicator--07ea2c70-5398-4f73-b1b2-4ce42907e651", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a407f2-93cb-4286-8197-5f59486e5e89", "sighting_of_ref": "indicator--34292f2d-9688-4f8c-bfb9-7e6eb5eb669d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35938755-3710-416a-b36b-531d4dbf8e0a", "sighting_of_ref": "indicator--f7fe722b-3f87-4217-be66-d35167f6b386", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333e97b5-d68d-4781-bf97-5471e2f74b8a", "sighting_of_ref": "indicator--5f2b78d5-c04e-4fb7-9cd4-f2c0b49e7790", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a34b399-efb9-4629-bf31-93be431b4f1a", "sighting_of_ref": "indicator--c757fff4-037e-4025-838f-19a2dcc72398", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcdf474-ad52-4673-b614-beef77f224b3", "sighting_of_ref": "indicator--bfa19179-014e-4b15-8ef7-6b96fd807279", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e755d2c-c973-4109-b0fa-62a1be29f2c1", "sighting_of_ref": "indicator--6b822230-10cf-48bd-a302-4b7ceb1932a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c78114-1e15-4df1-98ab-c56b5187965f", "sighting_of_ref": "indicator--edf1e294-0dd0-4a9b-b3ac-b7fcdb105ec4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275989fc-8996-45d6-9a08-5c6f9d94510a", "sighting_of_ref": "indicator--e06042a7-1e37-46fe-b3da-8546ffce087e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fa16b5-ac31-4287-b900-58e30a6ab24f", "sighting_of_ref": "indicator--e06042a7-1e37-46fe-b3da-8546ffce087e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b527c57c-2a78-45e8-a516-07da68c520c1", "sighting_of_ref": "indicator--0ee2c801-ae71-40ab-b888-29dcc3741f61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3c6a87-4be3-405c-b05b-a19efff5d8e7", "sighting_of_ref": "indicator--6438d679-9d18-4dbe-be18-1d16076d77d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e6ba51-1120-4b37-afb1-fa5ab25d4706", "sighting_of_ref": "indicator--6438d679-9d18-4dbe-be18-1d16076d77d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12bbb34-aa15-4d52-add2-078f8239c239", "sighting_of_ref": "indicator--ebbb24ab-42e2-4b5c-a713-0932219c460b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40c8a9-b2a6-4113-a8ee-cf32f290140d", "sighting_of_ref": "indicator--0a93f8de-1c11-48aa-b4d2-21a3bb49d9dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f35d86-2513-4473-a504-bdf1c31759ce", "sighting_of_ref": "indicator--0a93f8de-1c11-48aa-b4d2-21a3bb49d9dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c968b3c-119f-4f50-8984-e0ea33a26e8f", "sighting_of_ref": "indicator--b4cba098-09f6-4e8d-b429-8fbdd9921ef6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f497672-784c-42e8-8b67-fbbe311f67fd", "sighting_of_ref": "indicator--b4cba098-09f6-4e8d-b429-8fbdd9921ef6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e68e8e3-4cdb-4bf7-a224-b7d24e94cd0d", "sighting_of_ref": "indicator--00caf584-314c-4e68-af4a-1f7283264236", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdf333f-d2af-4e25-bab5-7670ca4ccc05", "sighting_of_ref": "indicator--4e557ba0-99f7-4332-9dd8-acf797b4b62e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc79646-a230-4430-b538-761c4a5c822a", "sighting_of_ref": "indicator--ada1516c-b4e7-42a9-9e10-d445a7e046c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9714b58-245f-4dcd-a7de-bf94312ea7e4", "sighting_of_ref": "indicator--6a02f3fc-e495-4089-b2c9-d474fbfe8efb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c303f3d-ec8d-40ad-b9cb-2ece35832e08", "sighting_of_ref": "indicator--6de6ade2-b078-49f2-8a0c-103c7144dd48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a15e7e-4b3a-403d-8992-97ea4a18539e", "sighting_of_ref": "indicator--32933e52-862e-484c-9b0b-89ed84075a6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04391045-e8a4-4fe4-983d-868143f38352", "sighting_of_ref": "indicator--cbb57380-a8a9-42f7-9e4e-d0511edb1f4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645be875-04a7-4b41-bdc9-072f9d0cdbcb", "sighting_of_ref": "indicator--6edc9050-b932-4d37-b086-6fca71780618", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5173bbb2-becb-40c3-a4f4-8f6f8057c2c4", "sighting_of_ref": "indicator--70e1fa29-eb23-474c-a959-5524740ddd18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9615fa02-7913-4a7f-879a-dad0b98594ee", "sighting_of_ref": "indicator--4f77a9b3-f825-41c6-9154-2c4994c1a8f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6a20d-0e37-4457-95bc-9c76fd2457ed", "sighting_of_ref": "indicator--cb04c4d9-ac41-4d20-ad9c-5800c882f133", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01228a09-72a8-42bb-bfe9-2283795770c2", "sighting_of_ref": "indicator--6d265b88-39f6-4546-9ba1-73a777365337", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cde7af6-def9-408a-9392-a9bee0a5fc7c", "sighting_of_ref": "indicator--6d265b88-39f6-4546-9ba1-73a777365337", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2e13a8-1c19-473c-8e45-7f4a582b888a", "sighting_of_ref": "indicator--d9f610f8-d0cf-49aa-9b05-8ce0e3604deb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5371f6-2752-454d-86e8-16d90178c7bf", "sighting_of_ref": "indicator--a97e75f4-4204-400d-b6db-23bde587f7d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162a819-2f83-477c-b504-8961abbfad35", "sighting_of_ref": "indicator--302848db-a819-4ab7-8be1-36bdb621d41b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c7172e-8199-4bee-8432-72670279ea99", "sighting_of_ref": "indicator--8d8c3a75-1db0-44d4-9a27-309d26790fcd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec914fc-45ad-41c8-857b-0b95f503c92f", "sighting_of_ref": "indicator--afd4ee70-f773-4295-885b-f308354537d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df541c8d-a680-4791-9b65-152b46a5f9bc", "sighting_of_ref": "indicator--eb2eaa6f-df85-489a-b277-a36e2e26a7bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d54d7f4-58e1-413e-92c3-23202b71bb12", "sighting_of_ref": "indicator--74a93bfd-9596-4112-be43-0bed271b2320", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ed0c04-b17b-4372-be77-9856ca870dc3", "sighting_of_ref": "indicator--43d86ea7-ce2c-4c12-a6e3-8099922c954e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5667fd05-3b91-4524-8b1e-3688dc24d7c3", "sighting_of_ref": "indicator--94458a00-a82e-4c90-afd3-cfabec346adf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046ff2dc-e298-499c-93e0-e902d15ecdc5", "sighting_of_ref": "indicator--84e3e87e-962c-4a23-b008-e1cb598ad82f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3119852-93e2-4c57-b24f-14069de89872", "sighting_of_ref": "indicator--07b9884d-adf0-48a7-b417-67bae0941439", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca7b13e-bd8c-445b-92d8-f99ffada741d", "sighting_of_ref": "indicator--5be61559-6910-499c-b380-eb0ffda8cc86", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7593b0b5-0eb7-48aa-b171-361e35bbc279", "sighting_of_ref": "indicator--9693c641-9dae-447c-9d90-1911c7deba5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7979e98e-9035-448e-8416-36aad6205692", "sighting_of_ref": "indicator--436dab63-ecc7-4df3-b974-c5b25e4221f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f94d23-2e27-42ac-9d5a-4d823b6109f2", "sighting_of_ref": "indicator--3859d04c-79c2-45f7-a0a1-c6aac2ec9396", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9306acd5-da70-4b14-8534-1f3d1ac8092e", "sighting_of_ref": "indicator--3859d04c-79c2-45f7-a0a1-c6aac2ec9396", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb793805-34ea-4aa5-8515-5b7584425b38", "sighting_of_ref": "indicator--98c0c426-e6d9-4c06-be0b-84fdaa0c5178", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e42674-f9a5-43f8-8afc-d2c56f8be7b9", "sighting_of_ref": "indicator--ddc66113-4f35-44a4-a4f5-38e5dc02b2cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff8ac6-22b1-432c-8fbb-e6f039de2913", "sighting_of_ref": "indicator--1708288c-b2f7-4b11-b9ce-41e3cf677172", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317abf23-1e1f-4f98-a115-0790373990be", "sighting_of_ref": "indicator--c54c37ab-a724-4331-9dc5-21703c7bfbf3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54dadca-b095-4a67-b6b9-126ca078c1bc", "sighting_of_ref": "indicator--c54c37ab-a724-4331-9dc5-21703c7bfbf3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c48a7a-21ba-4166-9216-b6c98594ce02", "sighting_of_ref": "indicator--b6f3c044-783d-42a7-b2b4-37cc255145e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546c9699-f1d8-4b04-925b-1a13613d82d1", "sighting_of_ref": "indicator--8cb6a4c8-3343-4fc3-8f0b-8853b0f8f5b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745f5a68-fe92-4989-901b-f14d422716cc", "sighting_of_ref": "indicator--8cb6a4c8-3343-4fc3-8f0b-8853b0f8f5b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baefa6a0-4549-4dc0-bac3-a23fef126382", "sighting_of_ref": "indicator--2d478a4c-886d-4d1b-b41b-770e01b8c7d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74aef92-d0d3-49f5-8bf8-3d3b0859133e", "sighting_of_ref": "indicator--38724584-9c68-4cba-8c30-e09beab0f616", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a76011-e2e0-45dc-91c1-dc26c89dfa40", "sighting_of_ref": "indicator--896af93c-dd6e-4ec4-91ea-c28fe808b49b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d057bf37-4866-4922-9ffe-4ae3cd593c2b", "sighting_of_ref": "indicator--2305b6ac-4bf6-4eef-8cc8-5782a59afd23", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376c205e-0c63-4169-8a54-59c5a29ab7af", "sighting_of_ref": "indicator--0f136567-151f-4e76-a7ce-7f606cf669b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693ac453-8b48-4e10-88ed-f1bb8451c19b", "sighting_of_ref": "indicator--4e9e5e7e-bf24-4e19-8e4d-191442b9772d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb50933-9025-4ff6-9ed1-0abc2f5cc1e4", "sighting_of_ref": "indicator--4e9e5e7e-bf24-4e19-8e4d-191442b9772d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34597a6e-4a36-452d-be17-6573b814e80e", "sighting_of_ref": "indicator--ae0b4523-ab49-4d49-87aa-98c74c61c921", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fbf964-b22a-4e27-9a86-66db46a49b1d", "sighting_of_ref": "indicator--ae0b4523-ab49-4d49-87aa-98c74c61c921", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8de246-4100-47f6-8044-72d2210a976c", "sighting_of_ref": "indicator--eaf700fa-6ef5-4a44-8db2-4feeac255dc1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dae3a5a-84e0-4982-8b87-9ac2f1dd769f", "sighting_of_ref": "indicator--0e4fb351-b5e5-48e8-928a-06ee8855dfd4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6d1bcf-5b13-44cc-adaf-26f2c8e0b834", "sighting_of_ref": "indicator--4c36541a-20cc-4269-8bb7-420696eb2d6e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a9aa8-2a7c-4b21-9589-aecde4cc5516", "sighting_of_ref": "indicator--4c36541a-20cc-4269-8bb7-420696eb2d6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77507dae-81f4-42d1-8b63-b317f45618aa", "sighting_of_ref": "indicator--c4257007-c498-4187-b22b-8685ad1cb13c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ccf134-1c8d-4a36-a46c-a031ec7ae177", "sighting_of_ref": "indicator--c4257007-c498-4187-b22b-8685ad1cb13c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7372698b-7f5a-40d2-a196-fd354e4c5d94", "sighting_of_ref": "indicator--233bbf2c-1392-4c7c-b628-eeba16c7cec7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5f8be2-c4ae-427b-aec7-4805b8e833bc", "sighting_of_ref": "indicator--d36007b3-2a9a-476e-9f13-68e37bba899d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae09b58-f364-400c-8982-2542a1c423e3", "sighting_of_ref": "indicator--a7e4ca19-261c-4f95-8a40-11ba7aa63728", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16fc663-784b-4b91-9ae9-69e080d16b38", "sighting_of_ref": "indicator--7f2438a9-c303-4ae9-92e4-ad228562f039", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99f3fc2-d3df-492b-8bdd-e1d88b6f5200", "sighting_of_ref": "indicator--7f2438a9-c303-4ae9-92e4-ad228562f039", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dd211c-4e61-4754-b9e9-e6f42a4c6fad", "sighting_of_ref": "indicator--1418c3a1-ae8f-4797-9efc-e94f82904648", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4d8013-c296-44b5-a4f2-ad7ad14add94", "sighting_of_ref": "indicator--378652bb-5acd-47ed-94c8-17e75aadf80a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a98540-9431-482e-b3f0-0836146fc1e8", "sighting_of_ref": "indicator--479a2a55-3121-44a1-a38d-c8e565ea2be3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc8bfad-fd4f-4d1c-9dd7-3d2214984614", "sighting_of_ref": "indicator--45ce6a46-96f9-4d8b-a2f8-9c1ebf6da839", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0df5b98-9b4b-494f-8fd9-72c3a37085d3", "sighting_of_ref": "indicator--45ce6a46-96f9-4d8b-a2f8-9c1ebf6da839", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b64aaa5-3b67-41b2-b937-d66cd299fac4", "sighting_of_ref": "indicator--3c3aff22-7625-47dc-b9b0-d5c715f29236", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2695af60-b550-4288-8a48-ea2a5490c3c6", "sighting_of_ref": "indicator--b481900a-37b7-40d3-8931-344b952581b6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae897fa9-ea9f-46f8-98ba-6605733496fb", "sighting_of_ref": "indicator--8e281c20-0a38-43d2-a7e7-73ac95c641a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69007eb8-d352-47d5-abb9-cee1b623a70b", "sighting_of_ref": "indicator--8e281c20-0a38-43d2-a7e7-73ac95c641a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f83f00-23b7-428a-81bc-651d6a19dd6d", "sighting_of_ref": "indicator--fb7cd694-726a-49bd-bb84-14d6a51a0723", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ae471d-c9be-4645-86a3-1549d6ffed74", "sighting_of_ref": "indicator--a985a692-6596-4bcb-b81b-2cf3e373c613", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3855fd6c-e175-4c35-906e-46e5cf525e7c", "sighting_of_ref": "indicator--34c86eeb-b65f-4930-a525-6eaef475f58f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eea040-8ace-4d64-bfdc-d3214fefd306", "sighting_of_ref": "indicator--6b7a9a55-4591-4b84-8e7c-f22c82372699", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ef4e5a-d1cc-4c19-ba7a-2782d3c61ddd", "sighting_of_ref": "indicator--e2265415-a396-4234-a7ad-28a037142769", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601fca52-eb72-497c-8885-7021c9be1795", "sighting_of_ref": "indicator--51077682-a91e-47dd-9723-ce8854cfea3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5afbf94-0b6b-4da8-9c37-62f4e50ba71c", "sighting_of_ref": "indicator--51077682-a91e-47dd-9723-ce8854cfea3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69039cd-36c7-410e-852a-77b31f20273d", "sighting_of_ref": "indicator--a0fdcf6f-c722-4719-aa93-3a9669ff6f6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80032b0b-d00f-4487-b312-5756bca76f66", "sighting_of_ref": "indicator--38c50e27-69e3-415c-9765-1beb6dd9bc34", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7192f516-b086-428a-be14-88183526b33e", "sighting_of_ref": "indicator--f2c52e07-3638-40fd-96e7-d6238cac727f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0504ab-c5bf-4e8f-88db-3fd4fe77f548", "sighting_of_ref": "indicator--f2c52e07-3638-40fd-96e7-d6238cac727f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27be67b-a9ae-41db-9dad-f2c895d06fa4", "sighting_of_ref": "indicator--a4f063f3-9e59-403e-ae71-4ee2118bea07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c055d7-bcaf-41ed-93bc-ff6c0f2a49c7", "sighting_of_ref": "indicator--b2afa035-d1d4-4737-b743-1cad44d690c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea369510-3c04-4255-a4a7-0170fc7f7321", "sighting_of_ref": "indicator--4ed736ef-f6a3-4ae5-bcb6-3f1e968de6c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5426c58f-b209-4a22-8f90-735f46126d50", "sighting_of_ref": "indicator--d3fdbe25-b13d-4787-8a99-cf0ddba5079b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a2d062-a5f6-45ed-8d13-7a43500e6b7d", "sighting_of_ref": "indicator--d3fdbe25-b13d-4787-8a99-cf0ddba5079b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37c9813-83b9-4d97-8ee6-1e1c1548dd7b", "sighting_of_ref": "indicator--f14f8627-27c3-47ce-8d28-6b784c0ace7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1163671-6739-4b00-8274-270735f68f1c", "sighting_of_ref": "indicator--6e52492e-0df2-432a-b8b7-286fb61374ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8daf95-4664-4c8b-86da-fa8cebfce4cd", "sighting_of_ref": "indicator--6e52492e-0df2-432a-b8b7-286fb61374ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc6edf6-01b0-432f-aa4a-a6616f0a89c7", "sighting_of_ref": "indicator--61762c07-35c3-4a54-9f05-3887e85474c4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b3dcfd-8233-438e-a0ef-bf24e6dec7c5", "sighting_of_ref": "indicator--6037bfc8-d95a-47c1-882b-e1e2def26f22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f26d410-2413-4b5c-b21a-cdbc910efe8f", "sighting_of_ref": "indicator--3d3ea365-114b-4a0c-a954-a252fe90288b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f5610-ed7d-4dc8-842a-b04d7c1323e7", "sighting_of_ref": "indicator--feeb7eac-7889-4257-aa5f-1667b91611f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff43bfe4-2198-4283-979c-7ba285a03044", "sighting_of_ref": "indicator--feeb7eac-7889-4257-aa5f-1667b91611f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77af8bf-e49e-4bea-b813-d33d317be624", "sighting_of_ref": "indicator--fc3d7386-7d6a-4598-b449-7ca8471789e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd77e60-3c51-48df-9dcd-c18f92a8764e", "sighting_of_ref": "indicator--1085ebee-765f-4d08-9f52-83797136a344", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b819b0b-9df4-4166-a131-77a986e18ad5", "sighting_of_ref": "indicator--ed63efd3-e366-41af-8252-65054906fa62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa3403c-6d6a-4b67-81dd-050e0c32a1b4", "sighting_of_ref": "indicator--ed63efd3-e366-41af-8252-65054906fa62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b5face-c4e0-491b-92d8-7255f4f6c7b1", "sighting_of_ref": "indicator--50c5cd9f-a5da-486e-97c9-499ab8fed604", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7897812-c68a-457c-871c-4f3de098ed94", "sighting_of_ref": "indicator--50c5cd9f-a5da-486e-97c9-499ab8fed604", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa543c10-5767-46b7-b692-305c3f888f8c", "sighting_of_ref": "indicator--2d5e5639-b321-414a-b044-d089fd051b44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28a5511-9686-45e8-84ad-071301f2c0f3", "sighting_of_ref": "indicator--7bbf3a35-b142-49d5-9389-ac280517cad2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30547666-e3f3-4b17-862c-c01d9f639514", "sighting_of_ref": "indicator--7bbf3a35-b142-49d5-9389-ac280517cad2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e818cd5-80b8-422b-b10c-ee369cfaeb40", "sighting_of_ref": "indicator--e998446c-5639-46ff-955d-1e84b10f5cbe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93c6306-1de0-49d8-b9bd-f822242e1142", "sighting_of_ref": "indicator--e998446c-5639-46ff-955d-1e84b10f5cbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d23d110-4445-4307-b1db-4c272d43f077", "sighting_of_ref": "indicator--d45b50bf-962d-4af6-a555-1a467f428c4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e16048-9051-4bef-adf2-c0cd1c93c93d", "sighting_of_ref": "indicator--1db2c51b-0bca-438d-ae14-eb3828063e87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638cf04b-5a4a-43e7-b6b1-96f9cc558756", "sighting_of_ref": "indicator--f2029d9f-cbe3-41b0-bfc8-caa9d53c2c43", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5442b6cd-5c16-4d6c-9003-7f30f9ac402a", "sighting_of_ref": "indicator--ae50ca1e-c89b-41d3-8256-f9cec211fb1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7906e8c3-1db8-437e-bd16-59f5d46e7c65", "sighting_of_ref": "indicator--6aff1e97-a277-45a0-a256-5fcc83df6a66", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ffce8b-751a-4b05-b44f-ef2f3ee56b9b", "sighting_of_ref": "indicator--6aff1e97-a277-45a0-a256-5fcc83df6a66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5fb1c2-88e5-4d2e-95a1-c7d5ace6ee96", "sighting_of_ref": "indicator--df18a25e-481d-4c03-98f8-c1816ea9ba66", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b33cac-c9cf-42bc-a4f9-96f30603c2c1", "sighting_of_ref": "indicator--df18a25e-481d-4c03-98f8-c1816ea9ba66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a9b302-0bb7-4b98-a231-d817e111afa0", "sighting_of_ref": "indicator--2dc494e3-fa27-45dc-b16e-8c42f1f27439", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8987785d-77d4-4ff3-b012-640498a3775a", "sighting_of_ref": "indicator--bfbf6015-d321-4164-ac9e-69ba78fc4ac6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074e035e-8590-40a0-a55e-d7c8ce3ab897", "sighting_of_ref": "indicator--bfbf6015-d321-4164-ac9e-69ba78fc4ac6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8108390-a6aa-4b1e-8485-07c8df9eb10c", "sighting_of_ref": "indicator--4e7580e7-5077-4dd0-b277-683a8c0f408e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf2c71f-1525-45f2-85b8-e71e6bf3e545", "sighting_of_ref": "indicator--b70c74a5-b9e5-4170-b637-bda66ccdd3d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc783508-22ec-47f9-98bf-9edf74e8cb79", "sighting_of_ref": "indicator--7544d56f-2bab-461a-a0ce-474b72367a09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c472a091-9682-4c6f-b443-4dfd92772bd8", "sighting_of_ref": "indicator--1a8803d7-3253-4f31-99da-e13e51892a27", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b962d7e-9992-433c-897e-ab124613581c", "sighting_of_ref": "indicator--1a8803d7-3253-4f31-99da-e13e51892a27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b031cc-1d43-4b38-8052-67182b66924a", "sighting_of_ref": "indicator--35262e00-98f1-42d9-b8f0-e71edcd6478b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c282f189-fed2-4e2e-8f27-4084461eacf0", "sighting_of_ref": "indicator--69690092-d2b1-43e4-938e-09c5d625f8bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c21a1d-3c1a-43a9-865c-9dccfc32703a", "sighting_of_ref": "indicator--69690092-d2b1-43e4-938e-09c5d625f8bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60abbe8-903e-42ca-87c7-5a74b2f0aebf", "sighting_of_ref": "indicator--250ab4e7-9f9d-4c9f-bee3-ff9870d632e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98e7f78-ef11-46ee-b991-876a39071094", "sighting_of_ref": "indicator--250ab4e7-9f9d-4c9f-bee3-ff9870d632e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004ce9b7-69e4-4210-bc03-01431c814b7b", "sighting_of_ref": "indicator--9d389efa-86ec-48f4-98da-39b0fba6c5be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd31bfe-1f33-42d8-aa09-5c14afc08b4e", "sighting_of_ref": "indicator--6553fa17-1451-4877-9551-4ec5ff38ca52", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722e85a2-1b1b-4a73-9bf9-aa33799b7775", "sighting_of_ref": "indicator--6553fa17-1451-4877-9551-4ec5ff38ca52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c3c6d9-8621-45d6-8c87-d7f1148964fb", "sighting_of_ref": "indicator--22ef145d-f48d-4992-848b-c0658f58ae93", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed79eeb-9507-4aa4-984f-b56ce2202316", "sighting_of_ref": "indicator--eafd9741-7294-45db-9874-58b6602739f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330daedb-5df6-4f43-9102-120c7a2af464", "sighting_of_ref": "indicator--5e855c6e-06ed-4fb6-9c77-e058b4be3532", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe05bf64-9376-453b-95cc-cc84b4d56812", "sighting_of_ref": "indicator--5e855c6e-06ed-4fb6-9c77-e058b4be3532", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e086121f-3868-4fcd-984f-4b9e65c1c1b0", "sighting_of_ref": "indicator--96862674-57ca-4ad3-a134-cc41dc6a45d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718a05e-f765-49cf-bcaf-785787b297ba", "sighting_of_ref": "indicator--68a1e363-7e12-47f2-9ed7-6f564f2dc74e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad77e67-acaf-4746-a05a-9f99f4cf6dc6", "sighting_of_ref": "indicator--dc755d84-bade-4417-af5c-15ec4724335c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be8d04f-0ed9-4d77-bf55-7671f8cf0a3c", "sighting_of_ref": "indicator--22a9cbdf-ca77-4bc7-97a2-e3e2e534a015", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fc744-ebc9-4db0-8981-f9a7a5e93345", "sighting_of_ref": "indicator--85f0e12a-20e7-4e1e-b2c3-259c70f5c52d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6beed40a-65de-4f7c-b6fd-16058a290f4a", "sighting_of_ref": "indicator--b21ba903-a0b8-47ef-9e30-0ad5301b55f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494ebb09-99dc-47ae-8d52-a84103943af3", "sighting_of_ref": "indicator--a4ab3faf-d513-494c-bb3b-d7ddab87e0b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4404c2a8-62c8-4e89-8989-f89d02e0ef5e", "sighting_of_ref": "indicator--1cf3accc-21f3-468d-9e9b-c07a52e62bd1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f842f-5212-46c7-842f-168ebfb08a6d", "sighting_of_ref": "indicator--31c4a4b7-bb45-475a-8560-b99e722b0a9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956bbad2-dcb7-4497-9085-cdb353cf99a1", "sighting_of_ref": "indicator--31c4a4b7-bb45-475a-8560-b99e722b0a9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752141c9-aad6-4829-bf60-3af7460e9d45", "sighting_of_ref": "indicator--4a6a4463-a4fe-4cee-be4f-f74edee89c54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a8c1bb-8da7-4ded-b7a5-0899b779ff01", "sighting_of_ref": "indicator--9a1beaaa-950e-4cd2-bc1c-0b8de7799c56", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f309531c-8bf0-48eb-86d1-67955b05c61f", "sighting_of_ref": "indicator--9a1beaaa-950e-4cd2-bc1c-0b8de7799c56", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c590a12-407f-4e7e-a89f-a773e33c8da0", "sighting_of_ref": "indicator--14d5f457-bb35-45f7-8b18-63730e057cb4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b7b25f-da73-4968-b807-46c5961c5712", "sighting_of_ref": "indicator--7ef6d41d-708e-4fd9-946e-2d6789295cd4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8550d7da-5264-4c9a-b00d-a056cd50ad9e", "sighting_of_ref": "indicator--9d8ffa1a-a76f-4f45-90fe-238fb275d50e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1104eff3-a32e-4b9c-9ccf-697c1d3b5fbd", "sighting_of_ref": "indicator--9e3b0ab2-61fa-4bd3-90e6-fef771c33f93", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9c942d-b7c2-43ff-a28b-09bf997a4b41", "sighting_of_ref": "indicator--9e3b0ab2-61fa-4bd3-90e6-fef771c33f93", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ddd4b2-fbfc-475f-900c-77c9e57b16bc", "sighting_of_ref": "indicator--30a02a36-5508-4e5b-9a0e-5fe20c90709b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece65361-b8f1-4423-b331-ae8ad50cfba4", "sighting_of_ref": "indicator--30a02a36-5508-4e5b-9a0e-5fe20c90709b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2144fef4-d5cf-4770-92d7-eb0f79fe0d72", "sighting_of_ref": "indicator--c51e6441-52bd-45b9-ba4a-b2d71180d500", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c16dd-17a2-4ce3-b8b5-eac70075cb0c", "sighting_of_ref": "indicator--87d85d8a-4181-41a4-aceb-a7a9f63be782", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8174ad4-63bf-4b47-83c0-46a16eff5390", "sighting_of_ref": "indicator--e834a52a-669f-4470-8d96-b24c2419d782", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60628dab-6b69-4ab7-b495-4b39424d8b5c", "sighting_of_ref": "indicator--163dfae0-8835-4269-a371-8ee430bd7f71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59f6d9-689a-4158-b1a5-24272f9fe080", "sighting_of_ref": "indicator--1b2a4ba7-8af1-4af9-b215-98e6c035d84e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dc9a0c-8942-487b-8934-13f08e5aab67", "sighting_of_ref": "indicator--a09a6b2c-8624-4fcf-af18-f7170f29bd90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7c0cd9-b2fc-4e49-8f7a-e0b746dcf20d", "sighting_of_ref": "indicator--0e99a890-9312-4f35-b3f0-b9dc0cf968a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee65ba-5d99-4b1d-9038-a4383fb08f22", "sighting_of_ref": "indicator--ae998cc9-fc6b-4817-bcbd-7b31955586ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0a2938-1da2-413b-a758-62efef2999cf", "sighting_of_ref": "indicator--2a559aa7-bdb9-4905-8882-8d8bc093dcc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355c5593-f112-466c-ad9e-8b978ba1741e", "sighting_of_ref": "indicator--2a559aa7-bdb9-4905-8882-8d8bc093dcc0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284771ee-d6ad-4eb5-99c2-a1cf83c93769", "sighting_of_ref": "indicator--7abff515-bcbd-4663-b3c6-97549fd7ee7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de08688-3b2f-4d67-9df2-f097e415d908", "sighting_of_ref": "indicator--ad7c8e7e-b2af-49e1-8160-8f7ffa2788c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401d6cd4-a2c2-40fd-b4b0-a32c55a703d8", "sighting_of_ref": "indicator--e0f9f865-c3b5-456a-af7d-fc93df1d0c1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3ef379-6a7c-40e4-be1c-9ca1cacd0c4b", "sighting_of_ref": "indicator--da919f86-b23b-4282-8846-46b8a4e0a3ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ee53b2-0281-4f8e-bcaa-f0e9e44afa21", "sighting_of_ref": "indicator--dde6107a-3ba8-459f-9645-149eca01341f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b16b20-0fdd-43a9-8ebb-cd99c81d06a6", "sighting_of_ref": "indicator--2db2174c-393e-41d2-8218-98b452c7ccf0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d4e2c-f4f3-445e-8820-d89fc8a825d2", "sighting_of_ref": "indicator--2db2174c-393e-41d2-8218-98b452c7ccf0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17429e53-ba0a-439e-afe6-d40502d86315", "sighting_of_ref": "indicator--db48ab6c-caa3-472c-af68-a04f4b1ddc35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d055bb00-7263-49f3-95ae-f2ec0e69b472", "sighting_of_ref": "indicator--2e5da235-920d-4b47-aa4e-e4cae111221f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527d09b6-5da2-480a-81bf-ce49ae07ca72", "sighting_of_ref": "indicator--2e5da235-920d-4b47-aa4e-e4cae111221f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c6d82e-73dd-46d9-a2d2-877941f414b3", "sighting_of_ref": "indicator--22df9765-a10b-4567-bd22-84b27cc09f47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3150ba99-286b-41a1-b27f-098daafaf6d6", "sighting_of_ref": "indicator--e3e4a0ac-4ff8-4467-b4c1-90510ac3ae6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26e169c-8b58-4db5-987f-7405c50a7a65", "sighting_of_ref": "indicator--35d0319a-3c4e-4d2d-bf3a-8bd6a0232a44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad10a1c-f036-45c8-9bfb-940e4437f195", "sighting_of_ref": "indicator--e9ec2b68-dd4f-4d81-a543-76b00c962f29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3fd440-85d8-4f7f-9d11-df2d1000bcce", "sighting_of_ref": "indicator--756be7ac-b7a2-4b89-84d2-b4705ab3575a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b89f99-1d4a-457f-a712-2915ac416ec7", "sighting_of_ref": "indicator--5a3adf5c-4047-4a90-bf42-4daef573a641", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4557329-cfcc-48bd-b6ad-41a82a6adf98", "sighting_of_ref": "indicator--3e4181bb-0a7d-465b-a970-9c892994af01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990a03f0-8dfc-49a5-90bb-bc8106821cc5", "sighting_of_ref": "indicator--3e4181bb-0a7d-465b-a970-9c892994af01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c56578-cc51-48ee-b184-d9d86d0df54f", "sighting_of_ref": "indicator--0e5dbc6e-2593-4a12-8b8f-09b67359467b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26222182-f0cf-44d7-b424-dc3e4b12056f", "sighting_of_ref": "indicator--a4f4989b-909f-4039-8bc3-45abbe3e9fdd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d463d9e5-df30-4d9f-8edf-3a2838e615b9", "sighting_of_ref": "indicator--a4f4989b-909f-4039-8bc3-45abbe3e9fdd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec32330-6fdf-4678-a9be-2e121c3ac0e9", "sighting_of_ref": "indicator--3262e795-a678-4370-a5b2-39da3f33e11f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034d24d9-0044-4776-9cd6-8cb89484a38e", "sighting_of_ref": "indicator--4ee7bacd-820a-455f-b491-ce989c45f464", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb2db9b-492d-4728-aa95-6a5387e0d2d7", "sighting_of_ref": "indicator--4ee7bacd-820a-455f-b491-ce989c45f464", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82ac1d7-d237-41b2-b838-ab8b13baecdb", "sighting_of_ref": "indicator--bf537fa7-26df-47d5-8ca7-f9cde3b3b063", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592d82d5-cfd4-4b86-9001-e3ddd576e0f8", "sighting_of_ref": "indicator--0b25c98a-ef9b-4c27-b1d0-db1a38c86bda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2244e5-eea0-4a15-a0b4-c9f1eae5fc7c", "sighting_of_ref": "indicator--0b25c98a-ef9b-4c27-b1d0-db1a38c86bda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2aed1cc-dca1-43c6-b481-41aa691cb8f4", "sighting_of_ref": "indicator--dea6d531-9883-4b6c-b801-279710e023b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eccc335-92d0-4b79-93f3-4ffe7f5ad103", "sighting_of_ref": "indicator--dea6d531-9883-4b6c-b801-279710e023b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d6c3b-daac-4fb7-af86-de21811cf963", "sighting_of_ref": "indicator--f6d9ddac-d364-4bd4-94bd-214a2d6ffa27", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e90e697-e54b-429d-93b4-4dc3958d5383", "sighting_of_ref": "indicator--6caf8339-2f9f-4bcf-baad-749c2c9ea0b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354f6348-d91f-423b-9282-cd3c63a81b75", "sighting_of_ref": "indicator--f0671d6d-0a6f-4d8b-947b-36aae13f374e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c98af92-3f71-42d2-a6f2-0beec4531197", "sighting_of_ref": "indicator--89e65286-4bd1-47f3-b02d-1dfe9ec3369a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f574e2-34f5-4c59-85dc-92e2126f5287", "sighting_of_ref": "indicator--762e5701-89b6-4669-84d8-c79c3f44c869", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83502fe8-1189-43c0-b616-9ecf16837cb9", "sighting_of_ref": "indicator--bae00d6f-340f-4491-ab23-e424252f7e0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b25dfc-3a90-44e6-ac60-58201ec6cca5", "sighting_of_ref": "indicator--bae00d6f-340f-4491-ab23-e424252f7e0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091a0404-6fa7-4279-965a-3ccb1f1e7cf3", "sighting_of_ref": "indicator--1c2ba771-73d4-440a-b3ba-60a8a863076e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d969c13a-68e2-44bf-96e3-e568ec1218f7", "sighting_of_ref": "indicator--1c2ba771-73d4-440a-b3ba-60a8a863076e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccfb791-6f14-4c6f-9744-5d4a22470033", "sighting_of_ref": "indicator--dde4c070-8343-46a8-9700-9cd4c082dada", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11766b47-40e1-4a17-bb10-5ee445ac834a", "sighting_of_ref": "indicator--2c7bfd63-049f-460a-8bd7-3d3c7f5c557b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f018d4cc-8e7d-4371-bc8e-4116b7104440", "sighting_of_ref": "indicator--ada61401-cb02-4989-8fb7-80f555e6c6d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67f2374-fd03-4dd7-b080-9285a388ff21", "sighting_of_ref": "indicator--ada61401-cb02-4989-8fb7-80f555e6c6d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd695f97-8c21-4eaf-9cd7-4604bc653b4f", "sighting_of_ref": "indicator--57dd2fa8-f53e-483a-b9ad-d678a2db33cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b76f441-58fc-4dcd-b95c-eedda483fe34", "sighting_of_ref": "indicator--6fd87c77-3950-44db-976d-978bf931dafe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aced00eb-914b-469a-b253-da37410c6e71", "sighting_of_ref": "indicator--b0cd8df0-1381-4724-8178-f2963909c9e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ae3d95-f964-414e-9f41-d8dbf30d37e1", "sighting_of_ref": "indicator--b0cd8df0-1381-4724-8178-f2963909c9e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efd51c0-2bd6-49e8-9499-393ecdace5d6", "sighting_of_ref": "indicator--eedf6339-3f96-4690-ac27-055d737ad67b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329c7796-0c21-4af6-8b5e-6dd8d779d92c", "sighting_of_ref": "indicator--eedf6339-3f96-4690-ac27-055d737ad67b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec84f5d4-e71f-4574-8a47-d847d9557f96", "sighting_of_ref": "indicator--ee38bd96-dec5-4f8c-ad3d-6f9486d07f24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e1f491-192c-4453-997e-f517060357e5", "sighting_of_ref": "indicator--7ef617dd-88ba-4cff-ae0a-e9612e57e153", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c2e293-5c47-4800-a8a4-4ec6d57b42df", "sighting_of_ref": "indicator--6860d332-35bb-4862-9a89-b2fd11647383", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c302bd-fa70-401a-9775-3d3418138d0a", "sighting_of_ref": "indicator--6860d332-35bb-4862-9a89-b2fd11647383", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fc227c-ed9a-4493-a148-8a5b665bcfd5", "sighting_of_ref": "indicator--b37a558e-911a-4329-94be-b46d8cbd4d22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52b4e8f-9d22-446b-9602-95d8eb44a14d", "sighting_of_ref": "indicator--1a798687-d80d-4b68-badd-92565f16bf8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5653435e-4666-463b-97ff-da7d091a1b13", "sighting_of_ref": "indicator--54a52f46-6fab-4d1b-880a-2ac962c33708", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7398cc94-8ef7-4c00-8ceb-183295b0d4a7", "sighting_of_ref": "indicator--54a52f46-6fab-4d1b-880a-2ac962c33708", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2b148b-bc23-4a78-9109-332e257ad6fb", "sighting_of_ref": "indicator--e5b2f9c6-7192-4723-a114-87d280eb05e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cbf51f-289a-4a95-83cf-cdc1cac6073e", "sighting_of_ref": "indicator--4bcb57af-97d7-49a4-bbfa-7a12e77ebd0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94f2607-ec04-4a5f-ae80-943c4dfffba9", "sighting_of_ref": "indicator--d05c7bf5-5a3d-496e-8692-e4bad5268671", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18981c4-9d65-4c67-a449-7e21a992b5f3", "sighting_of_ref": "indicator--8ece0960-2e59-4ae9-861d-89d31234738e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0fe056-4c52-4a0c-904b-40197f4e92f5", "sighting_of_ref": "indicator--6ced312e-04f0-4fad-af4a-4d47d9b28ab6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dea8d95-02c7-4042-941b-15bc30a1dc31", "sighting_of_ref": "indicator--6ced312e-04f0-4fad-af4a-4d47d9b28ab6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88db2162-427c-43a2-8ac3-817c8ee7d20c", "sighting_of_ref": "indicator--98e66f57-b5fc-4e90-b328-c7aceb9cea9e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8c864f-9374-45ce-a532-1fb4b6523dc1", "sighting_of_ref": "indicator--98e66f57-b5fc-4e90-b328-c7aceb9cea9e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9789e1-232a-4a84-afa2-7a8eccbb9fd7", "sighting_of_ref": "indicator--94e75472-89d7-463c-9a86-3e21e10c8f9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a646538a-27a3-4c0c-aa19-8e98d7192bbc", "sighting_of_ref": "indicator--b24c73c0-3999-44cb-9dd5-758fe42a91b6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c6b495-7063-44ec-b082-fd46eba1909e", "sighting_of_ref": "indicator--d08cdd73-12d8-434a-9367-0d43257035ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffd5f5f-dd13-4203-9915-d33ea9d6008d", "sighting_of_ref": "indicator--c2f297c6-5943-4c1e-aa9e-3d38ccf69117", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7eee88-089c-4735-b9e2-e2c9d200570b", "sighting_of_ref": "indicator--c2f297c6-5943-4c1e-aa9e-3d38ccf69117", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921929f3-1c93-49b1-9414-561d76aeb55b", "sighting_of_ref": "indicator--588901dd-88cf-4a17-bfa6-08bd768a20af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92feacb3-a429-492a-a517-47348a29dfc7", "sighting_of_ref": "indicator--588901dd-88cf-4a17-bfa6-08bd768a20af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c81358-7236-4faf-a266-55c4c4096840", "sighting_of_ref": "indicator--1d10037c-ac3e-4f39-a69e-76e2d55735db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e742194-c33a-40c9-aa16-744250e9aaa6", "sighting_of_ref": "indicator--78bbea99-3c1a-4833-a8ec-fa9ce680ada3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156f4cc2-7801-49e4-85e7-bba58f8b9c6b", "sighting_of_ref": "indicator--bebad155-71f2-4370-8e94-e5a7fb972ffe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e935282-b0b1-4d93-af11-659a250c7940", "sighting_of_ref": "indicator--bebad155-71f2-4370-8e94-e5a7fb972ffe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501a9656-0246-402b-9df8-366c69cee384", "sighting_of_ref": "indicator--67606398-3fd9-4c6f-9a2b-087543384d74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa227d2-63bf-48d4-bf75-1de2c3c8a870", "sighting_of_ref": "indicator--6b8bf67e-6e5c-49e5-bb1f-af5c4a3489de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f27a28b-e1b7-4f98-877a-ad8114c39a02", "sighting_of_ref": "indicator--e451ac2e-d279-4ba9-b5ee-8a108dc9a98c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b20dac6-b8a9-4a0b-855a-01801b44da93", "sighting_of_ref": "indicator--203c10c1-4144-4252-b776-11d88ff8612d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8f35db-0a86-49ff-96aa-89e4e406ed3d", "sighting_of_ref": "indicator--203c10c1-4144-4252-b776-11d88ff8612d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04dc2ee-3a2c-4aeb-a6d1-096b0e3737b3", "sighting_of_ref": "indicator--2fc75395-6cce-4d73-ba2f-a7d615b2a30e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0841e5-65a5-4a07-a9cf-939fa83ebd3d", "sighting_of_ref": "indicator--dd67a147-5f30-4626-8001-bd318b554d5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c5b619-9760-459d-b2b2-9b32e9d6ff29", "sighting_of_ref": "indicator--dd67a147-5f30-4626-8001-bd318b554d5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed2d1bb-6090-4442-b5b6-a7272d846164", "sighting_of_ref": "indicator--60851218-6576-42f4-94bf-03b924f88103", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9b37d-0973-4316-bb6d-9969b85f80d7", "sighting_of_ref": "indicator--efdf0417-a909-4384-9e5c-4f207708aaff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e1fc0f-107f-49cc-b92c-f902469cfb72", "sighting_of_ref": "indicator--f9287da5-b343-4ddf-befc-2cbb5799ed0c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4c04f-fcdd-4583-b095-693d0bc04485", "sighting_of_ref": "indicator--c8fdc13d-000d-4c26-a70e-112b98279337", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f4a47f-f608-4c0c-8975-14c978f7c06b", "sighting_of_ref": "indicator--aa38a3cd-7339-4706-9928-4b12bbac3e50", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f48e58-107a-4356-b9f9-d8be08466621", "sighting_of_ref": "indicator--8705ca71-8231-44fb-a4dc-ff2d1fef0903", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6bcbfe-aeef-4a26-b2e1-3e5841a95787", "sighting_of_ref": "indicator--49341570-b536-4f26-aa6b-117b792232a3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04ccd5-ce67-4a93-9f82-55b4a4deea31", "sighting_of_ref": "indicator--252e5dd8-3f07-4a15-a7b3-b0011136eeed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4409183-277a-48b5-b81e-44940fc9583c", "sighting_of_ref": "indicator--1f2a7f57-6542-4edf-8139-3767b7c6d5e7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ae648-9c39-4093-8a6a-92d6c4327f4d", "sighting_of_ref": "indicator--8dfd5435-c0ca-4c53-a021-c42c37471305", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe5309-6904-4400-b66c-1be68d872654", "sighting_of_ref": "indicator--9aac3e1e-17cc-4504-aab3-3b7fc9ca925d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1699834-6052-41bd-a774-17cee3482c2b", "sighting_of_ref": "indicator--9120fdac-fd22-40bb-9176-001cd6d5fc35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2672dce-38c1-4797-9b18-4239e5b1a811", "sighting_of_ref": "indicator--c8cab47c-9436-4d33-a6c0-be548202f37d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9d3dab-5709-4c90-9304-abc76ff43586", "sighting_of_ref": "indicator--29e9d453-5daf-4d8d-bb07-f9525110d565", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ffec1-801f-4228-8967-e5bf83f1dd1f", "sighting_of_ref": "indicator--59ab0112-e26b-4e3d-86a9-6ddcdf740da5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de06b6b-7699-4ef8-8c07-6ee594c75f46", "sighting_of_ref": "indicator--bc5d0e1d-cbab-45d3-a212-4bdb89d538db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d97692-44af-4ef7-a9e3-f8a80feba3e5", "sighting_of_ref": "indicator--737da190-2383-4ed8-9426-c1645f6c7a66", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfdf228-bb27-48b8-a0c9-34162acaeedf", "sighting_of_ref": "indicator--0e299b13-a9a0-434d-9ef2-a209b454a873", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06f361d-d301-4a7b-826f-c8eb6d051909", "sighting_of_ref": "indicator--994dc442-ee73-4739-97e1-987ed15eaaa7", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95717b6d-1360-4aa7-a92b-f7620d065d22", "sighting_of_ref": "indicator--994dc442-ee73-4739-97e1-987ed15eaaa7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bedbbc-13bf-4823-a41e-1b2a272f8ec8", "sighting_of_ref": "indicator--b54abb7d-e3b0-4bd4-8a1d-49a0f953be47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e117f0e9-a544-4a14-b99a-f8cbaefe9044", "sighting_of_ref": "indicator--b54abb7d-e3b0-4bd4-8a1d-49a0f953be47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950218fb-454b-404a-aad2-cf1bc1a98e38", "sighting_of_ref": "indicator--540cc8e7-58bf-4098-8dee-b410974a4117", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca73f690-2d8f-4e26-adc7-c6d7050b8ac1", "sighting_of_ref": "indicator--540cc8e7-58bf-4098-8dee-b410974a4117", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a251930-fbd3-409e-8e29-b51d07782958", "sighting_of_ref": "indicator--b973421f-5706-4afe-ab8d-0868848da8a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20e0e51-fb34-49e7-a0dc-af29cfd45804", "sighting_of_ref": "indicator--b973421f-5706-4afe-ab8d-0868848da8a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d4a710-db7c-48d3-a66c-1e4bc7aaa99b", "sighting_of_ref": "indicator--c529da0c-5c5d-4b80-b46b-813eba35e1d5", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b01f27-d3ea-4e92-a247-dda425830050", "sighting_of_ref": "indicator--c529da0c-5c5d-4b80-b46b-813eba35e1d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99df0ef-8fe5-418f-83d2-637d0029b8d5", "sighting_of_ref": "indicator--6271cc68-d621-446e-847c-0b15fae0546e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61695b62-554c-431a-b58d-21083a75ce96", "sighting_of_ref": "indicator--16efd57c-8c07-4f33-9764-771ddd0013b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaf4d12-1e66-4d03-bb8c-d93a044cb6fc", "sighting_of_ref": "indicator--d1f8f29f-4be8-4a3b-a83c-2703c598f17b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4c82b2-8038-47fa-abe3-ecba8c0dc470", "sighting_of_ref": "indicator--d1f8f29f-4be8-4a3b-a83c-2703c598f17b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9687e201-551e-42d5-94f8-e4cf85102065", "sighting_of_ref": "indicator--87f5d1f3-f6fb-4b02-915c-1023dde3b214", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf0608a-1a64-4c30-9e2c-17e328c09fb6", "sighting_of_ref": "indicator--34d08577-b77e-43d6-87c7-d8e4b281dd6c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc21cf08-ec81-4bd0-8a13-454ad600e310", "sighting_of_ref": "indicator--34d08577-b77e-43d6-87c7-d8e4b281dd6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a54ebb-ac10-44ad-a396-d569d098402d", "sighting_of_ref": "indicator--3d7358b0-985d-4819-a3f2-96496ffc5bbb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ea31ea-754d-4c21-80ee-8d699f78789b", "sighting_of_ref": "indicator--3d7358b0-985d-4819-a3f2-96496ffc5bbb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a40ec1d-72b6-4174-8361-6eb63c1d6a5f", "sighting_of_ref": "indicator--5ff522c3-0d62-470f-87f3-61538c6c9f60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdea97b-0870-479f-8379-9207f4910105", "sighting_of_ref": "indicator--ddc7e209-3525-4117-8607-98c3332dbd20", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310dfab0-478a-463c-aa96-e9e5346053a3", "sighting_of_ref": "indicator--69eca0f8-1869-4f5e-b5af-6513e52f39ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c976d8-a1b6-4db4-a1ba-b33725a08766", "sighting_of_ref": "indicator--d7c3d536-203a-43c3-9eb5-d74e25ffd5de", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6818982d-7d3b-4b91-9709-9698b65c7284", "sighting_of_ref": "indicator--2500479b-3e6e-4697-ab9a-e611342e2f54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956cf5ac-466c-49a7-a71d-ff77dcd0c52c", "sighting_of_ref": "indicator--a1f80590-4baf-4e74-bc8d-3bb6e234be2c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fd080e-b858-4ca1-83f6-40592f1c8889", "sighting_of_ref": "indicator--a3b84f6c-643a-4d43-b46a-0d67109ae58f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dee7b3-6be0-4cd3-b2a7-98beed731dd5", "sighting_of_ref": "indicator--d2b49a65-6f12-410a-93c8-0412c48a4ad4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e6175f-c357-4b34-bfb2-d97ffdfd5e71", "sighting_of_ref": "indicator--354289f4-eeaa-4402-bb5e-c09145d9d35d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973acdd3-61bc-4a99-8507-545ca3f81681", "sighting_of_ref": "indicator--017d051d-b1cb-4152-93b9-284d30a87e4d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bb731c-e2f9-443b-807c-fb149ea111d9", "sighting_of_ref": "indicator--1c628fb3-f13f-442e-b70e-4d129abd00ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfe859e-fed3-4c3e-8f5f-c9b8221c1bad", "sighting_of_ref": "indicator--33ee1402-7359-4310-be6a-e1f854a6970a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba8e129-450e-4e6d-889a-ec1cecdfe571", "sighting_of_ref": "indicator--bd612dc6-c6d2-4e85-ba17-933ef50b448e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863147ee-a07c-44fb-aa72-7ef5f5a85f4e", "sighting_of_ref": "indicator--7e7f193a-1b74-4473-b9ac-2226bb4c0fa3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb573b44-ec1b-4765-99fc-2d54c0f93e6c", "sighting_of_ref": "indicator--e82a2128-5bb1-4018-8590-a30c248f02e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7b994f-6cfa-44a0-beac-1469d7728a95", "sighting_of_ref": "indicator--2acde250-6d67-47d2-a0e7-5067623535b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28de5ca2-3234-4f60-9ad2-3aaea72ef3c4", "sighting_of_ref": "indicator--bdbd7408-c22f-434b-ab66-e24236eda553", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef27fb7-c0fa-4c4b-999c-6b5ec81a034f", "sighting_of_ref": "indicator--bdbd7408-c22f-434b-ab66-e24236eda553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9869374e-d80b-4492-8057-e64decb6ae19", "sighting_of_ref": "indicator--669e5b8b-41c5-4cf7-a90a-f5114cade9d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38ca442-6dc1-43eb-b5be-0f38a271b32f", "sighting_of_ref": "indicator--dc9f5100-6877-425d-93fe-a26ed66011e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbd5978-ee56-4ce9-9865-53b80796dc2a", "sighting_of_ref": "indicator--e71e813a-00fd-4127-a698-1087f5989c8b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ddaa9-1ba1-4ef6-b476-3113ea409dc6", "sighting_of_ref": "indicator--c87d9a8c-abd1-447e-b59a-de56cb5d5667", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf067815-0436-4e17-8604-f9629917bfa4", "sighting_of_ref": "indicator--5ac38b4d-230d-4027-a4a9-080c0a422c57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7191278-b771-47c2-bd01-1d35b8b0d851", "sighting_of_ref": "indicator--c31ca9e9-fa93-4abe-8c23-fdcd65dbffd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b20051-9139-4dce-b0b9-0ada037e8664", "sighting_of_ref": "indicator--fb18810b-fe56-46b0-a0be-7b5271a1c51d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b421b5-0169-4a65-9976-42c93490bdf3", "sighting_of_ref": "indicator--e88d056e-1c57-4096-a84a-2979fbce8472", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3b1e39-3e24-4bf6-996d-e352a74907b1", "sighting_of_ref": "indicator--80c01d95-d1c1-4b4c-91bc-287592e6446e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd62845e-1a6e-4449-96d1-baefcb37e13f", "sighting_of_ref": "indicator--f96440cd-20f5-4aea-a868-dd631e135f7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706cbd50-a822-4962-bee9-36d2f590493b", "sighting_of_ref": "indicator--45cd2a63-34f3-4d09-acd5-821109bb46b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5f2e8e-5fe0-46d6-a10d-d14b8d272f5f", "sighting_of_ref": "indicator--afaae6f6-0809-41ad-b13b-f378319f3fe1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73ed012-0833-4f56-ad75-ecd67435e24e", "sighting_of_ref": "indicator--1f960a19-868e-4094-a0fb-234a3ec5c24a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f43ae0-07d2-4987-8611-c51acdcaa227", "sighting_of_ref": "indicator--e7ae4b32-c4a7-4b9c-8fa3-e750f4185211", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3520a2ee-7e4b-40cb-a4c2-f42e5aef40b8", "sighting_of_ref": "indicator--784012ce-d1e5-4c6e-bf13-6041b546c792", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98ece53-4822-4929-948d-127eba3c1dbc", "sighting_of_ref": "indicator--01c28507-2581-4e34-b6fb-0cb085793e0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5606822e-b241-486f-bf9e-d66200b7e7e9", "sighting_of_ref": "indicator--282aed6e-ce6e-4f81-9715-8cca927b8866", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5e4e12-235c-4ed5-b4e0-3f1be3048e25", "sighting_of_ref": "indicator--4ebfd19a-bbed-4312-85e9-a6c630e4b99f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25886369-258e-4ab3-8526-3bbd19edca5e", "sighting_of_ref": "indicator--273d67c7-01a7-4e51-a220-f565a1f4d892", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de72f2a-5884-4231-bc30-c3be9cf36e49", "sighting_of_ref": "indicator--10fcebf2-043e-4af3-9879-5ba61884b789", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17274d1e-1cee-433e-a1cc-6232d07f20d7", "sighting_of_ref": "indicator--50589d36-05ea-4b1d-9433-4c23a14cc4f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbabb463-3b4b-4628-a4de-d235b617bd8f", "sighting_of_ref": "indicator--25bcff59-bee5-4e8e-9e20-e1f1e0194165", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7589c71e-e73f-4328-b9e7-aad55c181884", "sighting_of_ref": "indicator--fa19c220-eed1-48cb-9e91-ae9eb0d03832", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24aa09a-9a1d-457e-9d87-8ff11b3e649b", "sighting_of_ref": "indicator--c333294b-c2e7-4f78-b49c-ee8e5ae4599d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a080a63-1bc5-4a8f-bdd2-26b0b1b585a6", "sighting_of_ref": "indicator--d6e81555-033c-4df4-ac35-50cdb37a0641", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681572ed-8fc8-4881-b07f-ee8c4282954f", "sighting_of_ref": "indicator--432a354f-ddbd-4a84-b1d8-6d0319f59eb6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac947d4-a316-427e-8e68-84db4c18b32b", "sighting_of_ref": "indicator--7c92ee02-12d8-43fd-9181-897bc2b5e298", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e2447-a2e0-43a2-b992-010e906a7a7d", "sighting_of_ref": "indicator--68cc79e1-4b4e-4496-b283-8a1335ef4c19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5896ca-4fa1-46b2-bf5e-be77e6094692", "sighting_of_ref": "indicator--bbbbe893-4b29-42ed-9ffa-394493f81139", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2098525d-0c93-405b-a9a2-440dd310326c", "sighting_of_ref": "indicator--4f0df32c-5c06-419d-b982-2434044170aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc38d084-cd45-48e5-b8ed-ae70e75783b9", "sighting_of_ref": "indicator--052fa5d4-71eb-4f4f-a666-e09f84b3d0af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f559716-f8e2-47bf-9e98-c69651569d98", "sighting_of_ref": "indicator--a2946d6e-2d35-4594-8a4a-2a9b87ff49b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1447c10-6e23-43ed-a38e-873feb69bec6", "sighting_of_ref": "indicator--a750d161-4eef-46e5-a1cd-2ca7b18b748c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a51c431-510d-4bb1-841d-af5bad8397e3", "sighting_of_ref": "indicator--a750d161-4eef-46e5-a1cd-2ca7b18b748c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c0e09a-7467-4920-b230-dc0ea57d661a", "sighting_of_ref": "indicator--53941b92-3622-44d8-9e0a-f9f893fc1bab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dfc320-1a05-4458-9c47-466bad636dfe", "sighting_of_ref": "indicator--56d6e919-f556-412c-af66-09b5e50ca19f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babcea6b-f06e-4e05-8908-fb49477c270d", "sighting_of_ref": "indicator--f1ebad54-7c01-4038-b8a8-db2b44a92dbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f321e4dc-11fd-4300-bd69-1c1430a3a517", "sighting_of_ref": "indicator--645e4f3b-3e96-4a9b-b8de-ddd81f1214d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe465ad-1862-439b-a25c-1b1fbdc7cce1", "sighting_of_ref": "indicator--28706096-3bf5-4c1d-8dec-66682dcc6500", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac865f1f-731d-4c08-8e78-645ed8a28c77", "sighting_of_ref": "indicator--172c3c22-13f9-4de4-9b3f-028586af4ad0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49987cbe-1f67-4a47-931f-53a227163ff1", "sighting_of_ref": "indicator--d4da1c11-f409-446d-ab5e-af3720b40e83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a801a4-14ba-4025-9eda-a50729f07e7a", "sighting_of_ref": "indicator--eed073d6-322e-4a6c-bfe8-ffd07d9419e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24135e43-5fd1-47c0-b759-f7725e7d4e47", "sighting_of_ref": "indicator--c14a24cf-294c-48cb-bb1e-4a6f95707c95", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e397cf1-3087-4364-89a0-1de3c31a8c4d", "sighting_of_ref": "indicator--00812255-94f8-4d86-b228-5ded6cc9bf9e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2151c708-1787-4c9a-b82b-dd06f80a3e97", "sighting_of_ref": "indicator--3ef39b43-51d3-4d1c-92ff-570f2b3fb481", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c86eb2-83e3-41c8-98d8-f4720060156e", "sighting_of_ref": "indicator--b0625449-4fd7-44de-aa2c-ceb3013da176", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93ebd25-721b-40a5-9c69-939b3086ad58", "sighting_of_ref": "indicator--c120660d-1ad1-4129-af4b-1f88d2d065ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9376ba4-6833-4028-bb25-97bdf87062c7", "sighting_of_ref": "indicator--5618b9c7-6daf-4171-b75e-8fb32b9b9719", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2299164c-d8c2-4536-b553-9fd3433e9b73", "sighting_of_ref": "indicator--48b87a95-8fad-4560-8944-78840dae3a15", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b79f79-bf1b-485c-b504-b2610f5d769e", "sighting_of_ref": "indicator--ff0d13da-cb7d-4d67-9fe9-370674e64eda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff538051-7eba-448d-8f8b-39019b49cf22", "sighting_of_ref": "indicator--ae398b02-790c-4252-a23c-09c7a5e10acd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e36d1b-8f1f-4645-9245-849e476f9f4e", "sighting_of_ref": "indicator--cffc9cad-4015-4a60-a6c2-a7e0eb42ea67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf7c494-8a29-4dd7-b02e-f8dc1d19e0d4", "sighting_of_ref": "indicator--26cfdb61-5dfb-425b-81a8-0394780cc263", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99845a4-e09c-4e22-82e8-d917d21b6960", "sighting_of_ref": "indicator--3afdb64d-bd45-42a8-b168-166e865d2524", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6cadbf-48cb-420a-bf1e-bbb595006682", "sighting_of_ref": "indicator--e1bdfd4b-3e46-46d6-816d-6552c2114fb5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0533f655-2eb3-4615-a92c-5b9993c494ca", "sighting_of_ref": "indicator--18b1de24-f7b5-46a9-be4e-00d9eb51ac1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2f1ec6-7afb-4b29-b6fe-2338d202af67", "sighting_of_ref": "indicator--6a4ad9ff-1f71-4842-b41b-c94a1ef720fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012421bb-01eb-425d-ade4-b33666c85144", "sighting_of_ref": "indicator--a9d2242d-9837-4e03-a9e4-e51f1ff273e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5621f801-5f42-4440-adad-782a5c8accad", "sighting_of_ref": "indicator--22433a15-1236-46dd-a342-22f185fd57d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e798346-2f46-46ed-b28a-2634df1130c1", "sighting_of_ref": "indicator--1eef3bb3-119f-4a3c-8d60-ad49ee39625a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55e307d-d0af-4c0c-a8e4-c3897ca89a61", "sighting_of_ref": "indicator--8800f179-26cd-481c-bee1-d64c430304c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bc9185-3cd5-48d7-944d-902e89b8080c", "sighting_of_ref": "indicator--642f9978-0559-4724-8c79-64edc6571033", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60387131-5032-46d1-901f-2a294b3ee886", "sighting_of_ref": "indicator--46bb5836-3bb7-4fd1-86e5-4713553a594b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb5eb6c-8577-42ed-82d2-3595dd064ede", "sighting_of_ref": "indicator--f46ad4a4-ea17-44a1-aa70-a6fbcd10bc4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59526b4f-6945-4c22-a863-2755e641ccb1", "sighting_of_ref": "indicator--8280757e-c4b1-4632-864f-9036c21b568a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981afd48-2cbb-4862-988a-59245c2d699a", "sighting_of_ref": "indicator--248777f8-7290-4827-bb77-0526a761b031", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898f9521-d6e5-4f92-88c8-c130f5bcd800", "sighting_of_ref": "indicator--9cc76e22-f985-4d2f-97fa-723ea84e3c44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc00e41-0a72-4355-bbf5-657ef7c605f1", "sighting_of_ref": "indicator--6c6db7c3-aa09-410c-a178-59c39f4bedec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9ad6ff-7631-4922-9662-dd20531b21c1", "sighting_of_ref": "indicator--875103b0-9d41-4148-960c-2ee71ebc6c2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adea36ea-4101-4160-a5b6-f9a4f9e45312", "sighting_of_ref": "indicator--1690704d-47c0-4e21-91a8-878c2877cc72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15aac35-23ce-4aa9-9bcf-6434010368e9", "sighting_of_ref": "indicator--72a5e45d-d6d1-4cfe-b1c6-52aebf5fed14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4750d355-7d7c-4259-b228-d72c502764dd", "sighting_of_ref": "indicator--816fe8e1-e708-44b5-a7da-852f0952921c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d99356a-ad70-461f-9b4f-68e922d50946", "sighting_of_ref": "indicator--e0717a58-b2cb-40ad-b496-e11fefeeab9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa3aa40-b117-4fb2-9210-57313727f16b", "sighting_of_ref": "indicator--596f93cd-cb34-45e4-8d70-e1e4e7bc46b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed988d86-ba1e-4879-ab3d-cbb3cd77aedc", "sighting_of_ref": "indicator--564d8c3c-63a9-4ab4-9068-e0977ef35218", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa536b2-f8c1-4395-bbe8-f0f54aa49620", "sighting_of_ref": "indicator--f72cd069-f4b2-41c7-b5a0-d5c86733c141", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fc8c88-9f52-458d-81b1-f49572e2efe1", "sighting_of_ref": "indicator--012a6e4f-2845-4c58-98e5-f7f29813ccb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa05e367-3196-4c98-849b-6cfefaa6e123", "sighting_of_ref": "indicator--e77beb1c-519d-47a8-9bb0-b463263a47d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00204607-6dc1-43a2-aaab-52f032f9c8dc", "sighting_of_ref": "indicator--4b45d52c-cdab-47b9-971f-4c5ae19fd032", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144e8ee6-d19e-4c52-bcb8-7ae1c2ac1404", "sighting_of_ref": "indicator--00f8602d-9ec9-415e-95e9-500f007d8f87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc31c247-27a5-44fe-bcfd-5e3b71aefd9d", "sighting_of_ref": "indicator--ef4669d8-c709-4caf-84e6-55f7e75e813e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52fc760-cf8c-47c6-b289-dd14b3d55ad7", "sighting_of_ref": "indicator--a9f0e63c-d181-4eab-8650-b5404bad07dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef3e521-5652-4dc1-91c1-48d42be3c949", "sighting_of_ref": "indicator--d293f290-9139-494e-a403-3e79758327a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0186d65f-f359-4936-97e6-1e8b6d21f474", "sighting_of_ref": "indicator--4f7de127-700b-47a1-aef3-d1d7839ecf28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f5a1ca-9c8d-4d41-b0be-105d7c86e234", "sighting_of_ref": "indicator--7a25434e-bebd-4fa9-8da1-1422ca3a0f9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836b73d2-944b-4458-a078-4361379c8185", "sighting_of_ref": "indicator--0d66349e-32b2-4b45-a4fe-3ce143f5a08e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd75dcec-017d-406f-a01e-5e2d08890d2b", "sighting_of_ref": "indicator--5c4b13ef-a390-4494-a398-82687443e6cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87aec85c-2c1b-4b1a-a9e7-f51e4ee15341", "sighting_of_ref": "indicator--0c246a8f-9cb8-4e35-9f81-240270b1322e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865a287f-9cc2-4f5e-9360-0b2b4b98bbdd", "sighting_of_ref": "indicator--18b983fa-61e7-4d12-8471-557683fd32dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024190a4-6bf0-4a43-a662-0c3e05d552bd", "sighting_of_ref": "indicator--5eff51d0-7472-4efa-95ff-e052f30358c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c427ed-c32a-4c1d-95ba-06d755f0a7ac", "sighting_of_ref": "indicator--fd8929f9-6145-4e1d-a234-b76313d0bc25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8c6c5-1b7d-40ea-89a3-0ef1b2c33eef", "sighting_of_ref": "indicator--97373565-4534-40ab-a85e-0e28d421e296", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0516d0c1-4efd-48a1-80b7-da2f4535a88b", "sighting_of_ref": "indicator--57b26c85-d20e-49d2-875f-222e1bb6ef3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ed00e2-8aa6-470f-a114-52a6b65851d8", "sighting_of_ref": "indicator--d40ff482-cef3-4e15-bfa6-ccdd25191c45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273053b3-5169-496e-bf43-8e4495dc7f9d", "sighting_of_ref": "indicator--c5677e2f-cb5a-4d03-8718-08f62e5752ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f94e2f-6bac-48c2-ad39-8c81b02520db", "sighting_of_ref": "indicator--354c10af-6287-4c99-bb12-ec463e1bf6e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd93253-f9d3-46f7-879c-b4b643d24259", "sighting_of_ref": "indicator--ea87c58e-ba91-45e3-a188-86faef44b9c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea79bb47-8d52-4ff5-8eb7-e9643b8e5f3d", "sighting_of_ref": "indicator--4af85349-9e6b-4495-a26e-fe6321d25c73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9901d3ce-3d64-4bac-8ed2-7eac18748aa4", "sighting_of_ref": "indicator--08f12596-a91b-45ca-9968-4f99e1a4b0b2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc723658-9991-4386-901e-f7ca87df11d1", "sighting_of_ref": "indicator--654dee13-b07e-4fcb-b7a7-a5d599feb443", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd08b2a-6841-48fb-af01-3d324c6a219e", "sighting_of_ref": "indicator--4477df3f-3bdc-469c-a0b3-66408a046d9a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4400ae82-53f3-432b-bbb8-af9e8ab7a474", "sighting_of_ref": "indicator--2eb02b7b-e631-4def-b364-a443e65f7037", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8646d87-7ce5-4482-819b-511521a0eb96", "sighting_of_ref": "indicator--41fde95d-d051-42c6-bb21-0209dc731def", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842597fe-0494-466a-960b-b91c094eb722", "sighting_of_ref": "indicator--4f06c917-afef-4af1-9d8d-72d588a901e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709d9933-c1b3-448f-a654-96b363242344", "sighting_of_ref": "indicator--53ce7836-f810-4cb7-a470-39e0dc2938ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3459daf1-5935-4e0f-88ad-bdaed310a9c7", "sighting_of_ref": "indicator--400dfded-f5fb-4a0a-9dc2-a89b2e38fad2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a6dcec-8372-4da0-ae98-ddfb4546979f", "sighting_of_ref": "indicator--713696c7-3600-4585-89f9-7ed9976f1721", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb13678-b08a-4786-b07a-07c95614d868", "sighting_of_ref": "indicator--38daa311-f530-465a-a0e9-d8064c33586a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbe6223-5fd0-4bd5-9324-1eaa1169ee04", "sighting_of_ref": "indicator--c1c71c6c-91f1-4e71-b614-e95491846538", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94ca27f-1031-4687-859e-8e637c44f139", "sighting_of_ref": "indicator--eeb68c3b-7d46-4164-a4d7-8512ef704933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ba1c9d-383c-4ab1-80b3-e92ae292f788", "sighting_of_ref": "indicator--49610720-67de-4b93-8bc2-53101bd29cd9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8663a52-dd7e-4a5a-889c-5ecf54f4024c", "sighting_of_ref": "indicator--5136f967-8662-44e3-8bb4-13178e66faa0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1493ca-99bb-4aad-82f9-529c936b2e70", "sighting_of_ref": "indicator--2f0271f3-c682-4ba8-8d87-f52d8d47e2f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c9f72d-6386-432c-96a2-acec4781070d", "sighting_of_ref": "indicator--920190c0-8a9f-4a96-a472-2fcfb177ff03", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0aca15-5ab1-4051-95d4-c287d3620104", "sighting_of_ref": "indicator--8abd1cf4-40e3-444a-8149-c17af3d2741e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab24ff41-a4a0-4699-ba99-3f52fde73836", "sighting_of_ref": "indicator--9e749fa2-d19f-499a-af7c-6833e479914a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c77150-032a-4227-b500-9f24a76e189b", "sighting_of_ref": "indicator--fee1e1ff-ba01-4422-8eba-eb4be8a885b6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0afd2-6dd4-4c76-8cff-5bca8c2c11e3", "sighting_of_ref": "indicator--347ee796-c946-4d94-9518-c9d5d4957a1c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336e121d-475f-4859-9406-08bd1cfbda13", "sighting_of_ref": "indicator--066e47ad-e1fd-4338-8ec9-6c300eb37374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d50ede-2e24-43f3-802a-08b39e9ded45", "sighting_of_ref": "indicator--2b669eb2-1903-42c0-b4b9-c14fcba9ba36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e620937c-c6da-491c-86e5-403110ff334c", "sighting_of_ref": "indicator--ed4ef0b1-3942-4d47-b73b-36138635f8f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17a8ab6-fae1-4f6f-b8ed-548eb1694ad1", "sighting_of_ref": "indicator--01a95d47-cc46-4cac-97ce-88b2db583d5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6b0364-af6a-4348-800b-b20a90b4b146", "sighting_of_ref": "indicator--01a95d47-cc46-4cac-97ce-88b2db583d5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ce1822-e71a-4a39-bc8c-288712eb8c5a", "sighting_of_ref": "indicator--d2e5db21-4676-4619-9d6a-c9c015eea321", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e35b27-9b3e-4cb1-99da-76786b4fb8d7", "sighting_of_ref": "indicator--7db6fcbc-6323-4ee0-8828-b7867278f1b6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326fb5b5-00dd-4b6b-bd75-8822af77f513", "sighting_of_ref": "indicator--a24a5d43-ce4a-436c-97e7-52edc55999b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7f8e0f-4ee8-4557-b7bf-bbb8f1265e08", "sighting_of_ref": "indicator--d370a767-876b-422b-aa8d-6f97b16a318f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58173533-a195-4f20-891b-a6cf9abdb1f1", "sighting_of_ref": "indicator--71e26afc-9c34-4dcf-808b-4f9a9a03e6c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0147b9ce-f157-49c7-848f-4408f063487d", "sighting_of_ref": "indicator--e1fadda8-85e1-4af2-aa8a-ff50279f1b1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a33229-e59e-4302-ad59-9ad50272be32", "sighting_of_ref": "indicator--93de6b80-e928-4744-a243-e21a06cda627", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f744a985-1bc4-4f66-b3c9-51896af240ee", "sighting_of_ref": "indicator--c32b087f-2051-406c-992b-53c1eaa1ee5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bda068-d132-416f-a560-273bfc09c899", "sighting_of_ref": "indicator--c1d2a466-708b-4776-b20f-f19606e9013c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b43c8a4-62c2-426f-85bd-23fb5a1c081b", "sighting_of_ref": "indicator--0dcdaebe-b988-444f-9b0b-d2a3c4515f69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070b4aac-119f-43d4-a529-b1934d3a6cfa", "sighting_of_ref": "indicator--6ec782c5-8a37-4266-a58e-9bacdd28aa23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965a081c-f7be-4310-9b71-f2dbdea34b20", "sighting_of_ref": "indicator--40a422da-ff8f-43f5-8fce-defd77f94900", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad54288-a85f-45ba-af7c-629d1dcc0611", "sighting_of_ref": "indicator--f7eb75ba-dbdd-4ad3-8b4a-b09518e1da7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fd0745-ac83-479e-958a-7fe6a624e064", "sighting_of_ref": "indicator--00e55e89-817f-42a6-bd6b-4ab421302b81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d7f080-df58-4ba5-8e2c-fe3a523c5162", "sighting_of_ref": "indicator--4a2e7766-9162-40ce-b8fb-d5d02fd27a95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f485a84-e0db-450b-bf8d-c71786ca5cdc", "sighting_of_ref": "indicator--970397a6-8567-477a-959a-2d5f36c4c2d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15aca48-dab0-42a0-b61d-4414e036072e", "sighting_of_ref": "indicator--b182fad3-3241-433e-b43b-242232548940", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746c71d6-68c1-41cf-97da-b8566f409aa2", "sighting_of_ref": "indicator--5f273a83-95c8-4bba-80bd-5a29032f4c00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f400d0-1837-4d3b-a667-71537159ccc9", "sighting_of_ref": "indicator--43ecf18b-7860-450a-8c01-5faca75de8a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed982ce-21a8-4d44-b6c9-df7621f6ebda", "sighting_of_ref": "indicator--5e4457ac-0f94-4dfb-8c5e-8da72aa2ccc9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2ddc80-2549-4181-9062-efd71de6f6f8", "sighting_of_ref": "indicator--1a9f9ce7-2e56-456e-b4d3-995345d42c4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4172ff-c846-47a3-b5c5-1bd6ffad2d7d", "sighting_of_ref": "indicator--346018c4-bbe6-4212-8e48-9ff00ab1aa00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2b3e6f-edf7-45c2-a6c5-b795b4446065", "sighting_of_ref": "indicator--346018c4-bbe6-4212-8e48-9ff00ab1aa00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ceb55-0c9c-43a5-8a6b-14a8954cdba5", "sighting_of_ref": "indicator--b08b8b92-c38e-4af7-bd8d-2fc65526b803", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869fa789-df72-43f2-bac8-ce5816f07cd5", "sighting_of_ref": "indicator--22bae0a8-c31a-45c7-b2ce-24c2b0701635", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e4e42b-b28b-4493-84e8-94c004e5351c", "sighting_of_ref": "indicator--4839ea60-d6b5-4ac4-9069-a324dab8c63b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6dade3-315f-4e7b-b724-08ab9cee1a2b", "sighting_of_ref": "indicator--242511dd-3966-4fbe-aef2-9b751ffd2784", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87db3b3-b65c-43cc-a6bc-cc631be8d739", "sighting_of_ref": "indicator--3df92b20-d918-4c0e-95ca-0ac11ce38b10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804a3a85-1dd0-4280-8640-5b60a5686df7", "sighting_of_ref": "indicator--4120fb3c-b539-4fc9-93b4-1e11196fefcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946b36a0-1aed-42e3-955f-d5377a9976a0", "sighting_of_ref": "indicator--bc1161cc-a457-4448-8630-42fcec100910", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700128ff-4574-49cd-9083-4ce000086719", "sighting_of_ref": "indicator--4154db22-67e0-4187-b4b7-bd3e24e3fc9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f266ad4-789f-40e4-9f7a-d57b73b464f4", "sighting_of_ref": "indicator--4154db22-67e0-4187-b4b7-bd3e24e3fc9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f784c78-a093-4257-89f1-39bede6d8e79", "sighting_of_ref": "indicator--f83926b7-175c-4a5a-aae3-f7c0e47f4c47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b09daa-8881-4f03-b1ee-8f1b7f274244", "sighting_of_ref": "indicator--f83926b7-175c-4a5a-aae3-f7c0e47f4c47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b327abb-bcc4-4185-81f6-573ca3d4a314", "sighting_of_ref": "indicator--34a84856-8337-4bef-9105-b1ff0f5f00f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bb9810-c1c9-4f49-b666-4d28616e4d80", "sighting_of_ref": "indicator--34a84856-8337-4bef-9105-b1ff0f5f00f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ca343-8567-4752-b087-37545808d0cd", "sighting_of_ref": "indicator--d716840b-b879-4123-8b4d-c2416f8ed699", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e806e38-737a-4797-a94c-589e9b7eb798", "sighting_of_ref": "indicator--d716840b-b879-4123-8b4d-c2416f8ed699", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb6a98c-081c-4b12-a4ca-8442f4276787", "sighting_of_ref": "indicator--c059f415-ffd3-4225-b809-03a02d265942", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da37300e-2354-44b8-a626-cdba486615eb", "sighting_of_ref": "indicator--3fc4e639-7f15-4cd7-9e6f-e3c024348051", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c545b82-582d-446a-abb9-d4455b583856", "sighting_of_ref": "indicator--3fc4e639-7f15-4cd7-9e6f-e3c024348051", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ced8440-006f-4663-99e9-344122bc9252", "sighting_of_ref": "indicator--cf909049-eb29-4074-b0b2-b6744fbeaf03", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c969bd-1354-4c89-b918-9c21cd58b962", "sighting_of_ref": "indicator--25eac215-fdc9-4f95-bfce-3f31d7275ce5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f02352-f1fe-4171-9c2f-dee68a925d77", "sighting_of_ref": "indicator--25eac215-fdc9-4f95-bfce-3f31d7275ce5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab441c0-9734-4e31-bf55-5680bbccdd39", "sighting_of_ref": "indicator--bee0963f-cc7a-4f69-92f7-794ed4f0fb62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d1435b-5c20-4b25-ac52-1085b2ce8214", "sighting_of_ref": "indicator--bee0963f-cc7a-4f69-92f7-794ed4f0fb62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f44ca1-9fcc-4658-832a-45b367a888c5", "sighting_of_ref": "indicator--2ce5716a-29f9-4f35-b952-912d2575ee9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a4378-538a-4200-8211-7fcc070f9fdd", "sighting_of_ref": "indicator--4d1e91cd-95e5-4d5b-98ca-2c53dd02a392", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7514fe28-a933-4ab8-8a42-f7ad891a05ea", "sighting_of_ref": "indicator--1d193d45-5bdb-4a31-ae4c-f91db6b7c78e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0a99d1-580a-4972-ab67-a9143f84f601", "sighting_of_ref": "indicator--bbf974c7-c4e6-47bf-99f8-2a3e899ba428", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c7475f-671a-44fc-8bfc-6e04eef6a459", "sighting_of_ref": "indicator--bbf974c7-c4e6-47bf-99f8-2a3e899ba428", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39f80e4-3a08-49b0-9c40-1c45a42a03bf", "sighting_of_ref": "indicator--527c73da-b03d-4a47-a045-5d8508886115", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6500d2-56d0-4769-8a3d-c1ce8ff28fca", "sighting_of_ref": "indicator--527c73da-b03d-4a47-a045-5d8508886115", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95ae89f-8338-41ee-bdaa-37c3fcdd3f5e", "sighting_of_ref": "indicator--08ed7651-fccc-475f-94ad-b6e6999b120e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec772e7-8e6b-4f11-bc36-c7f360101fbd", "sighting_of_ref": "indicator--113eab9b-9a49-4c85-a574-edb6dddea90c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e74bd31-4f07-4d3e-bb6f-001899c3eb4e", "sighting_of_ref": "indicator--113eab9b-9a49-4c85-a574-edb6dddea90c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ac3271-2994-4957-acc5-70684e460d0e", "sighting_of_ref": "indicator--d02c25fe-cc01-49bb-b649-331e0737d003", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574db778-2050-4e78-a054-d6a36c4eff32", "sighting_of_ref": "indicator--d02c25fe-cc01-49bb-b649-331e0737d003", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5a2982-d896-4a78-b284-bdf0ba4b4fb2", "sighting_of_ref": "indicator--b5c427e5-5b69-47fd-a010-30e057b6c816", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af755a2d-ff13-4467-bb01-108696fae514", "sighting_of_ref": "indicator--b5c427e5-5b69-47fd-a010-30e057b6c816", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50100083-1835-43df-9b27-8acb4e45edd4", "sighting_of_ref": "indicator--9c5ce87a-da75-4ed7-9be2-4a96f9a3e439", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b666fb-44bb-449f-b416-507ef0e3a7c2", "sighting_of_ref": "indicator--9c5ce87a-da75-4ed7-9be2-4a96f9a3e439", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abd8125-26b5-4a98-b7f6-661337ab0e01", "sighting_of_ref": "indicator--d8c927c6-77b9-41e8-8c30-3b8d7f8c069c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9177af76-ad80-49b4-86b2-75f0e5a18f58", "sighting_of_ref": "indicator--f20a7a35-2a31-4111-925a-eb12553c52f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1ee2be-cd7b-47a8-8630-8f0a0c127cb8", "sighting_of_ref": "indicator--f20a7a35-2a31-4111-925a-eb12553c52f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4593f65-5dcc-4316-b2d2-4c30ac040445", "sighting_of_ref": "indicator--642faee5-31be-49f2-b520-6f26b51df7b2", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dd0fe7-b5f6-48bc-885c-df204e9a0cd4", "sighting_of_ref": "indicator--642faee5-31be-49f2-b520-6f26b51df7b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca09d70-3f8c-488d-9c09-e6a7b31501b1", "sighting_of_ref": "indicator--2c65e392-3e66-49ed-9511-f1caf124184c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f98c048-20cc-4230-ab1b-708bec327777", "sighting_of_ref": "indicator--2c65e392-3e66-49ed-9511-f1caf124184c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93e8a89-e05d-4598-bb15-cc5c30210d22", "sighting_of_ref": "indicator--898e01d9-f718-423b-9539-5b3fb536e577", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d00e19-ddd2-4fbf-9097-04a8dd3ff550", "sighting_of_ref": "indicator--91d9ebc9-72e1-43d9-afa0-12ca1a81e38d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1472e1-4de5-4de7-9ec5-86dd49cb8049", "sighting_of_ref": "indicator--bc271657-cca3-4b0d-a40a-aa04695ce36b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e6a2b-12a7-48eb-83a3-9b76addf9fc0", "sighting_of_ref": "indicator--bc271657-cca3-4b0d-a40a-aa04695ce36b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b144815b-54d7-4b35-89c5-9e092d74a22f", "sighting_of_ref": "indicator--b7d83e55-c7fc-41d4-9d74-2149a1565b26", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0de10aa-2bee-4037-a916-2eb1270dc589", "sighting_of_ref": "indicator--b7d83e55-c7fc-41d4-9d74-2149a1565b26", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c5693c-6052-4148-8c8c-c02864d13d5a", "sighting_of_ref": "indicator--bf1f2c1c-e460-4018-93a2-9efea05f414b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8360c93-1b00-4890-b8cf-f0d5b1dc4dcb", "sighting_of_ref": "indicator--bf1f2c1c-e460-4018-93a2-9efea05f414b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3917b-16ce-4e9e-aaa6-96666bac65e0", "sighting_of_ref": "indicator--bb891fe1-15a7-401e-8129-67c9bc7e7692", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de71f0-1c1a-4057-9def-37eecda2cc4d", "sighting_of_ref": "indicator--bb891fe1-15a7-401e-8129-67c9bc7e7692", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cbded8-ea02-4c77-9dee-3edad5df5158", "sighting_of_ref": "indicator--209a1a54-3d75-4015-9217-45f8ee2dca50", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4adec22-f0a5-47cb-97b9-18f393c8fb2a", "sighting_of_ref": "indicator--209a1a54-3d75-4015-9217-45f8ee2dca50", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a86110e-6551-4188-9965-be1244054428", "sighting_of_ref": "indicator--0c4b9139-df60-4442-8ae6-77b0380d3550", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df7af17-8eb6-4bae-ae0c-ff7606ac9e81", "sighting_of_ref": "indicator--892ebee4-12a0-444f-900e-0f968ba39313", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636e62ed-c893-4ff4-aae0-684ee47d5ca3", "sighting_of_ref": "indicator--c988d890-05f1-49a4-8edf-7dc0e2364448", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad04410-bb9d-47df-ba1f-88ebf01fa947", "sighting_of_ref": "indicator--f4e3763a-5cd4-4d03-999f-b8f53f7abe01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a61766-a016-4bb0-b58b-047f35333db1", "sighting_of_ref": "indicator--f4e3763a-5cd4-4d03-999f-b8f53f7abe01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bf4041-1020-467f-86f2-ee7df77e1558", "sighting_of_ref": "indicator--364a1218-32db-41b7-9f78-db77338fc3bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448631a5-7cba-4bb4-8448-9b6fd9aee7b9", "sighting_of_ref": "indicator--364a1218-32db-41b7-9f78-db77338fc3bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff7352d-e7de-4e42-91d1-76f2aa665543", "sighting_of_ref": "indicator--f685d797-c128-4b8b-a3c5-88c5c17617e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e558294-0750-4151-9452-f5baa816da90", "sighting_of_ref": "indicator--f685d797-c128-4b8b-a3c5-88c5c17617e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae8ec89-f08d-47dd-9a7e-ccc9518cbc1a", "sighting_of_ref": "indicator--470e7e1e-e6a1-41d9-b76d-4fd06879e57b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce05e64-6073-4c04-b436-b3ccd0460a19", "sighting_of_ref": "indicator--90e080d7-78a0-4475-9da7-5f0454dd93ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf08d4c6-fb3b-47d3-9ac8-c311c49975cc", "sighting_of_ref": "indicator--90e080d7-78a0-4475-9da7-5f0454dd93ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a749fd0e-3922-425a-a3a2-fb26fc211e07", "sighting_of_ref": "indicator--07870c67-a4b5-4cc6-bf98-0951dc5fe77e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0433546-3d4e-4ce3-8567-1ad2a514949c", "sighting_of_ref": "indicator--07870c67-a4b5-4cc6-bf98-0951dc5fe77e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6369bde4-13ed-45e4-a4cc-cc9b5cfbfbf1", "sighting_of_ref": "indicator--c7791d6b-2b96-4bf4-9ab6-38b870324cc4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9411e035-7286-4300-9917-8a9d441d0038", "sighting_of_ref": "indicator--c7791d6b-2b96-4bf4-9ab6-38b870324cc4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259373cb-b657-4345-a3ba-285f1010b082", "sighting_of_ref": "indicator--316af215-b647-4e7f-a3ce-55994940d16e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd69d2f-8033-48be-81c8-215b70b97a98", "sighting_of_ref": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266b03e1-d14b-4ac3-9324-2fec90dd015a", "sighting_of_ref": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee8cd24-8112-4d0f-b8e3-f8626e827138", "sighting_of_ref": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac386719-7d35-47a5-a533-82a6a33e8461", "sighting_of_ref": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7388759f-d725-4d86-b102-c96a958dffbe", "sighting_of_ref": "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb5170d-9e61-419d-bd5a-78f669774e2c", "sighting_of_ref": "indicator--6b3ea915-01d5-43b0-83b9-65a5d840e388", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d55bb4-1322-4db2-a240-9b2a1f47331b", "sighting_of_ref": "indicator--6b3ea915-01d5-43b0-83b9-65a5d840e388", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab86004-340f-454e-a8f7-fc5e4e04620d", "sighting_of_ref": "indicator--01cc0e99-e1a3-4235-8f20-0a2377591e00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5f4539-0f65-4985-8140-4a0c470ee74c", "sighting_of_ref": "indicator--01cc0e99-e1a3-4235-8f20-0a2377591e00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff889df-6135-4e91-a64a-c84940a36274", "sighting_of_ref": "indicator--01cc0e99-e1a3-4235-8f20-0a2377591e00", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f855d5c-b975-4457-9eef-d8a7a9e38e67", "sighting_of_ref": "indicator--fb6fb7e1-a48a-4c65-8bee-07e08898235c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca0fbe3-caeb-4353-9da5-ec2caa1644f9", "sighting_of_ref": "indicator--fb6fb7e1-a48a-4c65-8bee-07e08898235c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a10405a-8081-4f66-bb7f-dbbd4df5b91b", "sighting_of_ref": "indicator--fb6fb7e1-a48a-4c65-8bee-07e08898235c", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98087262-74de-4d8a-a1da-32af48829932", "sighting_of_ref": "indicator--02dcddeb-fd2d-4ef8-8530-abb4a3a03163", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cfdc73-c14a-4aa5-889b-2733a48f679a", "sighting_of_ref": "indicator--02dcddeb-fd2d-4ef8-8530-abb4a3a03163", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e873505-e0ee-49ae-8890-5e842c798ede", "sighting_of_ref": "indicator--02dcddeb-fd2d-4ef8-8530-abb4a3a03163", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737932e7-f380-423f-8633-4d8b64dc2c10", "sighting_of_ref": "indicator--54426c69-62f0-4824-bda8-9fbcc0c2cb04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545e3d6-f662-45a6-913b-1de2c5824c0a", "sighting_of_ref": "indicator--54426c69-62f0-4824-bda8-9fbcc0c2cb04", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe54b066-e317-4b19-9470-46585f6d3ece", "sighting_of_ref": "indicator--54426c69-62f0-4824-bda8-9fbcc0c2cb04", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1073aab4-af1e-4f54-9f21-8ff884f25b95", "sighting_of_ref": "indicator--02de2f07-47bf-443c-9188-d19eba2f073c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3f2f5f-6b98-42e6-82c3-7710186470d8", "sighting_of_ref": "indicator--02de2f07-47bf-443c-9188-d19eba2f073c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1b525f-aa3d-4c7f-ba6e-e375b8098961", "sighting_of_ref": "indicator--02de2f07-47bf-443c-9188-d19eba2f073c", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c5c898-86e9-4e9b-b1e5-63c4b3823dc7", "sighting_of_ref": "indicator--6307f297-3285-4238-b9c0-44ccd0e712f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20d8053-4975-465d-b364-52a851d94d6b", "sighting_of_ref": "indicator--11d0561d-5fe1-4aeb-bce2-85ed0380a64f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbd0026-ca00-4236-b3af-b73849153be4", "sighting_of_ref": "indicator--11d0561d-5fe1-4aeb-bce2-85ed0380a64f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd5a8bf-e953-4ee9-a39f-e6500483429b", "sighting_of_ref": "indicator--11d0561d-5fe1-4aeb-bce2-85ed0380a64f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694aceac-a4c9-49d7-8da1-d967e7b211cc", "sighting_of_ref": "indicator--7309283f-5893-463f-bc42-8f88bd4ad4c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c1147c-07f0-4d06-8849-94f6c6dbe35b", "sighting_of_ref": "indicator--7309283f-5893-463f-bc42-8f88bd4ad4c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e0c440-13fc-45b8-a5b8-760f5470de04", "sighting_of_ref": "indicator--ef7e4619-a7d6-4b86-a49f-b798c2da3be3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d974cc3d-c15f-4d78-9b71-fb03531c2768", "sighting_of_ref": "indicator--69ffd8e2-d87a-4bc0-808f-1d680b719ce2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8314d660-358c-431c-9e95-45c09cb9c68b", "sighting_of_ref": "indicator--69ffd8e2-d87a-4bc0-808f-1d680b719ce2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476e9178-57a2-406f-9eec-4c26d1b30465", "sighting_of_ref": "indicator--faa5c216-cca3-4781-b9b0-69d241d18f1b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47be3867-e983-4319-afbf-3a8a93c077bc", "sighting_of_ref": "indicator--faa5c216-cca3-4781-b9b0-69d241d18f1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72f4547-85f4-401d-a28f-87149448e902", "sighting_of_ref": "indicator--d77e8d79-cf4f-4480-a27c-65ade845d3d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9467b03b-afde-4541-b41c-9de0d4826830", "sighting_of_ref": "indicator--1b6130c8-3935-4012-97cf-3671dc7fdbd7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0a66a8-5980-4d61-9b5d-58cfbffb8de2", "sighting_of_ref": "indicator--cfe76101-e4b0-4ada-8b60-a374d3436151", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fd5dd0-696e-45ab-935a-da03aaa1addc", "sighting_of_ref": "indicator--0659b723-2025-4485-9255-121020d749ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2f8f97-9f14-4f28-b6b9-772f1135fddb", "sighting_of_ref": "indicator--0659b723-2025-4485-9255-121020d749ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84d3b5e-49f3-4139-9a23-8f7f245526cb", "sighting_of_ref": "indicator--6fc18227-a4df-421a-b96e-b8523221674d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687ff68d-a293-4445-a965-6a072ff74667", "sighting_of_ref": "indicator--b294437a-2f1d-492a-83a5-6850c9df57d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab34d7b-52c3-460e-9ac5-abb72c76a9ed", "sighting_of_ref": "indicator--b294437a-2f1d-492a-83a5-6850c9df57d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed80acd-fdb8-49dc-b183-1b3f5fe40522", "sighting_of_ref": "indicator--33211076-7f47-4873-ade7-ee4f57c01d6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11985040-7406-400e-be52-a6b2da0c5e8a", "sighting_of_ref": "indicator--33211076-7f47-4873-ade7-ee4f57c01d6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6a9e36-241b-4652-88e2-811f42151391", "sighting_of_ref": "indicator--c49eff5d-a548-40cc-840f-62c17505850a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d087a1ab-58c9-48ea-b90c-ebb50c1cd486", "sighting_of_ref": "indicator--67bc70cd-32d0-4cfc-9b34-5f83d19de3da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060a1017-2c05-4a61-83ea-c7b86e7f5c64", "sighting_of_ref": "indicator--c90af921-b47f-4ed2-a328-94aa53d489df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f99f75-a97c-4e2d-a56d-a94ee16197cc", "sighting_of_ref": "indicator--3d0bc9ed-9c08-4ea0-a1dd-37dec6112b81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbabbed0-24c2-42de-a7f8-8dfde7ff7352", "sighting_of_ref": "indicator--e2d2296e-80b1-4dc5-82a0-d071765081ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4903d52-73a9-4448-aa8c-eb3955056dd5", "sighting_of_ref": "indicator--a88a8768-8918-4e27-869a-b2410f02ff8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6851a9f-b831-4c04-97e4-b0db1cbc4745", "sighting_of_ref": "indicator--7022344e-3588-491e-b181-9be6eb5b0628", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0d1ae9-071a-4941-8387-550326143d50", "sighting_of_ref": "indicator--406fd5db-1e57-4a07-85e8-9ae4766de291", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cf8572-cf36-4f53-ae16-9e3656176f35", "sighting_of_ref": "indicator--1c1988d9-60f3-41d9-9ad3-491b84333330", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88284635-589a-4901-ad9f-f5426f6f5776", "sighting_of_ref": "indicator--afeb4163-93a4-4f0e-8662-ee26c6c835f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcb3455-c916-458d-b701-afa2101c2fc3", "sighting_of_ref": "indicator--afeb4163-93a4-4f0e-8662-ee26c6c835f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e081872-7856-4245-91b5-62682636f291", "sighting_of_ref": "indicator--9a6540c0-6422-4e1d-b365-bfacd6e85503", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b4f228-b98a-4696-8352-8192baa5c6ac", "sighting_of_ref": "indicator--04db1e5c-18ae-47de-ac4f-99b122fe3e5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f156b854-3462-41a2-9e3c-ea52a61d646d", "sighting_of_ref": "indicator--db2bee23-4a4b-41a5-818e-19dc90ffdd42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5939bc36-096a-4f78-9ad4-421aaa8af60d", "sighting_of_ref": "indicator--06bd4960-fa76-469a-b974-e8ca2418d6c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f993fb9-6803-4b75-86f2-23b1c73e3bd8", "sighting_of_ref": "indicator--2343f5da-1929-4b2b-843c-b15fa140e48b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0a8e0b-4b13-46f6-9312-99d77e43ae66", "sighting_of_ref": "indicator--88331dc8-4ef2-4f99-b2e6-17d45caf5288", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822d0771-5d61-48a1-8b64-ea4b15a4838e", "sighting_of_ref": "indicator--02936802-62a1-4956-b5f2-5721855ec7b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdefdbc-4838-44cc-9bcd-55b62a0045f4", "sighting_of_ref": "indicator--9939364b-33e0-4839-a32a-72b730c60021", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dfeb63-359d-417c-9495-d6670ae22ddc", "sighting_of_ref": "indicator--c2b445b7-52a9-4cc0-b446-79a5e16bee19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a3f7ac-f49a-44ab-a67d-30ce6758ebd9", "sighting_of_ref": "indicator--c8834807-8769-4ff4-a8f3-d7c6be7018cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a92912-18d2-45df-9fdf-0416422d31c6", "sighting_of_ref": "indicator--dfb83803-aa9e-4fef-ab1e-75ff021cf5e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4c809-6e8b-4949-80ad-022e1725a553", "sighting_of_ref": "indicator--680ff834-35a2-4180-8aa9-6c55532fa4ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f79298-091f-4ee0-a756-7d5fb77bcdb5", "sighting_of_ref": "indicator--32a59770-deb4-4d7e-9757-70bc994208f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06e1d1d-3eb8-4ca7-b378-b2bf107f3c2f", "sighting_of_ref": "indicator--c1379fc2-703e-45ab-9316-cb9ad8ffc496", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d45e2f9-8729-4f1a-9bae-e912ec03c8d1", "sighting_of_ref": "indicator--c1379fc2-703e-45ab-9316-cb9ad8ffc496", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f62af3e-8a17-404f-81e7-1e8737f4117b", "sighting_of_ref": "indicator--4ddd2144-a25e-4b8c-ad59-b818ad2bc91b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc58c30-fff8-46fc-894c-6920decc21fa", "sighting_of_ref": "indicator--c2ca3628-70b9-4a93-b385-12e7c653cd1e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ebc136-43fd-4395-9376-57310737a147", "sighting_of_ref": "indicator--543dceff-a161-4985-bcf7-8b8b980ff256", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c59b96-3872-4ccc-9952-e196feaf7ec2", "sighting_of_ref": "indicator--6cfb197d-0cb3-4d81-84d6-3fdc7e837aef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40f757e-dc20-4bd5-99ff-9fd6c48a37b6", "sighting_of_ref": "indicator--964c48e8-61b8-425b-b507-0d803a357b3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2789ec-9d7a-4bba-bc59-ce8b28893278", "sighting_of_ref": "indicator--aec1f461-74ce-4709-80f2-a9345eab89c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac19e316-4ff9-481b-9641-9cb56328fab4", "sighting_of_ref": "indicator--40ff00a3-bb49-4310-bfc4-f28555f8eb81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e86602-f27f-4e13-a348-1d975d1abe7e", "sighting_of_ref": "indicator--1e32cbc1-8781-460f-86fe-c5642d3b19a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378c58bb-1b10-4fd7-a832-a5e5b7d4958d", "sighting_of_ref": "indicator--d49f5a0c-84a4-4f91-ac55-22d7a0f8c74d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651cd346-7711-4e93-9c2e-f98a79fc35e5", "sighting_of_ref": "indicator--4a08650a-cd10-458e-8c13-66b89ba191c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dda86e-2f2b-4e7e-bdc5-ccd6fe4100ca", "sighting_of_ref": "indicator--13056d22-5359-4ff3-9475-ca050fad469d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f6963d-e582-40ed-ba44-1db07b4a2855", "sighting_of_ref": "indicator--e0f8a52e-c176-47cd-8c03-b140deec32b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031e0954-8bf8-42ed-84c5-f86ddfad1653", "sighting_of_ref": "indicator--aba2ec90-6de5-4efa-925b-a62c9d6072e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1923ed8-9f2a-4447-9e75-6e46b5ce6190", "sighting_of_ref": "indicator--d547d9d2-1cee-4809-8085-12a8d6172f54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4e52c1-ea3d-4384-8022-70475f097ab0", "sighting_of_ref": "indicator--da63fbc2-fdf4-48f6-ac75-c42600b51eae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b781154a-476b-43d2-a3a6-680607d5bc93", "sighting_of_ref": "indicator--bdfaff59-92c5-4062-ac09-b5b92dfba469", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c874ec-c7de-4889-a489-d4a3224c2406", "sighting_of_ref": "indicator--bdfaff59-92c5-4062-ac09-b5b92dfba469", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0c48d6-5156-46e0-8288-4d82b975e369", "sighting_of_ref": "indicator--db57efae-8b6a-4695-9484-4a159225182c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0595e209-368e-4634-a782-5d36a7d9f722", "sighting_of_ref": "indicator--db57efae-8b6a-4695-9484-4a159225182c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb08d36e-2638-4f86-816e-6c1ebbeb5092", "sighting_of_ref": "indicator--8dff7cf9-8cbd-4dd3-8cdf-8029e25e7a43", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c18522-292b-40f7-858a-de76eb44a429", "sighting_of_ref": "indicator--84e40c34-2676-4808-86ea-c4599752ca9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4153c4-4d42-4bcc-9dc1-639dc2ce3f85", "sighting_of_ref": "indicator--84e40c34-2676-4808-86ea-c4599752ca9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807e14e7-7598-455d-9ab7-ab7079fc4f8b", "sighting_of_ref": "indicator--b7b8e940-c8a5-4130-bd27-e9012488dfd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f185ba23-4e6b-4f7a-bc23-845a7ba71691", "sighting_of_ref": "indicator--28edebde-b759-468e-ab3b-1b549a1b0367", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57795401-2e84-40f4-84b7-ab54118bfecc", "sighting_of_ref": "indicator--28edebde-b759-468e-ab3b-1b549a1b0367", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95f2b08-79d6-4876-ad9d-2863f58eb3be", "sighting_of_ref": "indicator--d45481b6-7b2a-4416-9b3d-73bafe7f28d0", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a3dec-2474-4821-9dce-6e24d0384c67", "sighting_of_ref": "indicator--cc981160-6057-43c1-9059-e5b3111baab5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0cba58-e5c2-40fd-b469-17743b7e226a", "sighting_of_ref": "indicator--cc981160-6057-43c1-9059-e5b3111baab5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da3c11-2ab1-4da8-aab3-4895afdc4ed4", "sighting_of_ref": "indicator--c80e5d2b-d9a6-4dbb-b048-abef4adc21cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40783678-26f6-4f9c-8c4e-33ed7054d6b7", "sighting_of_ref": "indicator--c80e5d2b-d9a6-4dbb-b048-abef4adc21cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec04eb6b-db2c-4f6c-8b8f-e7bba56b4ba7", "sighting_of_ref": "indicator--638bfbb3-7e13-4a3e-b787-71652614aa03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0053d1-3602-468e-846c-88a8820f6443", "sighting_of_ref": "indicator--06e9c2b6-f34f-4ad8-a2dd-d2da664fdcfa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4efbd5-6d3e-4209-8894-5f753590965a", "sighting_of_ref": "indicator--debebed2-9146-426b-af7f-3208f1c37c91", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6688cb-900b-4b26-8f73-b078aad444fd", "sighting_of_ref": "indicator--debebed2-9146-426b-af7f-3208f1c37c91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb37cea-25ff-4fc5-a5d3-9b5cc2f4ac61", "sighting_of_ref": "indicator--a26ccd5a-07c9-4712-bd34-8640c05c8e36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd9cf37-86e6-4c25-924a-4ab0432cca88", "sighting_of_ref": "indicator--a26ccd5a-07c9-4712-bd34-8640c05c8e36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f95837d-dcf2-49c5-a677-2cf8d1f6bb66", "sighting_of_ref": "indicator--e076977b-9d0a-409d-bca7-a6a61765fa09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5a507f-4b61-4b1b-8603-3e8109b7ad5d", "sighting_of_ref": "indicator--e076977b-9d0a-409d-bca7-a6a61765fa09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc17d12-6f90-4685-90ca-97eda31bbc49", "sighting_of_ref": "indicator--371e23e6-d91d-4f22-a4c7-391f673451be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384c827e-a9c0-43f7-9ea3-f10572542b3d", "sighting_of_ref": "indicator--371e23e6-d91d-4f22-a4c7-391f673451be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb0811-0b4b-4880-8aa4-d8f7352d5298", "sighting_of_ref": "indicator--b0367ab1-39db-4148-97eb-414398211f6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdceeae-13b1-4ef3-8f92-6ab444e25893", "sighting_of_ref": "indicator--b0367ab1-39db-4148-97eb-414398211f6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3373675d-2cb7-4cd9-b107-585c60ac32ed", "sighting_of_ref": "indicator--f1cd5f74-ffb3-4ef1-bd3d-64ad1986c950", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e15a25-89e2-43ff-a560-551f1345457e", "sighting_of_ref": "indicator--f1cd5f74-ffb3-4ef1-bd3d-64ad1986c950", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a801f53-9413-4ba9-99d5-d3b2c960bb8d", "sighting_of_ref": "indicator--61a8f98a-fa18-4430-9c91-5a783106d811", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cf1ebc-c72c-43f8-bdc5-20454428711c", "sighting_of_ref": "indicator--61a8f98a-fa18-4430-9c91-5a783106d811", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b2d677-55c0-454a-b782-e950b09b0e3c", "sighting_of_ref": "indicator--7fbefea3-00ec-4a0f-8a20-8a648cd63f2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b52caa-1d9c-430b-9dc7-6e59b0a9f0e8", "sighting_of_ref": "indicator--aa6d2690-e0d9-4d03-8a48-5c9937d60645", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ee8cb8-ba45-4e7f-a4a1-6ffa90250e03", "sighting_of_ref": "indicator--5f245dcf-01bd-4218-8b60-b44ac2dc8340", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e82f8-7579-4adc-96b9-c9abff360cdc", "sighting_of_ref": "indicator--cf9c9330-0c8f-4dca-9418-2459eff0398f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58a3eed-f91d-4793-9c30-88f737e403ca", "sighting_of_ref": "indicator--cf9c9330-0c8f-4dca-9418-2459eff0398f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d4bdc6-0361-47e5-ab49-adde57725922", "sighting_of_ref": "indicator--cf9c9330-0c8f-4dca-9418-2459eff0398f", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6d016b-554e-44bd-9f1c-8aba1de2232e", "sighting_of_ref": "indicator--85bf5980-8485-4358-85e3-2bb8b20a2f54", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db83c771-9f42-4504-853f-8a2545f91225", "sighting_of_ref": "indicator--fa9acdd5-4588-4cb9-a0db-0a8041342d7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7c2688-2a71-4e60-975a-10e119ccfbd2", "sighting_of_ref": "indicator--3988a99f-a0aa-4657-8ca8-4b3767eb579a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9f63a2-88af-45ca-9a54-07ea96ac17fe", "sighting_of_ref": "indicator--3988a99f-a0aa-4657-8ca8-4b3767eb579a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5a96a5-41ce-42d7-871b-07fe2d733be7", "sighting_of_ref": "indicator--e8823e11-65db-4f1f-8208-7b14467127e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7968ed-669d-4157-b7ba-edf568fab03a", "sighting_of_ref": "indicator--3d59a84d-3ad8-4188-88da-d79450ab27a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d9c5f4-2567-4470-9475-1120c67f4250", "sighting_of_ref": "indicator--ed6a1c2b-bfdf-46ae-8f2d-6af578044f3f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c3badb-3952-489f-a368-947d6e6a4793", "sighting_of_ref": "indicator--ed6a1c2b-bfdf-46ae-8f2d-6af578044f3f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23baaef0-90d4-4c8b-8f29-0463bc3e35b5", "sighting_of_ref": "indicator--5902da9d-da71-484b-8094-04e42ed99cde", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca949ff-79a9-41a4-a1e2-dbfec054d4c8", "sighting_of_ref": "indicator--5902da9d-da71-484b-8094-04e42ed99cde", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d6b8d6-a4f4-4b50-8934-ebe2bccdcabd", "sighting_of_ref": "indicator--3d44bc1f-0801-4946-975b-10dab34215c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646f0476-293a-4efb-b1ad-cdfb1072d504", "sighting_of_ref": "indicator--fceaedaa-0cce-4073-ab58-305fb08f532e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df2af8-9afa-4151-a808-29b515970e0c", "sighting_of_ref": "indicator--fceaedaa-0cce-4073-ab58-305fb08f532e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac60cb57-cfd5-45c7-b70f-9a07242df9d3", "sighting_of_ref": "indicator--b5e0c77b-9df2-429a-93ed-725c57a81eb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99f3fc7-ae8c-47fe-8a11-596573995782", "sighting_of_ref": "indicator--2ba9387e-9d65-4789-aa3d-c1234755eed3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc7abfe-4c63-47c6-89c1-458295c34605", "sighting_of_ref": "indicator--2ba9387e-9d65-4789-aa3d-c1234755eed3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29172d96-d18e-4a0f-adf3-6e8a80034aff", "sighting_of_ref": "indicator--d6a459c3-1764-46e8-b552-b049be1aa5e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20ba955-afe1-49ab-86de-25536640edbe", "sighting_of_ref": "indicator--d6a459c3-1764-46e8-b552-b049be1aa5e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba796c0-ff41-4157-bf6f-600e0c0577dc", "sighting_of_ref": "indicator--74988970-fa2c-4d96-99a2-c92b3653023a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fdce2b-00b7-49d2-8d9f-d4697c178760", "sighting_of_ref": "indicator--e6f946d0-43a5-4e3f-874f-a99a77d3efdc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93236e5-fa90-4f17-bfd0-6b2e05f7648f", "sighting_of_ref": "indicator--a0f40445-f956-470a-bf03-46f4aa05d033", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448fbd87-7149-45f0-909d-1b16daee24a2", "sighting_of_ref": "indicator--a0f40445-f956-470a-bf03-46f4aa05d033", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113ab270-79ac-4c7a-8409-73ec40221517", "sighting_of_ref": "indicator--d8d49738-9aea-4aa9-a646-04a63a88a498", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f47867f-9e87-4c36-b4d5-74e2a14a1fcc", "sighting_of_ref": "indicator--4ea8821a-c73e-4d8f-ac99-06c9d2b504dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741f3b58-c7d2-488c-a552-081f8dc694d6", "sighting_of_ref": "indicator--9e3de33a-bf83-4dc8-8673-31bafd2c9f58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80bbe60-254b-4436-80fa-b6416f0a26d8", "sighting_of_ref": "indicator--dbefb3a7-fbe5-44bf-9c81-4a905ae95429", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b3ef11-5153-4d4a-a69e-4e055a2e166e", "sighting_of_ref": "indicator--630a8104-5973-4c6f-976a-dccd2cbd3be7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ec11b-3ff7-46ec-94e3-94d57f05b81f", "sighting_of_ref": "indicator--ade5d9ab-2ff3-46c1-b7ee-75a59d3a4d84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9c22cd-61b5-4b96-be11-8b4eb22da77f", "sighting_of_ref": "indicator--ade5d9ab-2ff3-46c1-b7ee-75a59d3a4d84", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a516f97-c42b-4a2f-9005-f6b564aa1d4b", "sighting_of_ref": "indicator--51fba5c6-d602-4d2a-abfd-8852f13ea03a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ca77a4-1a34-4691-9346-acb9de878004", "sighting_of_ref": "indicator--51fba5c6-d602-4d2a-abfd-8852f13ea03a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0b200c-8e47-40ce-a2d5-96afcf7658c7", "sighting_of_ref": "indicator--62cd4663-39a0-4a3b-970b-439e35f9daea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbbb2ce-1a6f-48c4-a4b4-31e60d565c1f", "sighting_of_ref": "indicator--62cd4663-39a0-4a3b-970b-439e35f9daea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bbf8c8-f817-49f2-af0f-f89eb0b2a0ea", "sighting_of_ref": "indicator--54e702dc-d579-40dc-b464-34dc7e559444", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae50163-fa44-405f-9cbd-672ed6f310d8", "sighting_of_ref": "indicator--54e702dc-d579-40dc-b464-34dc7e559444", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530c5898-17b8-4136-8b6a-2110e557fe0b", "sighting_of_ref": "indicator--485abeeb-71c8-4802-ae39-ee51caba81f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7f08c2-9e24-44ad-98f9-3d02fd83e564", "sighting_of_ref": "indicator--5dd6117a-a620-4ca5-b658-0b7ba077bcf9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a576d641-0751-405d-9acf-ce5d6d816da8", "sighting_of_ref": "indicator--1308d77c-835c-41d7-be76-c77329d216d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a565f9b3-834f-4803-8e7d-e6b04b5f14f9", "sighting_of_ref": "indicator--1308d77c-835c-41d7-be76-c77329d216d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55448f-f5de-4a2f-8ce9-e7aa600b7318", "sighting_of_ref": "indicator--ec919827-0929-4eeb-ac05-ee5ae32d27eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45864b4-027e-4222-b6be-686bddc8f32f", "sighting_of_ref": "indicator--ec919827-0929-4eeb-ac05-ee5ae32d27eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd2b816-a4a7-4edc-973c-d8fa4bdd5994", "sighting_of_ref": "indicator--9a27533d-7380-4287-bf82-9ce4ab23bf62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0946af0f-1be9-4695-be56-d2ac4fa71765", "sighting_of_ref": "indicator--9a27533d-7380-4287-bf82-9ce4ab23bf62", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b262a0a-c04a-437a-84d0-eb53de1cd0dd", "sighting_of_ref": "indicator--ce9c06ed-fc82-408b-b78a-bc0970ce853d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4d9699-ca51-48f0-b80b-2f75d3387028", "sighting_of_ref": "indicator--ce9c06ed-fc82-408b-b78a-bc0970ce853d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f0d64-1321-4d89-bdee-8b0271423d62", "sighting_of_ref": "indicator--525f5fe0-b4ab-42cc-a0a2-fd3e0016ee13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df04275-10d4-453b-81eb-4aff436f1fc2", "sighting_of_ref": "indicator--525f5fe0-b4ab-42cc-a0a2-fd3e0016ee13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b3dba-be7e-464d-aea6-2300c7177aec", "sighting_of_ref": "indicator--4dabb501-a058-4363-8e04-9d5331b19b2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90caf18d-376e-4812-95c5-9b0e0d90de65", "sighting_of_ref": "indicator--03e98b17-f4e0-4cbb-9513-92ae948a3b6e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a882e284-851c-410b-ae09-5adaab15fb1d", "sighting_of_ref": "indicator--bbab6bdc-a62c-4a8b-8cfa-6f249ebba32d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a40515-b965-4314-afd1-abf5bc9be589", "sighting_of_ref": "indicator--bbab6bdc-a62c-4a8b-8cfa-6f249ebba32d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da64958-07be-4ff0-bde2-5a76acf53695", "sighting_of_ref": "indicator--781036d9-3481-48f0-958d-380f121ba91a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701471c2-f7d0-404d-a7c1-8a02c86f0bd4", "sighting_of_ref": "indicator--2a3bfc75-d157-4def-801f-6ede5b43e4d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc73fff6-bbac-4e47-b866-4c910ef1d8ce", "sighting_of_ref": "indicator--281930a3-585a-424a-80ae-341df7e45c79", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36c9c1f-fc0c-4480-8ac9-dc18183025ed", "sighting_of_ref": "indicator--0e441592-d9dc-459e-8cf2-cb52446b15e7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4387e8-068e-460b-ba8d-e3fc1f9d9bf4", "sighting_of_ref": "indicator--3eeec4a8-56a2-4ba1-8628-74bf84f0205e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1af12c-ec2c-40c2-b190-3a49180c97db", "sighting_of_ref": "indicator--3eeec4a8-56a2-4ba1-8628-74bf84f0205e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404ac0f0-0e8c-43fc-aae2-f41823a3dbe3", "sighting_of_ref": "indicator--df63f9e8-87da-4a57-93d6-f9617e72b4b4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3724b9-9f2f-4b14-bf00-847360af8452", "sighting_of_ref": "indicator--66441a8e-9785-4ba7-a3c6-9a4de5d08ae1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea036f7d-e100-45ef-a3d6-376d850c3728", "sighting_of_ref": "indicator--7eea1f27-38b4-4d9b-980b-6dffb1667950", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448d8e3e-0c46-49b6-98ee-de9ffb501e75", "sighting_of_ref": "indicator--7eea1f27-38b4-4d9b-980b-6dffb1667950", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e28994-5a61-4b89-919a-458e982f3ddc", "sighting_of_ref": "indicator--696deeae-f72b-4f83-98a3-7f91a5623ae7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fc2f14-dc0a-474e-a8c5-889b54edcf38", "sighting_of_ref": "indicator--2470361b-96af-497d-8c70-477347c7cbba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c085124-33c2-4d98-9d37-bb539e9fb53d", "sighting_of_ref": "indicator--3010be5f-97f0-490a-8849-4a646f413904", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd01dfb1-59a3-4d13-9927-bd2f59e92759", "sighting_of_ref": "indicator--3dadc468-ce8e-4eb4-add1-a562802c1942", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3021694e-db57-40ae-bbe3-bb8c1bb0afb1", "sighting_of_ref": "indicator--56a5b0d0-9fd7-4ad5-b865-03f2f181d377", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc561a6-3e95-40d3-8897-ee27a46b151c", "sighting_of_ref": "indicator--56a5b0d0-9fd7-4ad5-b865-03f2f181d377", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c358f3-dd06-4706-9af1-cb0e82a33b94", "sighting_of_ref": "indicator--1348eca2-e047-4327-b406-6edc395e3360", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41cd2e2-9a99-48af-a3a1-ae15dd6aea84", "sighting_of_ref": "indicator--9c8898e4-1cf6-476f-81eb-480ec8125c75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89971d-8c2e-4fc5-a5ec-a280a473a90d", "sighting_of_ref": "indicator--9c8898e4-1cf6-476f-81eb-480ec8125c75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a86c7d-d5de-4fa5-977c-a8adb0ccd1a4", "sighting_of_ref": "indicator--08f7d80e-a072-4fc1-94d1-83fe68884534", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db83e97-2a62-44ce-84a8-ffd904efe807", "sighting_of_ref": "indicator--08f7d80e-a072-4fc1-94d1-83fe68884534", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce09e4e0-75dd-4607-a615-62f788ddd8da", "sighting_of_ref": "indicator--de41481f-8803-4401-8d5f-d32cb3f27f9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fee9630-04d2-47ef-80c0-7d070bb30cf8", "sighting_of_ref": "indicator--de41481f-8803-4401-8d5f-d32cb3f27f9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9db403-017e-4cf4-b5c3-a3b924c8a1f8", "sighting_of_ref": "indicator--59260879-66b8-40d5-84b7-7476ecb97bf4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270315ea-c0f5-4ee4-a48a-36ead5f90e49", "sighting_of_ref": "indicator--59260879-66b8-40d5-84b7-7476ecb97bf4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928d6c80-36db-4f3f-ac15-4bab5035816d", "sighting_of_ref": "indicator--29a95ea2-1ec5-43b5-99ec-bddac45701d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33612fe-e6d2-48ad-a7bd-210267540afb", "sighting_of_ref": "indicator--29a95ea2-1ec5-43b5-99ec-bddac45701d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399da366-1508-43a8-85d7-96b9c90f2b0f", "sighting_of_ref": "indicator--a44e98c1-1b45-4a07-81e8-49535b9873da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b18871e-814c-4ebd-9315-b70606d5e5ae", "sighting_of_ref": "indicator--26ae847e-58a3-400e-b132-24367dc7b502", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c17fab0-00ae-434a-b66d-a1f0f17dffd9", "sighting_of_ref": "indicator--15dc292f-5fc0-411f-a4c1-65e1a2501785", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f8d404-ed52-418f-ad77-5bcab485fd05", "sighting_of_ref": "indicator--15dc292f-5fc0-411f-a4c1-65e1a2501785", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a19228-22ad-46cd-a5e6-76216cc39e65", "sighting_of_ref": "indicator--806d20dc-490f-4389-abd2-19db83ed60ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0bdfcd-d4b2-4654-9875-bf1c5ce7d539", "sighting_of_ref": "indicator--806d20dc-490f-4389-abd2-19db83ed60ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8246c82e-b22a-4b58-9a58-55d69fe871b0", "sighting_of_ref": "indicator--7d1f89bb-6c37-4ec5-a37b-b38ecf3f5307", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2714f38-515c-4199-a1f8-e575143759e2", "sighting_of_ref": "indicator--9145f193-11c0-4a77-907a-5075ca86dc19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c155adab-5e11-412f-9275-6502f0c4c1f3", "sighting_of_ref": "indicator--08cf3096-9668-4d1d-aa85-25bcf0fcf8c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8176cd-11d2-40dc-9d4d-81545c5bb83e", "sighting_of_ref": "indicator--ae8fd91e-a35e-425a-99b5-2555f774a9e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5749d1-f291-4690-b09a-01381d27c78d", "sighting_of_ref": "indicator--ae8fd91e-a35e-425a-99b5-2555f774a9e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63558340-5937-490e-8979-d61e323e643f", "sighting_of_ref": "indicator--7bda3ae4-43c9-41b7-b0fb-5a5eb99ed5cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b541354d-ad75-44da-988c-6a783b15da8e", "sighting_of_ref": "indicator--7bda3ae4-43c9-41b7-b0fb-5a5eb99ed5cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4f5cbc-a13e-4d73-b5ba-1ca87a3f7cb1", "sighting_of_ref": "indicator--828e946c-5314-4dff-9b58-51d9ca80e825", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25896b1-8d9c-4d84-929c-c38d37f33131", "sighting_of_ref": "indicator--828e946c-5314-4dff-9b58-51d9ca80e825", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227c60ca-df31-4718-9d24-72db0062009f", "sighting_of_ref": "indicator--1699f48a-1232-4916-bd20-7926856e2cd8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c12e8ee-d440-42a7-ad87-c928a82eab3f", "sighting_of_ref": "indicator--1699f48a-1232-4916-bd20-7926856e2cd8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36863861-a768-4e76-be36-9947b78f315e", "sighting_of_ref": "indicator--db657c2c-9823-49ee-a7a3-9fcbb7adbf07", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856575ab-b528-4470-b6e3-b3d68aba5530", "sighting_of_ref": "indicator--db657c2c-9823-49ee-a7a3-9fcbb7adbf07", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f515a-6601-4995-809b-0623f70fa478", "sighting_of_ref": "indicator--4277a5b5-11f8-4cf3-841f-75d0b11f1574", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f552ad5-87c2-4365-84b3-82f7c316a45c", "sighting_of_ref": "indicator--4277a5b5-11f8-4cf3-841f-75d0b11f1574", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2d2971-6143-44de-9baa-7cd2f88a09ce", "sighting_of_ref": "indicator--a5a68c4c-0d02-4537-870c-c0211035c501", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315baaa8-7fd0-4504-a39a-6a51e55cb883", "sighting_of_ref": "indicator--a5a68c4c-0d02-4537-870c-c0211035c501", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9dddb6-25d3-4e92-9172-b06c3fe7245e", "sighting_of_ref": "indicator--5c3ab8a0-aa12-49f8-9072-1ec0d04ff270", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e70fe2-6c4f-416d-ba18-523ce65766a5", "sighting_of_ref": "indicator--5c3ab8a0-aa12-49f8-9072-1ec0d04ff270", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fec6772-0f46-4d55-8ee2-86d469d3f4e3", "sighting_of_ref": "indicator--b00dec67-f8f0-463c-91f8-5e0f93515abd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1b3ca8-b5e0-483c-ae3b-950c5115d2bf", "sighting_of_ref": "indicator--b00dec67-f8f0-463c-91f8-5e0f93515abd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e875aa-5e03-42cb-99b6-ea66a56eaced", "sighting_of_ref": "indicator--845d9972-069a-4e4e-9993-7469c116af5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab52435f-260f-4ef6-8fa9-2812993e80de", "sighting_of_ref": "indicator--6cfcf328-f014-4666-9e93-0682b1557c48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a96a4b-3150-4748-9c61-46316ea638ec", "sighting_of_ref": "indicator--6cfcf328-f014-4666-9e93-0682b1557c48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac26f157-8df7-489d-98b0-992b99c3f564", "sighting_of_ref": "indicator--73bfeac0-1381-4dc6-aa2c-b479e0416623", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b2501c-63f5-4f96-8fc7-eb62ebfe54a7", "sighting_of_ref": "indicator--73bfeac0-1381-4dc6-aa2c-b479e0416623", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c6d962-cc28-43a2-a65a-7d6b1f98a6b1", "sighting_of_ref": "indicator--c41f361d-9ffd-4373-988f-c8fd3426b128", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecf6065-fa9d-4ea2-9cb1-4e819fcaaf48", "sighting_of_ref": "indicator--c41f361d-9ffd-4373-988f-c8fd3426b128", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2f49d2-01a8-4264-b562-ef650db0c553", "sighting_of_ref": "indicator--a5f3e27f-36ae-4e1a-90a6-9ccb1fe5362b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee345f1-dfdc-4c46-b927-a5c4d96ccf70", "sighting_of_ref": "indicator--19d52780-1835-4e87-b541-d103421bed09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ac5627-4e9a-4fe0-b589-25d5d789d0e0", "sighting_of_ref": "indicator--336fa1a3-7d8f-496a-b9c7-3745d586c8fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4962795f-1a8a-44fb-8a9a-47eece604b45", "sighting_of_ref": "indicator--336fa1a3-7d8f-496a-b9c7-3745d586c8fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6d1423-7d25-4b59-8911-92f82403fc4c", "sighting_of_ref": "indicator--4460c1c4-e1f1-46f8-889e-6b599839fb0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192f96bf-cc7d-4a9e-8767-e4fb1be77be6", "sighting_of_ref": "indicator--4460c1c4-e1f1-46f8-889e-6b599839fb0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6937f58-1d86-4bc5-a9d0-45a8ce11a680", "sighting_of_ref": "indicator--436d04eb-0c2d-484d-a62e-2a7875c1b110", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adf7987-cc2e-4400-8bc6-2a49a5e8b601", "sighting_of_ref": "indicator--436d04eb-0c2d-484d-a62e-2a7875c1b110", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619248fb-127e-4618-9513-eed2e506bba9", "sighting_of_ref": "indicator--d2e09e7b-7ef6-4405-a625-55a334148f0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3937f5-7ad9-40d5-aaee-7de205114caa", "sighting_of_ref": "indicator--d2e09e7b-7ef6-4405-a625-55a334148f0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4d1893-7c6d-4e6c-90a4-ee148d0143f6", "sighting_of_ref": "indicator--f7c918ac-9295-4805-add0-490a4df02512", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb0d7af-09c5-4e39-868d-d8fdc58e618f", "sighting_of_ref": "indicator--f7c918ac-9295-4805-add0-490a4df02512", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1862bf-c4a7-48ad-bdc9-5f07ac493279", "sighting_of_ref": "indicator--d47616e7-67d6-437a-aae7-238f14fe185d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c117de6-17ea-436b-baaf-e754166c4628", "sighting_of_ref": "indicator--cb0a8ae5-18fc-4e31-a09d-0fbb23a297bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f792e8-3b38-4305-b179-c3f0ebd4aaac", "sighting_of_ref": "indicator--ea8bb5a1-7e13-4108-b2f9-443719dddccb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b240eab1-c85f-4859-a4f5-cfdcc309403c", "sighting_of_ref": "indicator--a04d34ee-e1bb-4c91-988d-dabe4210e31d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c58560-8dc2-4e90-a852-24bdaa0f7f13", "sighting_of_ref": "indicator--a495f724-38dc-4bc0-873f-62cece6e1a4e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e2ec7d-0d88-43be-a338-65ff387f03d7", "sighting_of_ref": "indicator--a495f724-38dc-4bc0-873f-62cece6e1a4e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37795da-9331-485a-87df-e96bbc7c1373", "sighting_of_ref": "indicator--f2d12627-7625-4417-a56a-a9b6279152de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47de477-da83-4404-87e2-b34f99c19580", "sighting_of_ref": "indicator--4e2c6ef4-041f-45e0-9a9c-6684d5983cdd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217497b7-cffc-4edf-a827-3bcffad46f04", "sighting_of_ref": "indicator--bbe34646-99cb-43f1-b563-3d7827cf54bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc0ae40-f2a5-433b-b83a-d9f6685ef508", "sighting_of_ref": "indicator--b88d00b8-bb53-4306-8f95-b8db17944907", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998a9464-9df9-4f21-974b-81c19a146a27", "sighting_of_ref": "indicator--7cf29650-e291-4f68-944a-f497df3daa97", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2e62fc-3759-4bfe-a18a-8ce4ab34012a", "sighting_of_ref": "indicator--7cf29650-e291-4f68-944a-f497df3daa97", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc95cacb-54c0-451c-b629-aa2935a9a21c", "sighting_of_ref": "indicator--3f1325a6-0ce4-4cb7-a022-a7df4272792f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731a8faf-34c2-4e8f-aba8-af1568d27e5e", "sighting_of_ref": "indicator--3f1325a6-0ce4-4cb7-a022-a7df4272792f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e499d84f-c8b0-4590-9e18-ed128230fed9", "sighting_of_ref": "indicator--e6746a76-0df2-48d3-b1a8-954963103b77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591ee94a-992a-45d7-aeb7-af1b26d79c68", "sighting_of_ref": "indicator--e6746a76-0df2-48d3-b1a8-954963103b77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553064f6-4cc6-42a3-8648-bc746e50afee", "sighting_of_ref": "indicator--0d149012-4c50-4ba6-b1a5-0c931f7a4743", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e7738b-63db-4f9a-b0f4-dbc96db41f07", "sighting_of_ref": "indicator--75e67b02-a2c0-4172-83f4-8e09ea870de0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee1a7e0-87ee-4331-86d8-38cc54b43781", "sighting_of_ref": "indicator--75e67b02-a2c0-4172-83f4-8e09ea870de0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b77289-7f75-4e0c-bd2e-a0ffc989f7d8", "sighting_of_ref": "indicator--96507405-8f5a-4b20-86cd-a937dd14be8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2f9574-456a-4cf6-93e4-95f782a55fe6", "sighting_of_ref": "indicator--897a1e5e-348d-4ebb-a989-d3d0290199dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920d9e9f-f1d8-4a7b-8e2e-e1c1c3c14411", "sighting_of_ref": "indicator--c01fa3ed-0c95-468c-a3ff-1b3a58db92ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1b0379-71fd-465f-9636-4f85aaf8bcb3", "sighting_of_ref": "indicator--c01fa3ed-0c95-468c-a3ff-1b3a58db92ea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c339a-82eb-4910-afa9-7463d166e750", "sighting_of_ref": "indicator--8a975331-efe4-4551-8d63-17a4e8e22e2b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535a242c-fd12-4d97-b799-ad7b9410cbe4", "sighting_of_ref": "indicator--6f3e4abd-02cd-481b-8bfc-9ffc5fd46b5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d406dd0-9aa9-4177-84f4-c3d6c7f4b46e", "sighting_of_ref": "indicator--85379207-adc6-4a32-b5dd-cf9764fb125d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecec5ac-0333-4aa0-b765-5e92304a8a4c", "sighting_of_ref": "indicator--85379207-adc6-4a32-b5dd-cf9764fb125d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6298c3-2a2e-4b2a-9597-7f378e0063af", "sighting_of_ref": "indicator--1db90c90-6df5-4ad6-be17-0f288147fda5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448f2cf1-6795-443b-9fdd-26564b4388c2", "sighting_of_ref": "indicator--a254bc84-acd0-4493-9d8f-e0066a0ccd42", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b65f781-de63-4cf9-8ce0-c19a77e1cd9d", "sighting_of_ref": "indicator--390c2b17-ef6a-4147-9694-ae14348bf740", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c05fc-8615-4ecf-aa73-7e5dd72e5e89", "sighting_of_ref": "indicator--390c2b17-ef6a-4147-9694-ae14348bf740", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8d673e-1621-41f8-80c0-72a580b2dcf7", "sighting_of_ref": "indicator--f3ff7a02-aea1-47b1-8b90-b1ddf236fe95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9515190f-7f2f-4db8-9aee-c7d7d45f26bb", "sighting_of_ref": "indicator--d684c147-6feb-4c8d-a3d9-b0b573d1fedd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53989fda-0580-4098-b563-c2956903aabf", "sighting_of_ref": "indicator--d684c147-6feb-4c8d-a3d9-b0b573d1fedd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84803161-7fbf-41c9-823a-37486b84e7ed", "sighting_of_ref": "indicator--e42e51a8-eec0-4cb1-ad7e-6a4d259b3668", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1658b80-43ef-4a5b-b37c-20f548300469", "sighting_of_ref": "indicator--e42e51a8-eec0-4cb1-ad7e-6a4d259b3668", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b779439-a366-4d1c-9f0f-28afd79a270a", "sighting_of_ref": "indicator--e1a9df30-e42b-4c0e-a64e-f550501f360e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748e3757-5b3a-4e12-9d23-3ed3c9d3c894", "sighting_of_ref": "indicator--c9022ea0-266b-4bd2-848e-2182b82ce271", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd05b1ba-8cf1-487b-bd4f-86e7c0254a39", "sighting_of_ref": "indicator--865c59a7-0c10-4a71-896a-da7aaeb3c0c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7bcac9-a26b-4005-b2dc-e4165067c426", "sighting_of_ref": "indicator--1a7fb291-599b-414b-aef1-86041a590ccd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dc537c-8ec3-442f-aced-a918fb68fdce", "sighting_of_ref": "indicator--1a7fb291-599b-414b-aef1-86041a590ccd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86928cb2-825b-4594-b787-e6116f43f53e", "sighting_of_ref": "indicator--ccb8e4f9-ebb8-47c9-b57e-c4a5fb6baa2d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa3b2de-77ec-4e18-a644-3fc1cea10ef0", "sighting_of_ref": "indicator--42b52d38-c2d5-4f86-9cc5-8b607df5f620", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c294eb-6008-4f48-a801-b04d80a87631", "sighting_of_ref": "indicator--101d43c8-b5ea-40af-942c-c96a1e05a5c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bf4c3f-5b94-48ed-bbd7-5e5503d01966", "sighting_of_ref": "indicator--101d43c8-b5ea-40af-942c-c96a1e05a5c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b438ff25-92b9-4f59-9017-0e2136a6a7ba", "sighting_of_ref": "indicator--4c1e21a3-4f9c-4ed7-8b02-5594b9f83acb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd4489e-1da0-45e8-806a-9ce20d0a1216", "sighting_of_ref": "indicator--4c1e21a3-4f9c-4ed7-8b02-5594b9f83acb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9565ee-0146-4a62-8f68-304c6e15e2e2", "sighting_of_ref": "indicator--bf426b5b-c9dc-4d47-8fc2-761cff91e952", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137344db-87ba-40f0-8f7e-741e6443d345", "sighting_of_ref": "indicator--bf426b5b-c9dc-4d47-8fc2-761cff91e952", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b5c286-9c52-4470-abc0-5f170ad61b1d", "sighting_of_ref": "indicator--ada3bf3e-82d1-4361-86e3-54ae4e4f7833", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3f1ee4-1962-4321-86b5-67afeaf6efcc", "sighting_of_ref": "indicator--5683a97e-ea92-4ee5-890b-6e73b2477f03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9736b917-6600-4bf8-9480-884ea09f21a1", "sighting_of_ref": "indicator--e41f7b03-2c28-4e1c-a2b3-3183760c9e46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac28a7df-4050-4f17-a5dc-50a2f50552a3", "sighting_of_ref": "indicator--e41f7b03-2c28-4e1c-a2b3-3183760c9e46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be87d4d-3292-4362-81c4-a6fe69316146", "sighting_of_ref": "indicator--816abd7a-91a0-4d0a-a6b8-b4df83c8ac7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2394656-c42a-43bd-8743-b94d02a5a1d0", "sighting_of_ref": "indicator--48696b95-bb1e-44f8-b6d8-b6adbe30c1fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5856d198-16ab-444f-891c-3d077839e073", "sighting_of_ref": "indicator--e0cf1fd2-a4ff-4d9a-91cf-3fb5b58add3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0af516-5a39-4783-bfe1-664ca3725488", "sighting_of_ref": "indicator--e0cf1fd2-a4ff-4d9a-91cf-3fb5b58add3e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebadb361-0456-4e91-a4c6-cba7d49285b1", "sighting_of_ref": "indicator--8650d103-12bc-48d9-b970-feee0a1198d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e5edb9-6d53-4dcb-90b5-6532b7359470", "sighting_of_ref": "indicator--589cc7ad-2257-4fa4-bffd-3770232debcd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e5b46a-6e05-49d4-a4c9-d66e4bc624c8", "sighting_of_ref": "indicator--ff59eb7d-973b-4377-9c0a-605e98ac9432", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2871de68-b558-414e-bb02-5f9a50244cba", "sighting_of_ref": "indicator--ff59eb7d-973b-4377-9c0a-605e98ac9432", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abe0675-aaac-4591-a7c1-231ce09b1ea1", "sighting_of_ref": "indicator--f851c643-41af-40d2-8d17-0c3eaf84ccb4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d41344-239a-4aa0-99e7-404a58380b21", "sighting_of_ref": "indicator--f851c643-41af-40d2-8d17-0c3eaf84ccb4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c593e50-db2f-4791-a5e7-b26091867abb", "sighting_of_ref": "indicator--768834bc-4a60-47a0-871a-97ab4aea4bdf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7384566-d207-4015-a4a7-b560a5620a26", "sighting_of_ref": "indicator--768834bc-4a60-47a0-871a-97ab4aea4bdf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a61ed2d-3502-49a9-bc3a-cd98e3060c6c", "sighting_of_ref": "indicator--da85b7ab-03b1-4b6b-9b7f-a3fa84bb4bb3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba339d9-3267-4711-9631-02edb7645643", "sighting_of_ref": "indicator--da85b7ab-03b1-4b6b-9b7f-a3fa84bb4bb3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb358f0-b577-413f-94dd-ac9104d53d7e", "sighting_of_ref": "indicator--29389947-0444-4372-81eb-3861e15381cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3105bdef-842f-475c-83bf-8d7f5f78f22c", "sighting_of_ref": "indicator--29389947-0444-4372-81eb-3861e15381cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b34584-d5cf-498d-b919-9deb86b7dcb2", "sighting_of_ref": "indicator--0160f2fa-3f9e-4a20-a5c6-45cdd279044a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c69f903-7534-4434-9490-791df8b1c0d5", "sighting_of_ref": "indicator--362ca0c1-8d9f-4863-9e14-1e259b71213b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b4d883-cf7b-4244-8a70-e30a0332a15f", "sighting_of_ref": "indicator--50525050-348e-4431-9f02-18e4557c3306", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564801ca-8061-4351-9d7a-add234ac2f7d", "sighting_of_ref": "indicator--18131076-125d-4671-8c46-ba525e19bd77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e606d2d-e4d6-41df-a9cc-d59e2c847d17", "sighting_of_ref": "indicator--951b23df-dea8-4641-801d-58fbc8bb60c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f86a15-cdde-4047-bad7-0b2557964f63", "sighting_of_ref": "indicator--5aa5cb6d-83f2-441c-b734-8e91bb526616", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ebc39-71c6-489e-aa77-86e959d5a0c2", "sighting_of_ref": "indicator--8aba42f4-6b9f-43d5-8e7c-d262b64c0f32", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6651573-b7df-4461-80c0-93f9f8055434", "sighting_of_ref": "indicator--6d97e73d-ff46-4ff6-89c2-1be8bcb57585", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280aa8f8-02c8-4509-a5f9-86f724c505c7", "sighting_of_ref": "indicator--ed2057b2-0b98-471e-a063-c9bc2e27badf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541d2ac4-9797-41e0-a633-d9e2f3c60180", "sighting_of_ref": "indicator--fd275036-9623-4c28-b4e7-11f6ab662e20", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8de4042-b66a-4ef3-8d92-83dda2cddccd", "sighting_of_ref": "indicator--9e459b54-3c2e-494c-b5af-c70151b42443", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cdcb15-690b-4915-9b23-6c4122267fd9", "sighting_of_ref": "indicator--391c70b8-fe92-4e11-9698-fd9a4b2c4f59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f672546-94f8-4399-b1c0-65393e1cfee7", "sighting_of_ref": "indicator--391c70b8-fe92-4e11-9698-fd9a4b2c4f59", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb9ae11-9030-42e3-be78-9e33b57fd494", "sighting_of_ref": "indicator--aef7aa47-13cd-4c6b-806c-341089aa6e6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48970960-37b9-4cea-8819-5a4990218e06", "sighting_of_ref": "indicator--aef7aa47-13cd-4c6b-806c-341089aa6e6b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d981584c-0c75-42c1-9351-ba3065eda246", "sighting_of_ref": "indicator--99c880e8-433b-4005-b3c2-66bde1133a33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55a5ac5-b1e1-466a-84e4-a158d561f89f", "sighting_of_ref": "indicator--1182e479-6390-4e0e-99e5-2f4c69d1baf8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ed3c95-7e97-4447-8a89-2f1d0bca06a6", "sighting_of_ref": "indicator--d07fc6c7-d771-4846-9df5-34eeac0150c4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff5dace-0910-44ad-bdcc-64e0dc82f49c", "sighting_of_ref": "indicator--a3ed0896-a559-4261-80f7-d489026c6732", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c7602a-8116-4285-b7d0-b5dad14dec5d", "sighting_of_ref": "indicator--44a39297-6ee4-4c82-a0b3-77c3f72a016c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d966624f-5c42-4b17-b779-aca82f0d2d38", "sighting_of_ref": "indicator--6a3e6e1a-1f2f-4805-aa8e-7b6e26179573", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48170a8e-02c6-4f8d-894e-1956a513a0b3", "sighting_of_ref": "indicator--fe773def-250e-4a8d-882d-a751d087a614", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1721341-6f87-4a4c-97d1-8b7a2e211b00", "sighting_of_ref": "indicator--4d6dbfac-9f22-4c48-aed8-93b8f4ea74d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16f5a9b-7760-4b93-b158-b3a5de071274", "sighting_of_ref": "indicator--4ed507ae-a4d2-42e3-a5bb-78a4b199dfb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c96028f-733e-463e-8be5-eb0569eefc77", "sighting_of_ref": "indicator--4ed507ae-a4d2-42e3-a5bb-78a4b199dfb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa663d5-c371-473e-9f29-519952299a13", "sighting_of_ref": "indicator--ccd2f8e5-4e8c-4284-bd15-c9351510c8aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556a1cb9-1d15-4f42-997c-b189cc559b3e", "sighting_of_ref": "indicator--cd4984c9-5cf4-4729-a6f4-68fc82ba7c99", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed52fc6-c38f-4e85-a660-7f4c5a01f144", "sighting_of_ref": "indicator--840b160f-fe77-419c-9aa6-1fe650218e65", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e5d881-c9a4-4086-934e-f0d6bfa61ce1", "sighting_of_ref": "indicator--840b160f-fe77-419c-9aa6-1fe650218e65", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf9c78a-1e22-4411-b49c-fe7a46fac0c8", "sighting_of_ref": "indicator--5b38c8dc-92b3-4891-936b-a6589a2d34ec", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb977bb8-f7bc-46f3-8d73-9301663583b2", "sighting_of_ref": "indicator--51656304-0b0e-4e85-9ea6-c47ba5c97dba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac33f157-26e7-4fe1-9eac-4fb817f8d6e6", "sighting_of_ref": "indicator--f60fbd81-d492-418e-800f-93c2670a7a24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ed4215-0d55-4a31-b66d-eb2cbbb9f139", "sighting_of_ref": "indicator--c542750b-1b83-4571-8eb2-aecfc2f3aa23", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945fb651-a058-4e52-8d8b-ab8e28d2c52d", "sighting_of_ref": "indicator--56ca3559-8d2f-4301-a09e-ac9796695379", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90382a6-88fd-468e-9e9b-35064230861d", "sighting_of_ref": "indicator--8e005866-72da-4a08-9112-7f21a669d58a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbb26cb-d5fa-4424-88df-e132f0c68efd", "sighting_of_ref": "indicator--a4d5f725-cfaa-4cb4-bb9d-11fe855152ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08607fb8-5ee8-491e-bab3-5d1e345d4393", "sighting_of_ref": "indicator--aae27f0c-1129-49b4-a16a-0345e71cd4ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1f9600-3d74-4706-94d7-dca9ed1e8e11", "sighting_of_ref": "indicator--02fc7cc4-79b4-4864-ae59-41e964483dbf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04948e06-ddc1-4cc2-b086-3e1ddc4761d8", "sighting_of_ref": "indicator--c159eb91-1839-43b2-8160-279d9ccf3582", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094bdbec-e9b3-4681-b278-b701ad5eb4ae", "sighting_of_ref": "indicator--a06ea08e-451c-49fd-a20c-ee1afe71b9d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e076963-cdc5-4823-9858-4df6614fb143", "sighting_of_ref": "indicator--c0e18107-99bc-40ca-92be-cb02cf2d4f44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7624c276-0067-4979-ac1c-ca8fef913c40", "sighting_of_ref": "indicator--116a0d78-ab73-4018-8c14-3c707dc4fe31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8591a357-82ad-48e3-afcc-414e652cd814", "sighting_of_ref": "indicator--cf841e3a-197e-44e6-8e6b-89491bca2113", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4404de-1a8e-4a47-9bf9-5dbe06f1d598", "sighting_of_ref": "indicator--4225174a-2673-4db7-9512-cb6afcc300e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fd04e0-967b-43ce-812a-d9b3d300f080", "sighting_of_ref": "indicator--79c23f34-664e-4a2a-901a-632ad7a7d168", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3c77a0-47d9-4476-8224-40523a9ede0d", "sighting_of_ref": "indicator--d20ba45b-78dc-4cde-9d65-ef0112a13132", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d619dca6-0172-47d7-b7f6-738d2c8d4ddf", "sighting_of_ref": "indicator--f5b79683-6bc3-4e9a-8861-874971d006b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7497cba6-bf48-42fd-beec-fdf10defb288", "sighting_of_ref": "indicator--c8f41fab-afaa-4b11-85c8-ab4def0325b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f10fed5-56fe-42c7-aefe-9a751335110a", "sighting_of_ref": "indicator--9fb623a0-25a3-497e-b707-525c3a6bfe88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118ba040-58f5-48c2-9356-8f2d9ab5047a", "sighting_of_ref": "indicator--645d7957-f688-4ff1-9a7e-974545d77bf1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598a3d1a-17c4-495a-91a9-13f591dc16a6", "sighting_of_ref": "indicator--645d7957-f688-4ff1-9a7e-974545d77bf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65722a2-9959-4e8c-8033-7f8bb534da2a", "sighting_of_ref": "indicator--ab872cc8-ae00-4d87-9c3d-a393935309db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0294044f-9348-447c-93f2-5cfd28525605", "sighting_of_ref": "indicator--f8823301-21f6-4d82-9d3a-f599ac74ae6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984f217-c67e-41d0-b868-213577acf7db", "sighting_of_ref": "indicator--a2bcd4c6-a4e4-49f0-8ae7-893392cc4228", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5722a2-3ec5-42b5-9815-111bdb8fd07d", "sighting_of_ref": "indicator--3fa8593f-8b8c-4d24-8b50-2d4440082133", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9829ab5-99fc-4976-a8ca-5fe3da624b63", "sighting_of_ref": "indicator--4963bfe8-6cb3-4c1f-ae9d-7904b6366bfd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d96d807-d0a8-447d-9b41-8f7971b8e0bc", "sighting_of_ref": "indicator--3a04f751-842c-4315-a7f7-a3f76239d248", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2c4d45-8b3b-4330-94eb-43a560d86f2c", "sighting_of_ref": "indicator--f1f98b19-327a-498d-ab36-bcbe102ecd3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a064a19-356a-4f79-a5fa-c35b80eac4e7", "sighting_of_ref": "indicator--73143d62-7c01-4ebb-b3ec-f4b2ea80c39f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2a4d3-6f37-434e-9d92-1827252d5a01", "sighting_of_ref": "indicator--b42181ab-2b7d-4213-b98a-0e6cb7e85cbe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92916cb5-0110-40ac-bbfb-f2f61d33b9b0", "sighting_of_ref": "indicator--b42181ab-2b7d-4213-b98a-0e6cb7e85cbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb01bdb-6d57-4e17-b015-363bf8e67d53", "sighting_of_ref": "indicator--aef65e71-ac1e-4e9f-abcd-aa971c7851b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d10057-918b-4583-906d-65d367f75f0e", "sighting_of_ref": "indicator--23ca6563-aa90-44fa-a4e1-1b302e171467", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4417aa-940b-4fa9-9f56-bc56cdacaedc", "sighting_of_ref": "indicator--81c6ae9f-e4c2-42d8-bcc4-77b7300d83af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16faf206-b579-4853-b718-f4103bc7467a", "sighting_of_ref": "indicator--e7dcf1aa-8b61-4781-b963-0e491b52ea12", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be35374c-f3d4-4aa6-acf7-9507a3779515", "sighting_of_ref": "indicator--9f3f11b6-6127-4f46-a38e-f020048cf0d2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706bc9e-bf69-4adb-b809-42f045fd2574", "sighting_of_ref": "indicator--52bd793a-6b7e-43b8-9b2c-314430af0c6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca302a2-cc03-47c3-93da-42c3bbbd1dfd", "sighting_of_ref": "indicator--959ac270-c005-410a-a645-9aaad01dcd0d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042fe72-1dd8-4292-b362-86106546f76d", "sighting_of_ref": "indicator--328e86c2-e91a-48b1-ad62-999de97346e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5323c9b-5200-4601-8527-5a3d0a83287a", "sighting_of_ref": "indicator--7a9b9c7e-ec38-4700-a57c-2ea867b8edeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b0c616-ad76-4986-9b3d-ac01644c1d57", "sighting_of_ref": "indicator--4ec7f62f-86b1-4913-855a-8d12a640344b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11ba6cc-a63e-4562-8a67-0862d63b650c", "sighting_of_ref": "indicator--4ec7f62f-86b1-4913-855a-8d12a640344b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db93afff-691b-44f2-874c-205ef26195be", "sighting_of_ref": "indicator--5d426995-e34d-4030-a682-33916248ab52", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681958b-b77e-4718-ab7b-27887724e5ab", "sighting_of_ref": "indicator--4706e95a-3803-4873-ad78-3ccd94f9c0b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db11573b-3d82-4cbc-ac34-ab15d99f9bba", "sighting_of_ref": "indicator--9c92e2be-e144-4768-9cd0-08d40e73b61a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be812408-197e-494c-823a-c362ebc3b27a", "sighting_of_ref": "indicator--d532311d-7af7-4288-babe-dcb9928f94ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54866ea2-1be1-44c1-a4fb-fc763fdf29fa", "sighting_of_ref": "indicator--f6d1d41e-9a60-4fcb-a3b5-a434bf05bb64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1046d9-f6f4-41cb-9806-283358708cd9", "sighting_of_ref": "indicator--a16217a3-4cc3-48e9-92e7-9a51eb4afe5b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc72bf50-128b-45b4-9b73-da5c878d7adf", "sighting_of_ref": "indicator--a16217a3-4cc3-48e9-92e7-9a51eb4afe5b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6b9a98-5c12-4af7-b114-abae84ae3f6d", "sighting_of_ref": "indicator--9e243e6d-8bb6-4677-b91e-43b141fcd5e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bff7c3-7078-4c27-b82f-90f2e11a5e12", "sighting_of_ref": "indicator--9e373d71-e62c-454a-9d5d-f4ce2a43dd46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2d1b1f-9c55-4e83-ab50-2734e11d9d77", "sighting_of_ref": "indicator--9d4922f3-116e-4081-a934-3c1ea2693358", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00210860-4f8a-4a28-831a-343c26cae287", "sighting_of_ref": "indicator--ad48af14-5201-45b2-bb21-4e49d8f154ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8d5be2-1086-496e-9c03-5bb72b6c0da7", "sighting_of_ref": "indicator--20a31aeb-331a-452c-9f11-ae8d30f79cec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdc7c1a-9096-418a-87d7-44ac04be03d1", "sighting_of_ref": "indicator--815e5965-2d0d-4d35-a9cc-c4c63ba421d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786bd156-e343-45cb-9f52-91be40756029", "sighting_of_ref": "indicator--76304cf7-b8a6-4346-a160-aba4bce72ed4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7cabd1-d11b-4962-a738-8d0641fcc67f", "sighting_of_ref": "indicator--f16aa947-fe81-4f0c-908d-05c24625a66d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f7c555-bfd9-4a8e-8a4e-6c826c1f256c", "sighting_of_ref": "indicator--d531b4ff-508f-4536-bb1c-806e4c5338cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ba70f2-1014-4dd0-bc63-6216a34c9872", "sighting_of_ref": "indicator--38124e24-8818-4569-b1a0-6c56833d80bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ef5266-cd69-46b0-ab7c-3ad860634e4a", "sighting_of_ref": "indicator--d3bfdf6a-dd4b-419d-a462-704ff276e344", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8816947c-bea4-42d6-a301-1928c8d2816f", "sighting_of_ref": "indicator--ee9a4859-5646-482f-8b44-557c656e36b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95014fa5-9128-4ecd-a40f-ac04d1da30f2", "sighting_of_ref": "indicator--d810f917-7203-4a76-a645-3d082d650236", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e66a122-e53f-4026-bd1b-d80db591034b", "sighting_of_ref": "indicator--49175393-7de1-4681-959d-da666ab5f28c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05fa6d8-c65e-4e40-81fe-ff2dd7e65688", "sighting_of_ref": "indicator--a5681faa-bcee-4b40-bcb3-f6ac6b3c2e4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eca3317-2ce0-4820-94c4-64b06a7d336e", "sighting_of_ref": "indicator--24e95bc5-b38d-46bc-9d66-eb0a516505b3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b846bf-d57e-47e0-926a-473fd1cf1b9f", "sighting_of_ref": "indicator--37eb1a7d-b539-4548-8d51-3f6df16de80f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64779f96-a840-41ef-b21c-9a0494ae3675", "sighting_of_ref": "indicator--9790d912-e7cb-4560-b71e-86f7f5bdc49a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69d3a5a-36a1-4660-99bd-770d16a73bdd", "sighting_of_ref": "indicator--1e66c1f2-9691-4722-9bdd-f2dcce084636", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37311cf8-b640-492d-87cf-9296404ef8f3", "sighting_of_ref": "indicator--afca3589-83fd-4b2e-8693-03724b8c4d1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591b601e-0a74-40d2-bfb3-c24c249e428b", "sighting_of_ref": "indicator--a6d2adf3-e8ab-4416-95ee-8f1c54a9274e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3993df94-80d2-429b-9eed-b62db418dace", "sighting_of_ref": "indicator--1160bcab-98fc-40d5-8369-1d9c56c33179", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29795bea-cbc2-4181-b2db-0ff50f15a7e3", "sighting_of_ref": "indicator--df81a814-d5dd-409b-9913-d91340f9caeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6c249-f8c6-4a38-ad6b-4a2b34ddf395", "sighting_of_ref": "indicator--4d57122d-8522-43e3-bb2c-ba8d1c9bab6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c89ca-8a0d-45e3-9d1e-8d093edad1a4", "sighting_of_ref": "indicator--04d92f51-6d8e-4335-864b-24cc59bcc57b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed968725-d422-4b2f-8597-3fa1521d6d39", "sighting_of_ref": "indicator--830be855-acd0-4846-9057-a63060d8bc3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7306015d-85ac-4ed6-af5c-7b42b29d8e3a", "sighting_of_ref": "indicator--6cdbf29c-bbc8-4d2f-9506-62d7c826e238", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468afd41-05eb-48ba-8d9f-fdce348d0426", "sighting_of_ref": "indicator--fbfaeb8e-6676-440d-bcec-0cf1b36ba3df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee5d8ad-2d54-4702-9778-1cbf54198397", "sighting_of_ref": "indicator--e0e7896e-74b9-4f03-aea7-8627027a6fc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f93e88-c506-46a2-9f30-5057c93f35ad", "sighting_of_ref": "indicator--1213c89a-723c-4cac-8f0d-b75a76d46c00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f160c54-27b1-410b-816f-81f3686286b8", "sighting_of_ref": "indicator--38e54ec8-0575-4f9e-bb63-88862905a3e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e790812c-377c-4be4-89f7-abe0de592b13", "sighting_of_ref": "indicator--0d1c9c33-5818-4dc3-a1ce-a96c37f5f283", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288eab4b-df27-4d68-9870-b97cde71713d", "sighting_of_ref": "indicator--9d56aea1-7cf8-4522-8425-69408194deb1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1596695f-0449-4ff3-99fd-5b7bfd4e77f9", "sighting_of_ref": "indicator--87a9d53e-8ea2-4349-ac96-134a526db30d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744974f8-879a-4e74-a9df-b0463edbc104", "sighting_of_ref": "indicator--43351e43-07e8-4801-92c1-d282f3d93c8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f04d4c-83be-41d2-8d35-7da7a4d12de2", "sighting_of_ref": "indicator--e0ee2ec9-00fd-4373-b296-16a67a699b5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38243b05-ce6b-462b-b4ea-b091e15eae8d", "sighting_of_ref": "indicator--b87d6676-895a-4109-b259-e80bebf0b1ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ac4cf-f968-4266-8b4d-7a00a1ca9355", "sighting_of_ref": "indicator--5c125879-5404-4f13-935e-f13dd352515c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fad043-0512-4faf-a337-56142da1fa38", "sighting_of_ref": "indicator--8c707ddc-ee4b-4982-b80d-c4b14cc8fc68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6479b207-e8ea-487d-9d1b-0fa01b043aec", "sighting_of_ref": "indicator--5e7e7ed1-1493-4177-a247-01ffdf3a340a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bb16fe-0f6a-4193-8de2-d1183e84c490", "sighting_of_ref": "indicator--6ac0efd5-f93d-47ac-901f-5d5d9a9ce244", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df204cc5-8f0b-49cf-8665-f8259a9c3a5e", "sighting_of_ref": "indicator--781ca297-6ded-4526-a040-1119de6db83a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e685381d-8cca-441b-bec9-820f75c8aea3", "sighting_of_ref": "indicator--60f03340-f093-4990-97cf-7faa8923e0ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998f12a-6efe-4d39-8be8-516fc48007cb", "sighting_of_ref": "indicator--1a069112-9807-4fb4-8d0d-fa6330dfa2d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254b0fce-4968-4a39-8039-0ac859369cfc", "sighting_of_ref": "indicator--6a198b02-23ef-438d-a8a6-ea37385e8e98", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1930e85b-5dc7-4435-a2e5-3e32bb948ea2", "sighting_of_ref": "indicator--a19fab5e-8d1e-4423-9748-76160b98f495", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cea60db-bf7d-400a-9209-0ac69e48b1f4", "sighting_of_ref": "indicator--9d6ac0df-67d6-4a03-8650-a774fa5c1866", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b45caca-d18a-48a1-bc63-d0cc4a5caf05", "sighting_of_ref": "indicator--584e255b-5915-4617-b4bc-c124599a2f73", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b52e54c-da75-4ab4-a827-57e4698029f6", "sighting_of_ref": "indicator--b20d62ff-9a9b-436b-af2c-2ca7e6cfdb26", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0e1be6-01fb-422c-99bd-e2ca2f1ac15a", "sighting_of_ref": "indicator--6bf3444a-3cd5-4438-b7ea-7bb7dfc90bee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac93eaf-2c84-41c2-b280-668ebbb6e164", "sighting_of_ref": "indicator--c819b841-6395-4c8b-bd9b-76e2f2050569", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc7d425-043d-4e3c-a3eb-739e57b522fd", "sighting_of_ref": "indicator--4fcce3e6-9e1a-443c-a22f-1c324e02594a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1919f5ec-43a5-4637-a853-5be155bb0cf2", "sighting_of_ref": "indicator--d3a98142-a652-4273-b6dd-02a0e94ef564", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3042fe04-8a8f-4cb3-b6c0-55aaf038bfb0", "sighting_of_ref": "indicator--4717bb90-8e90-4773-bb3f-6320620dca44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8763f9a1-9c1e-416d-b8cb-e15fc631fecd", "sighting_of_ref": "indicator--6b66dad2-0500-4849-bf9f-c3d97225c62f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ec36a0-c654-4001-ac01-21a74eaa0b8f", "sighting_of_ref": "indicator--c1d6237e-6684-4080-81f8-f772801608da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad59dc35-2f96-43b2-8487-d190ddc37345", "sighting_of_ref": "indicator--a0ed0282-caf0-48b4-b65a-99d613bfda1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413fb658-c87b-40b7-a1e2-cf2367167b05", "sighting_of_ref": "indicator--eb0b471e-a929-4ee2-9885-4fe3373df0ee", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd1a05-56c0-42d9-8374-21d86248a1d5", "sighting_of_ref": "indicator--8bac26d0-62d6-4be5-b54b-158375ad4c2b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a437e4fa-1193-43bf-96d4-9fb45453970b", "sighting_of_ref": "indicator--7423adee-8229-4540-b032-f0dcc8d376d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb6049a-8234-42f3-a26e-0a4ec04fd748", "sighting_of_ref": "indicator--906cd8ca-7a07-49bb-a94d-454ea2ee6dbf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fa280e-09df-435b-81ec-cbbdf90e3f2a", "sighting_of_ref": "indicator--d40ea27c-b569-4ea7-b5d3-e2be42a096a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71a97a8-be6f-427f-9170-3cca14758a1f", "sighting_of_ref": "indicator--ef628f89-8dfd-44eb-a887-1384aee74678", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c2882-d940-4b69-8855-2e70e108a335", "sighting_of_ref": "indicator--0aeb74bd-d7c4-40e9-9497-b0661e0e719c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5308635-940b-4d97-b24e-df3ac02da513", "sighting_of_ref": "indicator--2997c0ec-4cd2-4353-ba17-e9cfca690987", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e148ab40-4781-4fe3-a5b7-590305efe171", "sighting_of_ref": "indicator--39f1cadc-b66e-4353-92a5-f1b408d04303", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7de2d9e-7384-44a4-bc3d-c2c77d76731e", "sighting_of_ref": "indicator--c1568df3-1943-4b89-9c2c-72b24c802281", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9368677e-33f5-4c69-b1cc-ff71af39f1eb", "sighting_of_ref": "indicator--b38c8c43-b91b-452d-952b-f7f29d3f35fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804cdc6b-0717-4ec0-b84e-92788d0cc8b4", "sighting_of_ref": "indicator--4ab30699-07e7-4616-ac40-e488a9b1236b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09017e86-b7b0-45e3-8695-108088947e86", "sighting_of_ref": "indicator--faecfbda-3f96-44b6-8fe3-4038e10cc74e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6451ecd-bee6-43e6-a931-d6a023c415e6", "sighting_of_ref": "indicator--32101de4-b063-4560-ad81-b7310b3d9131", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e205770-d165-4c32-ae68-d9cea8c8ada0", "sighting_of_ref": "indicator--5b059715-d5c0-40ab-98de-c43f8e2e2703", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e194d55e-5358-4283-9011-5c194c005a0d", "sighting_of_ref": "indicator--064c8372-b715-4eef-a37c-79d730103d46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3f8ef2-78ab-49b4-bcec-70734e81f676", "sighting_of_ref": "indicator--e9d80f90-66b4-448d-a19c-a0c39c127bf9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63e8782-3261-4621-95a3-fc848d609505", "sighting_of_ref": "indicator--fe3b66a1-8942-4818-bc5f-97c13fac2113", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85091d-1bca-4934-9659-a0ff1451bcff", "sighting_of_ref": "indicator--884c060a-d212-47a1-b20e-3721d7aa8758", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cc2f5e-fbce-4d94-81aa-76b90bbf64b7", "sighting_of_ref": "indicator--bbafcbc9-e223-4f2b-bcae-6c3fb442b390", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c6cc1-8a19-40b3-9865-e1069b1ed8e7", "sighting_of_ref": "indicator--dc3e0d81-4bdd-420e-bef9-59144cc4fde7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ba72ef-91d0-443e-99d1-7763fb821fb9", "sighting_of_ref": "indicator--b493fe69-7744-4dcb-ac8a-e0c85320a5e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34122e69-5124-415d-8e92-3fa7300a416f", "sighting_of_ref": "indicator--3429008c-7793-4aab-9af1-9dc9846d3c92", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0dad7a-5e01-4d04-b66a-74242f9d55aa", "sighting_of_ref": "indicator--a6cedeb4-f5e8-4bf3-a740-ba1f659b8706", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7954b416-9bb3-4e08-82bb-ab2603da5b50", "sighting_of_ref": "indicator--bd0ba36c-eedb-46cf-9ea9-95c08baad03c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190e3d40-b7f4-45d4-9bdc-ceae4cd67d9b", "sighting_of_ref": "indicator--4e136cdf-8067-4cf4-94c2-1036e8bc4f62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da644c4-a02b-470d-b254-8d999a241be4", "sighting_of_ref": "indicator--6e1a4bc2-7ed3-4ee0-b753-e4c77a1611d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea296c2-aef6-4dca-ac12-97d5275aa647", "sighting_of_ref": "indicator--5548d3e5-bc08-42ac-9712-b28abb306521", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c9df83-b23e-455e-8dd5-b82bb337f9fc", "sighting_of_ref": "indicator--483d26d7-d9b1-4086-b598-3efef758c978", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf94eb5c-9e40-461a-b1a1-4ac3da121d92", "sighting_of_ref": "indicator--d3fc52e2-3ee7-496a-896d-250b010c5275", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d89cfc-66e1-494b-8cdf-04a234293038", "sighting_of_ref": "indicator--747b5c24-ddd3-4672-9c06-256c6ede34d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07292e70-fd8c-4804-8844-127f3db6767c", "sighting_of_ref": "indicator--812f7b51-a1eb-4214-97c7-0dd57108bce0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bbd3e0-0227-4258-8a73-692886db3678", "sighting_of_ref": "indicator--75315228-6203-4df9-8510-997b38e42fa8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dad99b3-634d-49c6-ae05-95b2c0f45215", "sighting_of_ref": "indicator--548c4b56-93d1-41db-849a-3a55c57002f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bfbc92-7dc6-4141-86bf-1dd9bc7b3312", "sighting_of_ref": "indicator--eeb0e4cf-9a5e-49dd-92c9-0855ffff5723", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268e7ebf-d7d6-4872-8a43-5a00dae6dd1b", "sighting_of_ref": "indicator--03bf9761-482d-4bbe-a30e-ec3a74d42ce1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243e8a95-f838-42a7-ac1f-f479f1888552", "sighting_of_ref": "indicator--6742d552-74c2-4e9c-a965-a06362a578e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de6d8f9-e15f-4d49-9869-31379e32e42d", "sighting_of_ref": "indicator--1758617a-20d6-4668-b8e5-4819b43cfbcc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc924237-031f-4a88-a975-1c9452ecdbc2", "sighting_of_ref": "indicator--6edd00ba-2925-4fdb-bb39-8c2f55ddd0bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8952448-6703-4e28-b95d-5192e8282fe3", "sighting_of_ref": "indicator--6ef0ac33-eb9f-4f96-a55f-6db20786a5b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e60571c-0879-42b8-b64c-b543a3b77d7b", "sighting_of_ref": "indicator--d4be3fed-5b48-461d-9420-33506a0fe835", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f6155d-32c0-42bf-a4f3-cdcdcd5ce3c3", "sighting_of_ref": "indicator--a99e8792-d191-4159-a0af-2728a6104129", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41766d48-46b0-4df9-a4a3-48e741676fc1", "sighting_of_ref": "indicator--b4163a40-ece8-426a-9646-1aaa38aa9595", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7cdb57-6ea2-44ff-adc6-0cbd97b3855e", "sighting_of_ref": "indicator--74d02c3f-783a-445e-b85c-779b078b1cb2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305fcd9e-b493-49cf-ba88-3d4557918df9", "sighting_of_ref": "indicator--bc125750-176d-463d-816d-394f6c7715d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff280aa-e1d9-4fe1-bf77-4ebcf6057da6", "sighting_of_ref": "indicator--cd02e9e1-ad14-4877-9aaf-204104309dee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f025a9a-7331-49ad-b12c-0e9bb073fca0", "sighting_of_ref": "indicator--2431ccf2-7fb2-4527-af48-dfd0489cadb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da52a9b-1604-4757-a3be-195c34a941e1", "sighting_of_ref": "indicator--8974def0-f178-4e2b-8bb9-0920c12d6710", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f989417b-ad56-40ca-b02e-1871fa8804e0", "sighting_of_ref": "indicator--169f6205-614d-4836-8ebf-9f1db4c3a8bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f4b21c-97fc-482a-82e1-e59e5399d6df", "sighting_of_ref": "indicator--82de5544-1523-469e-aa7c-c21e72a23844", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ec7851-4989-42e4-963d-a68640e038e3", "sighting_of_ref": "indicator--e8b41740-1f40-48cf-9eb7-c08bbdf27f02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f1b2c-c933-4c4c-a0bd-7c9478296718", "sighting_of_ref": "indicator--702a519c-93bb-4a81-be31-ac401ae276ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53647d3-c9a4-4ab2-8992-2033189e6366", "sighting_of_ref": "indicator--cdd91b8b-a2a7-468f-92c0-e772c1c77358", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c424b1c-4c88-4fa3-bece-44e3bb955590", "sighting_of_ref": "indicator--ccf25e0a-d099-495f-a414-a2dbcbb583a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630fe7cd-9443-4755-99b9-b6c108516944", "sighting_of_ref": "indicator--1f7b59b3-ac14-43e7-99fb-e9eb0ad8198c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee11ea7c-39ab-4a95-8e45-2eb341bd2d7b", "sighting_of_ref": "indicator--c25d7820-5938-4adc-af90-5d6d7088ff95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da068a-09fd-4a7b-a9ec-92aac1054fa2", "sighting_of_ref": "indicator--920089de-e816-4a45-8af5-8dedf79decaf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b66cd2-4d9a-45ca-a66b-b7455c34c6ff", "sighting_of_ref": "indicator--f94be82e-de81-4bcd-bfd8-27ce4427285d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2612789e-48c5-454c-99d5-1dfdbdadf3b3", "sighting_of_ref": "indicator--c96fe559-90d3-402e-8123-c40d776668fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0133c62-0915-44ef-8534-e4325fb1ef52", "sighting_of_ref": "indicator--3145125f-7ea2-4a66-a641-918ca2bd60a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32787352-4942-4ba9-a22c-4b894bf4e5d5", "sighting_of_ref": "indicator--b288bac3-27c2-47bb-acfa-b26e2808110a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61eba20a-5b77-48dd-a9ac-c34034cf9090", "sighting_of_ref": "indicator--0a0eaff3-900d-4cb3-9743-0f71444f1c40", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ec48eb-f5f2-4a87-9912-9585dc5ba630", "sighting_of_ref": "indicator--2cf15cc1-ec49-4ad7-803e-c74aca97caac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2aa767-cec8-44a6-bab0-3ee255b66cff", "sighting_of_ref": "indicator--dbff8acf-64cc-41b0-b449-78215953132f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb943ac5-56df-4810-88a8-c05037ec9e67", "sighting_of_ref": "indicator--387bcfa6-d419-460a-bfa1-46f0d760ad4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269bd064-1a90-4b3c-9c80-b4a2eb0d56b0", "sighting_of_ref": "indicator--5c4ac47f-f1a2-4759-9823-149895a2b7e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5035783-1f5f-41c4-bfcc-305903993209", "sighting_of_ref": "indicator--dbbaf6c7-319a-44cd-8ced-4b496a53697a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ef4fae-8733-4a0b-9fb3-1c89bc7bb8c4", "sighting_of_ref": "indicator--cdb5b1e1-5a37-4a52-85d8-a94b43b506f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8949e8-0c1a-4d9f-b85c-6d87ec3e2fd6", "sighting_of_ref": "indicator--a98b115f-f8fe-45cd-ab78-ce9527235bf1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af835ea7-6b96-4f32-a91e-29b0b6d06d07", "sighting_of_ref": "indicator--84a0b895-2664-4377-a097-2373f56d92ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfecf1e-6fa4-4da1-a300-36812092c132", "sighting_of_ref": "indicator--101c5f57-094f-4d4e-8c86-af0c5d66d737", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076d713c-e5ee-4b89-88f7-a940c0cb9192", "sighting_of_ref": "indicator--1b05d41f-c343-4244-be3c-15a09b123719", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1711c8-b2ce-43cc-ada1-1e40a52bb24b", "sighting_of_ref": "indicator--f9fb5f46-bbc5-4899-b393-9124ee9dc01c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678d397d-b7e7-4b7e-a873-b610dcc0ac79", "sighting_of_ref": "indicator--77c683f4-fd54-4ce1-a3e4-bd99109a4e32", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6d42e-906b-449d-9eb1-a46dc2705076", "sighting_of_ref": "indicator--77c683f4-fd54-4ce1-a3e4-bd99109a4e32", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babb429b-3e71-495a-a6a4-def507d3c8ed", "sighting_of_ref": "indicator--feaa9ee7-85b9-4600-af65-2a7e110688de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd3a0f7-edf0-41c6-87b5-45007edea18c", "sighting_of_ref": "indicator--3ebb45b2-460f-4048-bba7-b276153c096a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65013956-b152-4478-9310-33082a8f5709", "sighting_of_ref": "indicator--6c1c0c52-f6c3-4f1f-930d-bdf60facfad4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c3aad6-6ebb-440e-ae49-3384a6e9c1db", "sighting_of_ref": "indicator--06fe2be2-d71c-4d2c-9acf-49b94b81393c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4c5d3f-e101-48be-abff-c99317336993", "sighting_of_ref": "indicator--52577670-7b7c-487f-809d-43ff3e688d1d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd8cbce-3228-4e53-8af0-6c616fd72ff3", "sighting_of_ref": "indicator--29656508-10d8-420c-a7a9-60076ae94af0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f07d31-07cb-4ba7-9101-44d906faa446", "sighting_of_ref": "indicator--42f162d1-f164-48e6-a82d-f09fbab3f7b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced7bf4b-08e6-47d7-8aed-c805e3086542", "sighting_of_ref": "indicator--711908a7-d546-41ae-96ea-c92c91d4b947", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68042d2-ef5b-4c84-9de9-d856c84c7ecf", "sighting_of_ref": "indicator--e01e1994-e21e-47fb-88d0-701ed573d76e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce91350-b7ab-44dc-b613-bd15d920a7ff", "sighting_of_ref": "indicator--886e99a5-2639-4c1d-8ee5-bd8dfc929eac", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d80f92-db66-4489-a9e8-3950bd934afd", "sighting_of_ref": "indicator--41e69cab-f9dc-4a6b-a9ca-1ba297b5cce9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c83a34-49a7-420b-bdc8-1e62a9936c54", "sighting_of_ref": "indicator--adefcd84-cefc-4403-a639-dcbace5d0279", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cfc166-fbc3-4b85-9951-e06dfdb566ba", "sighting_of_ref": "indicator--699f0c92-1afe-44cb-9d43-0cdfd18abcc8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a300a05c-eceb-4ce6-9c65-8d4984d35d01", "sighting_of_ref": "indicator--55dacc90-5845-4fc2-b6bc-cd966a4ce9fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4c817c-2a72-4920-ad20-4250bf2727c3", "sighting_of_ref": "indicator--b0a05122-4939-4775-b549-539764823364", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d13cc8d-14e0-47f2-ae9c-fb0056cec788", "sighting_of_ref": "indicator--2e02cec0-60e2-4eeb-ad73-5ac9b062599e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e91005-1645-4ffd-80d1-1ecad5b488c5", "sighting_of_ref": "indicator--6053c02a-98e2-4619-8e12-b45b20d423cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44e9b1e-66d0-4ae2-9a51-dd1b0d961dc8", "sighting_of_ref": "indicator--812c145b-1c60-4267-be5d-aaefa820be74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e207ca64-53db-485d-8bbb-f61af8448ff4", "sighting_of_ref": "indicator--f3fb534e-86cc-46ed-8f0f-bf33e48afb28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb93722-2bfd-4d5e-be9b-e08ce723eca9", "sighting_of_ref": "indicator--6e960c63-b4da-42f3-a790-63432e299a08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715d1e63-a4f8-4989-9bc3-19c189c3f447", "sighting_of_ref": "indicator--a0d5025b-224a-455f-b976-0f57131aaf47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc74af7a-e48a-464f-a37b-c02fcd9a0c2d", "sighting_of_ref": "indicator--113421f1-171b-4643-ae9f-3b3288cff182", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf625d0-0152-43cd-96df-5749e53cffd8", "sighting_of_ref": "indicator--cc3834dc-c421-44e7-ac74-29267f674e6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c22c74-5fdb-4e0e-9908-410cf2335dc2", "sighting_of_ref": "indicator--18c9d092-5eeb-4f93-85d9-8511a2ff12c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4073c120-8b48-4a3d-935e-766943b4ffb5", "sighting_of_ref": "indicator--f6ca47e2-4562-4a5d-9487-894591335865", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df43bc82-2d1c-4b51-8e87-36f3952610df", "sighting_of_ref": "indicator--057228e2-2a54-4d9c-8bb9-fd6a28d88390", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7caaf6e4-8b31-48f1-a25a-caba96dfbaaf", "sighting_of_ref": "indicator--999d5dd1-b15c-489b-be52-70e22b3955dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de5727-3a82-4663-af8c-f8797b8aface", "sighting_of_ref": "indicator--24d296af-1f10-4b42-97df-3626c5ff09e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dde928-ad5d-4eef-8246-e176d74b6189", "sighting_of_ref": "indicator--6c340b0e-3be0-4f43-ad33-15303c39fefe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d897f-4d2a-4ca9-8f7c-7f5e9399df28", "sighting_of_ref": "indicator--a0c46d7d-b3e3-432d-b1ce-e87f52e64280", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df3afa3-29b6-4c41-a0e6-4b0d6b4af10d", "sighting_of_ref": "indicator--bbd3daee-4cd5-48ea-ae2c-eb292379a979", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c4995c-83d8-4564-ac57-b0f6482b4d54", "sighting_of_ref": "indicator--486ffa6a-9cc4-4e22-83f6-8c919b121d01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22b3ca3-cd6b-4e57-8c2f-2bd5e5920902", "sighting_of_ref": "indicator--c6d99a9e-1af2-441b-8008-13481dbc4b2b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c57fb0d-038b-478f-9f4c-451207664c13", "sighting_of_ref": "indicator--0cad2332-b36d-4fe4-8513-ada1da20e98f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52c3211-c801-477e-8f0b-94f01f14dc03", "sighting_of_ref": "indicator--a0cceab2-9087-4e4f-9444-6999bdec5e08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddba184-b02d-477e-ae4d-1a527ec2deb6", "sighting_of_ref": "indicator--d0b91d71-33c2-4661-aaaf-b02769fa8caf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928365f7-0bb5-427d-a653-c982a124ff8e", "sighting_of_ref": "indicator--278cefa8-72ea-44cf-ae2d-ae161ec6896d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0bf00b-7799-4eee-a582-f6315deab949", "sighting_of_ref": "indicator--6faa693f-279d-4cdb-b4a5-25614c792dbb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc2989e-91a0-4c74-b4f5-2abcb865fce1", "sighting_of_ref": "indicator--88e07d1d-95f4-493f-ad87-2e5a090f093d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea8657a-77c1-47c6-a994-6ed69eb7c1dd", "sighting_of_ref": "indicator--f766dc2e-0504-4434-92f3-cc1894675c70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021a236e-8e7a-41e2-9287-1321bbdf984d", "sighting_of_ref": "indicator--30bb6db6-640c-45a1-a587-bbe73438ba84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcafab0f-9eed-400f-99c8-c94f2e0c1936", "sighting_of_ref": "indicator--a5a1516f-74fd-4dbd-84a0-ac5187638f20", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd33ed9f-2cb9-4369-99df-807f71ec5264", "sighting_of_ref": "indicator--6db28409-6ecd-4ae8-adae-e43d7a3e3a18", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaaf51f-3e01-45ac-ad28-7d803141445a", "sighting_of_ref": "indicator--7277943b-2e88-4bec-843d-3c8c1163f0f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec83cf5-b543-4f3a-86e8-fc1e885b6ece", "sighting_of_ref": "indicator--bc100ec9-385a-4ad6-a24e-38eb36c4c830", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab330ed1-3347-4674-96ea-b07dc89787d0", "sighting_of_ref": "indicator--b156fcd7-9ae2-467a-b25b-0cc909460a6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a0270c-1dd7-4d07-8081-deb435058fb7", "sighting_of_ref": "indicator--a5733ce0-ca80-4b84-ae24-3c504b3732d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55464cc8-27df-4c78-abf5-e1b4f0f2eb45", "sighting_of_ref": "indicator--61a39416-958d-486a-952e-2cc00bbb3fdd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c72ff41-c768-457e-8565-c9caf487ae7a", "sighting_of_ref": "indicator--a69ee83b-470e-497e-bc92-df1c50c7b263", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb70336-0f14-4e7c-8579-b9d579a0ef94", "sighting_of_ref": "indicator--8bfe081a-afb7-40d3-8323-0ade015ffdbb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d715e-9a47-439c-a627-2ec016a30562", "sighting_of_ref": "indicator--4245962e-d585-4fb9-8d20-6da280de105e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be4e607-6834-4951-9f6f-bf6a9b63aefc", "sighting_of_ref": "indicator--4245962e-d585-4fb9-8d20-6da280de105e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50b13e0-7eac-4794-9ff7-de6f846d7741", "sighting_of_ref": "indicator--6fbde6d1-f2fc-48cc-9066-5c86bdbe40ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9eee96-5892-4adc-8f41-dd5c45468b31", "sighting_of_ref": "indicator--c20aa199-876c-45f0-ad8f-0f3130fa8e4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ab24fd-ba04-4b0b-a2cf-3ac87495341b", "sighting_of_ref": "indicator--a6f113fe-9fd3-4aad-864f-f237da07d15e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38e5bb8-24c6-47bb-980f-5ff906ef77fd", "sighting_of_ref": "indicator--f5659576-2f8c-4ef8-ac6b-c5795a904bb1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9a221d-971c-4e9d-be5d-5ec93594fc90", "sighting_of_ref": "indicator--ca6143d7-1c4e-48f4-9328-5c6a67f508c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2926782c-2740-415b-b901-6cdd7723a2ec", "sighting_of_ref": "indicator--cfca9a73-10f9-41fe-abab-dcc8ac4c495b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e366369f-fce5-44c6-829f-ccdb52c97de6", "sighting_of_ref": "indicator--7425258f-8b20-42eb-ac85-9aa39ff7482c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857d5380-e557-40d8-b868-4a6dc101ca75", "sighting_of_ref": "indicator--e38aaa24-e04f-42f8-8e73-027cbad6727b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06327cb-5afa-4327-9f19-5e0fa6ec09c0", "sighting_of_ref": "indicator--75923da3-d751-49aa-87c3-44027d803fcb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bf0f4c-dd69-496c-a91a-5ffc9e994a04", "sighting_of_ref": "indicator--ff70fe3f-2c5f-4c6b-a054-92baab53eeb4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d76710-4dfe-4199-85a8-d6f11412fa5c", "sighting_of_ref": "indicator--7712b489-8a0d-46e5-bcb4-ced6811c109b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08482c9-6b8f-4fe5-9aed-99d5199d6169", "sighting_of_ref": "indicator--d478239b-4e6a-427d-ba9b-54ab391ab1fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8189dcbe-ae64-44c5-97ac-a336345bf356", "sighting_of_ref": "indicator--379fc763-07d5-4d63-adba-712c5161a28c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565a1349-cad8-4eb0-a66e-b0547906a4d4", "sighting_of_ref": "indicator--b62a7b32-7b3e-4e4d-b30a-59d24497c498", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ced6de7-a1ac-4af5-8747-765b164c7256", "sighting_of_ref": "indicator--f582fda5-ac55-4841-bb15-ff5a735b8581", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd32966b-e2fc-4b19-82e3-031b4cec9c3a", "sighting_of_ref": "indicator--edb8245d-efa2-4692-ac0f-4f010847497b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4f1249-774d-4b62-86e5-562667df2511", "sighting_of_ref": "indicator--7614589b-fba6-46ab-b01b-0c746e7c5b48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce30d05-7d3e-49d4-9255-361e773296ec", "sighting_of_ref": "indicator--8802956f-6bcf-4ac6-b239-a8ed37d9938e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e21ae8-7809-4fc6-9364-cda7da35e438", "sighting_of_ref": "indicator--7950f6b3-fa5c-4b76-9a97-a1c5359f383c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96fc13a-7ae4-491f-a6b4-4eba853be79f", "sighting_of_ref": "indicator--327bbbc7-1db4-4d59-be1e-6a7da6f7ec53", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec09d8c4-5684-44a9-9583-3d4715fce894", "sighting_of_ref": "indicator--1f0023ab-2707-42e0-b1cf-bf3ae4dbde88", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04028c62-616d-41f8-8949-381c88108b1d", "sighting_of_ref": "indicator--a6290f74-e903-40d2-84ab-34a17223629b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d4eb44-cb2f-465f-9be8-45cd81b5849f", "sighting_of_ref": "indicator--a6290f74-e903-40d2-84ab-34a17223629b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa11db-0753-4d56-9016-ac8541f372b6", "sighting_of_ref": "indicator--e89ffcaf-9eb8-427a-a2e2-4aee0c846544", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d6c6d2-0a37-4972-802b-dbe1bdadcff7", "sighting_of_ref": "indicator--d14d3dd3-e640-428e-ad4b-49c3e3bfab26", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24db6ac-ead9-4b02-88b9-1ac60d3e3084", "sighting_of_ref": "indicator--0e5b7b68-5d59-44ad-b663-401bfafc6fa9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd63e6c5-1431-40d3-8799-ab147d8340b7", "sighting_of_ref": "indicator--e8f0e258-27a8-4a5d-9c69-8145af8ef5f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f815149c-d974-47ce-940c-f478fff23553", "sighting_of_ref": "indicator--e8f0e258-27a8-4a5d-9c69-8145af8ef5f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74e103b-2b0a-41fa-b218-ac247a32e517", "sighting_of_ref": "indicator--68420d2f-11e4-48cd-8868-d66a542b3f9d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f83c8c-4c9e-42e4-a129-e7d0fc5bb92d", "sighting_of_ref": "indicator--1ebf56e9-2119-4807-b949-ae528f7a1b0e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87b6aff-de9e-48e2-af65-9bf927615d21", "sighting_of_ref": "indicator--5202edec-9507-488b-9a14-2ca214e2e4a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3526f-5b94-4f52-b995-f8e189447cb3", "sighting_of_ref": "indicator--c8989096-fe07-4ce6-b81a-50fb7c665168", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaa072c-7b91-4de9-b6a3-dfb495406597", "sighting_of_ref": "indicator--3042ea3b-349a-45e7-8dbc-5518749b1001", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd5e2aa-8bde-4c36-abb6-d320af91c111", "sighting_of_ref": "indicator--036f4a62-ee9b-4be3-b32d-58d260c5f654", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52934ff8-a1bf-4a1f-a3a0-8696e28cf8b0", "sighting_of_ref": "indicator--f357da67-a816-49c7-b87a-bd21d58dfa8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3636e8-9457-4d23-a7fc-b9bcf5ecc4fe", "sighting_of_ref": "indicator--f357da67-a816-49c7-b87a-bd21d58dfa8a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3fe284-6b8d-4652-8ac6-ccfc180419ff", "sighting_of_ref": "indicator--146449b5-f606-4af1-b936-2cbd0089b62e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc8d940-1b77-4d86-99cf-c144d00d9be9", "sighting_of_ref": "indicator--1c66ad4e-47b5-4130-ae88-3fa2162264ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87bf3a1-0eaf-4f43-a1df-3e5acf4c16f2", "sighting_of_ref": "indicator--959f1b7a-a45e-4387-9b95-ecfdeeb4b34b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af318ded-d59e-4de0-bc9b-c0a9fafefcee", "sighting_of_ref": "indicator--285ff520-209d-4a3f-b9df-368e4012fdb9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013a399a-0040-4856-bdc3-6cb0ca8035c8", "sighting_of_ref": "indicator--c40635cc-c0e9-497b-b91b-0a4b12c687c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af5cad2-2ab5-403f-8400-32e8769cf374", "sighting_of_ref": "indicator--8521b960-5ce9-4b9c-a563-e38708f20796", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d644ac31-8716-4f3a-99e9-e011b2533dcc", "sighting_of_ref": "indicator--8308b489-cec1-4771-9d08-38934650c78f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc88523-8ce7-4fab-bb85-559e2a4a34a7", "sighting_of_ref": "indicator--94fff70f-aaaa-428e-878e-881e1aa5f033", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719b673f-ffd2-4389-b8d4-e298fa5bf791", "sighting_of_ref": "indicator--36f4aa2f-83ca-48f0-b048-65c91a34ea95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b539689-9640-481a-ad04-0648a1647630", "sighting_of_ref": "indicator--1a598f2d-a3a0-461c-b227-d956ca289f54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d60a63-7d05-41f7-a098-b1fe207807f2", "sighting_of_ref": "indicator--a37475d0-9f44-477a-9d17-b3267256041a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cd74c8-4eab-47dd-b9d3-3b9752122539", "sighting_of_ref": "indicator--75b27bb5-0e26-4ee7-bc6b-2b3f54f557c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99246151-f539-40dd-b4ba-56d43e4ee394", "sighting_of_ref": "indicator--4052dddd-2908-4708-b875-0f2ff18b2eb6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee89ce3-2741-4f5f-b527-502dab276b81", "sighting_of_ref": "indicator--274d4ca3-b26e-4881-8436-663657d21277", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b81308d-e40e-4a06-90f9-47a1449a8443", "sighting_of_ref": "indicator--12f01f9e-ef9f-4461-b902-db57b9ed2072", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d70e6f-c979-4c7c-973f-b55ea31f1728", "sighting_of_ref": "indicator--7a39d988-49f2-438c-8fa1-b706c4bb74ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040388e1-6b1d-4aa3-9df7-324ded563b0a", "sighting_of_ref": "indicator--d62db2e0-4c56-49d9-971a-1bbc1d1bcf8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c97a42f-9b20-44e5-8998-501a2df92a8e", "sighting_of_ref": "indicator--f891755b-5dd8-4b3b-9c38-645bb1d0087e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d57eb20-b7de-44a7-98ad-7b4e80320735", "sighting_of_ref": "indicator--ea9cce96-a64d-42dd-a305-aa31a21f6f9a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869383f5-4c66-4242-9541-2dffa0221a5f", "sighting_of_ref": "indicator--19048d1e-935b-49f4-be24-882c02a05129", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d5c847-9036-433b-aaa1-d94a3fd33917", "sighting_of_ref": "indicator--f0db8857-5139-46b8-a91d-63ee2a4e1b9c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d6b568-968b-44b1-ac7f-70078d0fef85", "sighting_of_ref": "indicator--8db6768b-1710-4a6c-afef-da3d8849301c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437120f7-9ee1-4aac-8ca9-6549f2914564", "sighting_of_ref": "indicator--4241349c-8f77-4e3b-9d42-2540c8b74303", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbd03d1-dddc-497e-8fae-7c63baa2d069", "sighting_of_ref": "indicator--d1f49d73-9068-4d02-9a74-25ee42b0f4df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984173f1-dd52-4f0d-a6d2-0e6d28c94281", "sighting_of_ref": "indicator--4234f720-475c-4a3a-80a9-2a53a7886c4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4c765b-4ba9-41c5-b2ac-7852315519a1", "sighting_of_ref": "indicator--6a9e054f-58c5-4477-b3f6-d2605d3e5dd2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480037ca-bf07-4fe7-94e8-f1fb0d4ebdd1", "sighting_of_ref": "indicator--01949d9d-a214-43a3-85a1-fd4ec829a85f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fb4b24-92d8-4a66-aff5-5cd9db0abf6b", "sighting_of_ref": "indicator--01949d9d-a214-43a3-85a1-fd4ec829a85f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2589b2e6-2a30-4fc1-b5cc-c5175a7d5559", "sighting_of_ref": "indicator--c38dc817-ffb8-47f8-ac17-816332cf8326", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4613923-b2fc-45c6-a3bb-4dd95848bdf6", "sighting_of_ref": "indicator--c38dc817-ffb8-47f8-ac17-816332cf8326", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c0ce53-2aea-47c2-be2f-d6433fae89ce", "sighting_of_ref": "indicator--48cdf2e2-e8a2-453e-8333-9e28d30261b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8ed09f-d5e1-4fc6-9d89-b205133a5e81", "sighting_of_ref": "indicator--48cdf2e2-e8a2-453e-8333-9e28d30261b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc49e51-4522-448b-b2fc-3de409c9bd12", "sighting_of_ref": "indicator--d03ec6bf-32d5-4235-93b5-5e7692b2de8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e94b52b-7ccc-4407-9a63-e1b8c5c30e92", "sighting_of_ref": "indicator--8c25aa70-8731-4651-855e-23f4e551d8db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271afb9f-2b2a-4057-9c32-6981dd2f6b7d", "sighting_of_ref": "indicator--3ac8c711-d897-4ddd-ac48-3cc287ceb492", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493e204-6aef-4672-86ba-1a07e645e21a", "sighting_of_ref": "indicator--9c99fd71-6324-4c6a-95fe-138d69104b46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8578a1d3-843b-4e63-8660-953240c91b21", "sighting_of_ref": "indicator--fe770203-2a4d-4a3a-a06b-cde0a7d075d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279c9294-6f73-4ff3-99f8-ac0f8831afc4", "sighting_of_ref": "indicator--e67f902e-2b31-4f4f-bb36-64781a3fc582", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d94efdf-a732-4df6-b213-b85edd2bedf0", "sighting_of_ref": "indicator--f5803eed-f098-4c1b-bb67-35761a472b20", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f3d54e-d05e-4af9-a708-4bec52b35b7f", "sighting_of_ref": "indicator--34042445-0f9e-4879-9932-d6d5a93d7d77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce057600-ec20-4325-b2a9-2d018a26f268", "sighting_of_ref": "indicator--34042445-0f9e-4879-9932-d6d5a93d7d77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff0d3f9-fa82-4500-8027-fc4cc282c3a2", "sighting_of_ref": "indicator--d26b7f87-9b4a-4f1f-93d0-d8eb2961cef3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43acc0e6-c847-462b-8cda-79fe1e8e8529", "sighting_of_ref": "indicator--9de9b2c5-8d1c-497e-9f86-8dff583cbb92", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda0469c-93c3-4ed5-8d9a-195041aafda0", "sighting_of_ref": "indicator--4f8ab274-a1b9-4196-9c0d-6333b6a4c0c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b64f8f7-3f77-42cb-be72-d197cbd23086", "sighting_of_ref": "indicator--4f8ab274-a1b9-4196-9c0d-6333b6a4c0c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60769272-c698-4414-a8db-9b81749f17d8", "sighting_of_ref": "indicator--ca18a7e7-07a5-42f1-b312-3513b446a41d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9187239f-8343-4c7f-ae1c-fdd6342edf30", "sighting_of_ref": "indicator--ed70c016-0624-4cb9-aa79-7b9880aeeebc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996f00bc-47c2-407f-8ff1-7ab1715e83a5", "sighting_of_ref": "indicator--14921c4b-66c3-4d22-a0c8-a42ff8254909", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e547949c-8b06-4556-adf6-52965b4cb5a2", "sighting_of_ref": "indicator--0c432096-75da-4e51-9f9a-538d46a2fef3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1934caac-d96a-42fe-b71a-71a896e2a962", "sighting_of_ref": "indicator--39807d1c-ced9-473c-9c0a-bb8a61e6b261", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20ef302-5118-40ad-8501-ffc5a2209192", "sighting_of_ref": "indicator--30a027e5-a61b-4642-9743-a9e6581d859e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1444d8c5-8512-48e1-9eaa-6837a9f29d46", "sighting_of_ref": "indicator--332e197f-61bd-4daf-8af4-a725dbca28a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fde36d-c359-45a5-a9c6-3fc25cdc4def", "sighting_of_ref": "indicator--2bd6e51f-6f4e-44d9-b564-9d7ef3635b9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a6fd57-2143-48af-8d18-1fd497988aeb", "sighting_of_ref": "indicator--c9ffeee7-4501-4a4c-ba00-ae706efaf60d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dfb8c6-8774-472f-a590-a46d212c8074", "sighting_of_ref": "indicator--d4f70111-8782-49da-8ed1-b83140b19e59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f01590-d3ba-422f-9c5f-5505eac84260", "sighting_of_ref": "indicator--fb846d2b-ddbc-4871-acea-6e13030e21a8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c8087-990a-486a-8bf5-e4bc77749b07", "sighting_of_ref": "indicator--1b8a89f3-aeb0-4c58-a0c5-bdb6d6d998ac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac2283f-78b2-4b2a-bfe9-f75af1c1348e", "sighting_of_ref": "indicator--21335e2b-3be9-4b34-9fa8-ad2cdf617f19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c891b4-8a88-429a-81a3-6942a54752f9", "sighting_of_ref": "indicator--3b71ad24-40e2-4fcd-abaa-349f986382f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc99a10d-63db-42d7-8609-27af7c09aeeb", "sighting_of_ref": "indicator--a37c1ea2-b4a2-4638-8fde-2c10ea44ff70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bcd382-befe-4333-9268-5bf789820832", "sighting_of_ref": "indicator--b4b7b93b-8f3b-49a9-9068-2967d44b1d34", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd9c35c-fece-4c2b-867c-3f373e04987a", "sighting_of_ref": "indicator--2da68edc-4869-4746-86bc-ee66f718a0c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5b95b1-675d-4445-a08d-f4d804632f6a", "sighting_of_ref": "indicator--556888eb-3d5b-4b9a-ade3-5014cfa94e54", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c1e7ae-0ec2-49ec-8e02-b02add590853", "sighting_of_ref": "indicator--fed16242-6627-4d74-9a5c-bad68f0f0250", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d14c49-ac8d-4d58-b912-1ce10796044a", "sighting_of_ref": "indicator--bdb85e63-aac1-424a-80e8-45a92e709760", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ced9c08-1254-419e-a01d-c08a8b18b4a8", "sighting_of_ref": "indicator--a89d892e-c554-4ec9-8b90-4c3f2e29d8a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4e77a1-ec6a-41e2-b513-3de082312118", "sighting_of_ref": "indicator--ca923269-b586-447f-a307-d6dadbfd7af0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45051b17-09e5-4004-9ed8-5d422f6fd661", "sighting_of_ref": "indicator--7039c348-b88d-4c32-bff7-fc5544e5f23e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0712414d-da1b-41d3-8b15-968b11e25783", "sighting_of_ref": "indicator--ae2f9c9d-c2e2-4ffb-a34e-969595b85a2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83477f79-eb3a-4d6a-a025-be18941a6a4f", "sighting_of_ref": "indicator--d3eae537-7b15-4f45-a2be-55b497eccc68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc64dad5-5e63-4e28-84f8-af7d71cecb75", "sighting_of_ref": "indicator--0dd79d4a-0b45-47ce-8e0f-1041904b257b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb451b3-0843-430b-91c2-aaf9ce5eb536", "sighting_of_ref": "indicator--344598ed-de09-41d9-b043-5b8666c05f04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bcc9f3-b064-40b4-ab31-efaa42e75ae3", "sighting_of_ref": "indicator--623d2384-00f0-405d-aae4-4b704e2ce813", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aa7b0c-c243-4dfc-981f-9606a1458a3d", "sighting_of_ref": "indicator--34966b7b-8334-410b-9e9c-5c72ca077d06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529780fc-1e73-4e54-b06d-9ade07e22605", "sighting_of_ref": "indicator--a8d5dd6f-9602-4dc3-8371-ed7b811c6503", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00fdac3-ee27-4d60-8250-1f4fb60aec53", "sighting_of_ref": "indicator--f2c334c5-eddd-4a8c-8c3c-43b7290bf008", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c118fe4c-0ff5-4431-9983-1ed7266eb0c4", "sighting_of_ref": "indicator--0f023a22-4b0d-49db-a0cb-b3659fddf7fb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b2aea5-e1d9-425b-bcd6-18fc79d07b29", "sighting_of_ref": "indicator--0f023a22-4b0d-49db-a0cb-b3659fddf7fb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d21b6cd-a2e3-4a1c-b6df-a66fdf4640fb", "sighting_of_ref": "indicator--fcb49f00-f0e6-44de-a8af-6890ebc0bfc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ee4c83-b3da-433f-9c88-dff18c1a91d1", "sighting_of_ref": "indicator--504aef18-4d1f-4f73-89a9-718293582c66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a642d5-d833-4f9c-9ad1-ab284fb5f199", "sighting_of_ref": "indicator--2b1203ad-d018-4368-b8c2-2ac05c02ba7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c85a4a8-5365-46d4-9413-cad5aa360f73", "sighting_of_ref": "indicator--3b12d1cf-1edf-4528-aab8-b656bcf913ac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d34c98-df5e-4230-9b22-aa02b76c33c0", "sighting_of_ref": "indicator--de66ae92-f44d-4592-8223-3edf3c3376bd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac02b3d-5e18-4241-924e-f84d7a1b3ba7", "sighting_of_ref": "indicator--20535e8e-720d-4a29-a39c-7b1fdcc6a2ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8231da24-e72e-4e5c-b0fb-e63c049deccc", "sighting_of_ref": "indicator--6bac1f7b-406a-4968-8161-5ac0a6ad25fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e573df94-f11d-4a26-bc3d-89d35631b11b", "sighting_of_ref": "indicator--8eb8b7bc-1464-4ab3-b106-530e76af86e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93da0e2a-63a7-4093-86da-a6139dd4bbae", "sighting_of_ref": "indicator--9c96f0ec-7ba4-4859-80e4-7be9f5fdfb29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcabf214-64a4-4443-81f6-d85834857ef4", "sighting_of_ref": "indicator--c01cfc34-105a-4b82-b619-fe2f7c667312", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3831cbbd-4e20-42ee-980e-5f41278b6bd6", "sighting_of_ref": "indicator--b7367836-9706-494a-8e03-e82d9a7fe712", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aff2d9-dad1-4083-be2e-7d00079595ac", "sighting_of_ref": "indicator--08b6e383-de20-4ffc-ad91-e177658fe6a9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b4b4fb-b151-4d08-a3cc-fbc70a2ca640", "sighting_of_ref": "indicator--08b6e383-de20-4ffc-ad91-e177658fe6a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db215acc-7fa6-4c6c-ae5a-d4de9f5e97ef", "sighting_of_ref": "indicator--0fc2ee17-ddbe-42e8-9273-b075f10acfa3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a9b81a-85a8-4882-bf5f-5124cc83dc01", "sighting_of_ref": "indicator--90e92e20-9015-4b13-bd30-1288de046e9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5223cc99-445c-4aed-937b-99fd053988cc", "sighting_of_ref": "indicator--6f125ad1-501b-4794-9117-740cf3022d48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd08d93-0c92-426e-b39f-856a98693f6e", "sighting_of_ref": "indicator--a4837e3b-dea6-400a-9e63-f6bdbecd148b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cba0cb6-b351-473f-88b6-3dc04ee7650b", "sighting_of_ref": "indicator--cd74f2c3-f78e-46ae-8d3e-88b195adfa50", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7634e96c-a8fd-4ac0-8aed-ad8c9f1b4717", "sighting_of_ref": "indicator--fb6cf81e-02b9-4952-b552-4e5a3b227a4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9d0469-0eef-4968-bbf6-cc388f306ccb", "sighting_of_ref": "indicator--7902aaa1-b95e-49e8-8fa1-e8a7544f4aac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b22c04-edf6-46cf-8856-fb100c7a43b7", "sighting_of_ref": "indicator--d30af37e-7218-4f9f-a5de-0c7360af55e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b531f9f-a36c-458c-90ec-d778703199b4", "sighting_of_ref": "indicator--82e09964-9573-48ee-8f4e-d3a0821e40be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6d834d-4f43-4321-8037-b9eee7e956ff", "sighting_of_ref": "indicator--ff5a4f11-ac78-40bc-bbd0-68cbfc8c1e09", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32d5d99-5c29-4e0d-b326-3b79eae43385", "sighting_of_ref": "indicator--d8a5159a-ea37-46d2-9dba-594e4dd55d20", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47040ea7-e00b-462b-8dab-1966bb97cdbc", "sighting_of_ref": "indicator--1cbc961d-87ea-40a9-a939-73420a009458", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b751d1d-5d05-43e8-b78b-5f805fdd4ae1", "sighting_of_ref": "indicator--69f7be9f-ef60-46bf-b17a-89c8c2826218", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e270860a-e77f-4dfc-94d7-4a71641dc19d", "sighting_of_ref": "indicator--6b6fbabd-7320-4b27-a94d-a49059a70cc6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c58214-89af-4e23-afcd-18b70cee4e94", "sighting_of_ref": "indicator--673753a1-989c-422f-9a0f-0ea8d8c1f1d9", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc96287-5621-4649-94ec-38fee13d5e72", "sighting_of_ref": "indicator--76884386-edf3-47dc-966e-c73a22fae059", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736b3c76-6c7b-444a-8e6b-f64e9f74e100", "sighting_of_ref": "indicator--8f7f0d9f-d5a9-4191-9c48-798e871c64bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3434382-6064-471e-884c-2576aed320d4", "sighting_of_ref": "indicator--ccaa4e03-9242-4f51-91df-c1a108c8c3e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7de13b9-fab3-4287-83d5-b2ab63ea22d7", "sighting_of_ref": "indicator--39afa219-6704-4cd3-885d-3eeb271548d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f78b2ed-810c-4adc-bf2c-3d7d65691611", "sighting_of_ref": "indicator--22d82967-c561-4797-8728-4269d4a91065", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee1f62c-f688-49b4-b43a-01b697cae974", "sighting_of_ref": "indicator--e48f5df6-8372-4ef2-b29f-18bae4cfb75e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61df0717-11e1-4246-a4a1-c16ff4d0bec1", "sighting_of_ref": "indicator--9af944f7-6266-45b6-ae66-493083be5b3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655732d9-0e0a-48f0-8817-bfe4776164a8", "sighting_of_ref": "indicator--92d74d7f-9bd4-4f14-bfb6-c759c77dc04e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38972f15-b11e-400e-99fa-cae6490f2a6c", "sighting_of_ref": "indicator--014dc9d6-4ef9-4968-89a9-68d72756ef88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67674414-b64e-40ba-b4ac-a95fd39b50cc", "sighting_of_ref": "indicator--ae855c71-e14a-4a35-8578-8bda5c10fabb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c81eae-103e-422a-88a4-2b12573f4636", "sighting_of_ref": "indicator--4d528ac7-e80a-4aea-bc8d-5f7d2d93b2c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b6a970-74b4-4933-94eb-f2c9950fdbae", "sighting_of_ref": "indicator--775827c3-d0e2-494d-964f-bb92d77d0949", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1400d298-84cb-42e7-9d1c-b6ec0d78724e", "sighting_of_ref": "indicator--c67ad6a2-62ef-4eaf-98c8-2b4e1025129c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa4f6f1-9139-4c20-a88e-455ccd6e43dc", "sighting_of_ref": "indicator--6c847a8e-5461-434a-a485-ad4ca9dff984", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d2c639-fee6-47db-8270-6162e6ba3302", "sighting_of_ref": "indicator--92713b8e-1c63-4a22-ac14-25306b0b3f03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3021f5e-a30d-4a4c-888b-992280a344c2", "sighting_of_ref": "indicator--2e6427bc-1eca-4b80-b601-80e4ab8991cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7b09c9-c38f-40ab-a4d1-69117cab070d", "sighting_of_ref": "indicator--c3ecb406-aea4-41ed-b906-1c5b3dbdeed1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661d3ee8-d832-4852-89dc-078901506b37", "sighting_of_ref": "indicator--b8492d53-b015-4611-b2e7-52dadba9793d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b596ca-d6ee-4fd8-8c30-b672d44acdd7", "sighting_of_ref": "indicator--7400581e-fb5b-41d6-acb1-c2a1723019da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f404ccc9-40a6-47a7-867a-ee12841ae568", "sighting_of_ref": "indicator--69debfc9-d8c7-4e5b-90bb-13bcae0803df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf174ae-f860-4ef2-a7c5-b22bbcc3a026", "sighting_of_ref": "indicator--b93cbe65-5c18-4d92-9251-802761380b44", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9e9d0b-5775-462c-bd00-a79a7cf7e550", "sighting_of_ref": "indicator--b93cbe65-5c18-4d92-9251-802761380b44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4c857d-95e2-47a8-8b8f-40f33735ff0a", "sighting_of_ref": "indicator--9e974f49-afd9-4b16-a127-46ca56fa3dbe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea05145-471a-4f1e-a935-1e8dcbc0dc04", "sighting_of_ref": "indicator--9e974f49-afd9-4b16-a127-46ca56fa3dbe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d11b0-d670-4417-9147-60f8d9a69a08", "sighting_of_ref": "indicator--f9b3dd16-d677-4d88-a85d-3e1dc505091f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2019735-cb3a-4d8f-8cfa-234e7f098766", "sighting_of_ref": "indicator--f9b3dd16-d677-4d88-a85d-3e1dc505091f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b05e5cb-ebce-4504-9a54-79b273b02bc2", "sighting_of_ref": "indicator--4636504c-0e33-4c4f-9358-37864f7858bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c4a1ff-f94f-46f4-98ac-847f61f4c581", "sighting_of_ref": "indicator--fea056ce-c15e-47cc-b372-7e164ea1c6d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f407a9c-e5ae-4cf5-99b8-cd1e3b9b60d7", "sighting_of_ref": "indicator--fea056ce-c15e-47cc-b372-7e164ea1c6d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce28853-a2e9-4255-9402-abebf47410a5", "sighting_of_ref": "indicator--f2247185-c1f1-444d-931d-a85ff98fb2d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d837f8e-6a68-486a-ba98-aefbe9f62c9a", "sighting_of_ref": "indicator--f2247185-c1f1-444d-931d-a85ff98fb2d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9375da3-99a9-4fb8-96f1-28ba45b7301a", "sighting_of_ref": "indicator--168c5d3c-bec4-499b-bdc1-a5bd71abdc44", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41ee5a1-2734-4cfd-9059-0479085ed958", "sighting_of_ref": "indicator--c0c244ed-d6ba-427b-a287-9f281251472b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f909b92f-b0a6-473d-a7ac-4ac60d5fad2f", "sighting_of_ref": "indicator--3ed6c3a4-1204-4f67-bc58-a1f5fe2c30f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141a4ea8-8f5c-482e-bdcf-a2597fe4f648", "sighting_of_ref": "indicator--97d60365-ec44-454f-8a85-95a3ecb1eb5c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9923ada5-2ad3-4b97-a946-9c3be33a0098", "sighting_of_ref": "indicator--682f4a15-5a2c-41e2-bd86-785c1befe9a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8afcfaf-8efd-41e3-8fb4-82ff39260cdf", "sighting_of_ref": "indicator--de7b272e-0981-4ba4-b2ab-5c5ffc303778", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284b5f7f-dd42-48f6-a0d3-31538fa75a88", "sighting_of_ref": "indicator--a7d8011e-3435-4b23-b10c-ca1cd9aa9e28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a9c636-3f0a-445e-9737-8c185e98e13e", "sighting_of_ref": "indicator--a7d8011e-3435-4b23-b10c-ca1cd9aa9e28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7124592c-faf5-4872-85fb-0d73beaccdc8", "sighting_of_ref": "indicator--27880f12-f80c-459a-a038-bdb2f6da4e28", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e68187b-fe96-4a2e-af2e-c3f7e7a324a5", "sighting_of_ref": "indicator--27880f12-f80c-459a-a038-bdb2f6da4e28", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59548662-3722-400e-b699-5cc841cd962b", "sighting_of_ref": "indicator--27880f12-f80c-459a-a038-bdb2f6da4e28", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a0ac4a-d058-469a-bc5e-693b13272fa9", "sighting_of_ref": "indicator--4a9151eb-27e1-475f-ad5b-9111562adf49", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47ea68b-6424-4a8b-9568-dc7bb95dce59", "sighting_of_ref": "indicator--50b42943-ba2e-46cf-8682-253fb0e1f323", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9cfebd-a38c-4e74-a04e-c2fe877bf7ca", "sighting_of_ref": "indicator--daf2451b-b366-4a6d-970d-50eb5b05ac4d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f0022c-aaa7-445d-be72-21ff70459222", "sighting_of_ref": "indicator--5566cddf-0e7d-48bc-a461-dfbadb64c89d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3155f5-a6f8-4948-a835-72e762840cb9", "sighting_of_ref": "indicator--30351110-e87e-476a-b7c0-7c17b7531947", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dfa88d-ac95-4f85-877c-3e2bc04fa09b", "sighting_of_ref": "indicator--35f716b7-3589-48f3-a102-00925e3aba1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fb1c9e-2dc7-4c74-84c1-da07b0f01eaa", "sighting_of_ref": "indicator--35f716b7-3589-48f3-a102-00925e3aba1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30102829-666a-4fab-add7-3ae3c5d558ea", "sighting_of_ref": "indicator--91324534-7cd3-48b1-a8e9-84b176fd4075", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde19fdb-c900-4a6b-a6e7-e8729866e3fa", "sighting_of_ref": "indicator--1cd7a9ff-37fc-4ebf-b44a-cf347b4a1ee9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9406b883-8866-4679-8761-98fd300027d0", "sighting_of_ref": "indicator--1cd7a9ff-37fc-4ebf-b44a-cf347b4a1ee9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9820eaeb-8173-4d5e-9c66-07b7c9b21b26", "sighting_of_ref": "indicator--ff51c0e0-59c1-498d-8f21-baba45cddb98", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa36f2de-7502-44eb-9c03-a51a4f606c7b", "sighting_of_ref": "indicator--85e7ec27-9844-43ff-95e0-dc22923e2003", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64afbb4-9cc5-41e6-b820-1f35e818e3a0", "sighting_of_ref": "indicator--85e7ec27-9844-43ff-95e0-dc22923e2003", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60da8b1-68f9-4b61-8fb3-3f7527c93771", "sighting_of_ref": "indicator--c3bb368e-5d1e-494d-bf6c-b113a761bb89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772ccd9d-9ada-4478-a65e-fc5e6fbf6a67", "sighting_of_ref": "indicator--c3bb368e-5d1e-494d-bf6c-b113a761bb89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b8120f-c8f2-4992-b23e-65aefab33a8a", "sighting_of_ref": "indicator--ee3e6f70-bdd1-4a47-80a0-239408da2880", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4adb95-6f1b-49a6-b434-2ae36b945c4d", "sighting_of_ref": "indicator--ee3e6f70-bdd1-4a47-80a0-239408da2880", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f941a6e-f377-4082-870c-5976979afe90", "sighting_of_ref": "indicator--2ff8ea4a-b06c-4a61-a34d-8f3111230653", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6b8aeb-597c-46dc-95ae-5cf96d09f88b", "sighting_of_ref": "indicator--2ff8ea4a-b06c-4a61-a34d-8f3111230653", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f56f6e-f60f-4306-bc4c-4ec9f04cd0d8", "sighting_of_ref": "indicator--904fca3d-c83c-443c-bb8b-8be276e99a7b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105f5265-684e-45e0-b9d0-b6302799bcca", "sighting_of_ref": "indicator--904fca3d-c83c-443c-bb8b-8be276e99a7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910d317c-4a93-4988-b0b1-e80c5c711ebd", "sighting_of_ref": "indicator--32fefc60-e5db-4e2d-ad28-e758f72a821a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c614b8fa-e2e4-42bc-810b-ccbc612e4338", "sighting_of_ref": "indicator--32fefc60-e5db-4e2d-ad28-e758f72a821a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406bab16-38b1-4bd4-9f6c-64c4a92b208d", "sighting_of_ref": "indicator--950835c9-b985-4306-a97f-1eea638f8ec5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6233a9-9452-4433-8afd-1687cc16fab9", "sighting_of_ref": "indicator--ee4a60b6-09ef-47be-899f-740fc8277d27", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73b1f44-389f-48e1-bc6e-74fdc0959c8b", "sighting_of_ref": "indicator--b3798ff4-37a5-4546-821f-eeaeb4bfd755", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a295b2-9712-4fb0-b8ad-aa9104e0d00e", "sighting_of_ref": "indicator--b3798ff4-37a5-4546-821f-eeaeb4bfd755", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8892b867-df4b-41be-ba0c-96fa70a03316", "sighting_of_ref": "indicator--edced2ce-5512-412a-be0a-ac4303f3f77a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81d4931-4908-4fdb-9128-19fb31b530e8", "sighting_of_ref": "indicator--6f94cb5a-4fd4-4cc6-8a18-ae01576e155b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6e8ff1-fcb5-42d6-b90e-3f6951ba6f4b", "sighting_of_ref": "indicator--1740099c-e003-4333-a31e-e92e995e0a71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f8e827-9706-497f-b5fc-20794baa7890", "sighting_of_ref": "indicator--ae5c6d18-f1a0-482d-9db3-1bfe1e14a9fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6d9ffc-bb69-492e-bf64-cfb1e77a7cdc", "sighting_of_ref": "indicator--adb5ee14-c588-4126-b8b6-281b3114521d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08f82e3-7b2c-4b14-b3c3-add99520ba01", "sighting_of_ref": "indicator--f14a69ca-4dea-4cb8-981b-b0c2bb77f3f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a88a482-4712-4d9b-afad-ba8e82a10bf0", "sighting_of_ref": "indicator--b9650f39-efe7-44c9-8c52-cdd28dd24b15", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae7490d-4c94-4b3f-8789-c74908643703", "sighting_of_ref": "indicator--f95ca2cc-50b4-4298-b0f9-14f1738dfb5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24750a7b-9ae6-4905-8046-829a263ecd2d", "sighting_of_ref": "indicator--cf9d3518-b547-418e-9e51-62fecefdcb47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74e445-f196-47e7-8d41-80f3354d32fd", "sighting_of_ref": "indicator--cf9d3518-b547-418e-9e51-62fecefdcb47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8df77-cd2b-4d4a-8ec6-a550d4867b4a", "sighting_of_ref": "indicator--59cccf4d-79d6-4b1e-b105-b98aab7487d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6f7625-c3b2-4747-8f38-56caa821a336", "sighting_of_ref": "indicator--6975511b-83c5-44c0-8c1e-392528f4790e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccddc374-047e-46a1-a883-a1c2f2ebc040", "sighting_of_ref": "indicator--bae83798-48de-46e3-8472-546bb592f651", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4517ec-a508-4aad-8f25-b452159bb2c8", "sighting_of_ref": "indicator--18ebfc29-522f-4391-b25d-6c0288044b3e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bb116e-35d0-4887-b020-9c5115398164", "sighting_of_ref": "indicator--a6615cc8-0d86-463e-a7ac-f2f8b988a7c3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4d6f05-50e0-46d4-9dc0-ca9d1eee5985", "sighting_of_ref": "indicator--7bc6508c-00bb-4d94-9b52-26366e070acc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce801bb5-74a1-438b-8d48-e00da161624c", "sighting_of_ref": "indicator--1781b5f3-384b-4213-9398-ee5a8757ec8b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a633d9d-99ca-4553-b502-4131ab164d78", "sighting_of_ref": "indicator--e3c8c4bc-815e-4066-8f23-db5cb53ccdb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32244394-6832-4dbc-ad58-6036d07eeef7", "sighting_of_ref": "indicator--f1ec75fb-d616-402c-a805-a1b4d091e07b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac540d1-7f7f-4223-aabb-a8238f31a93d", "sighting_of_ref": "indicator--e809e47c-76dc-48ce-bdcf-d90452ea4c9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abd7626-d333-4ff1-9be9-d0aba3fe495d", "sighting_of_ref": "indicator--f3f3ae5a-c6c0-4f87-8d7d-04eadfa4ddab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1cd216-8b7b-40cc-9706-88d988d4e55c", "sighting_of_ref": "indicator--347afc4b-90fe-4e34-97cf-375a8eb7016f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b689d2-0841-4d84-9a70-695d4d0b32c1", "sighting_of_ref": "indicator--e42a981d-ec21-492a-b5d7-24520c58f1ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2be3ef-5610-4e31-a162-a95182ea129d", "sighting_of_ref": "indicator--9feaed20-beb9-49ff-b7d3-fc1692b48d72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246e7a02-241f-4199-b2a2-950168dcab89", "sighting_of_ref": "indicator--42309606-83e6-4840-b1fe-a39c20219453", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b03583b-6b68-4d39-b73d-cb340a52d512", "sighting_of_ref": "indicator--cc682f34-6c69-4a4b-a5f7-9c118c59c0dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c5292d-84d9-4a24-b9f0-4627874a3d32", "sighting_of_ref": "indicator--f7a64131-bb38-426c-a928-814cb900b6ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3668ad-4efc-493a-afa0-ea5f4375565d", "sighting_of_ref": "indicator--66297504-fc9d-45ce-8967-5f8c1ea7348e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2f80de-7102-46c4-ab18-54df24680706", "sighting_of_ref": "indicator--9cd6444e-cad7-43de-8c34-d702ba9dbf62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fff83e0-443d-46a3-8f2e-d176f8c23ccf", "sighting_of_ref": "indicator--82b01930-eac8-4fa2-b82b-c2be4c81eb34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93650459-5489-44bd-b654-2c96ae54b660", "sighting_of_ref": "indicator--3dc7c2ce-f7ae-4ce2-a07e-8f400b25489f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb47ad8-9393-4b2a-9e74-3e91dd63e421", "sighting_of_ref": "indicator--68b0974a-4c83-45d6-856a-20bea4b19f31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae169b-c60f-439c-bd1a-127ee0188db7", "sighting_of_ref": "indicator--2bc0a2ea-12d0-4c90-971b-bb788d0d595b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16bab03-50a6-4982-b4bd-d05710512bfc", "sighting_of_ref": "indicator--1640d05e-fc4c-4ee2-9868-a6829405dede", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1cd928-09d6-4e6b-a901-cb7188ff3998", "sighting_of_ref": "indicator--c0ff00c1-69e9-4768-8121-bf5c740195cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae45649e-63a7-4ffb-a9db-313e19a60073", "sighting_of_ref": "indicator--a719d267-a2e2-4878-9dec-af55fffe1f3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef55d30f-1b99-4a38-ac35-cbceef0344c1", "sighting_of_ref": "indicator--09f98973-4117-4949-bd44-d344f67d32c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22f9a7e-801c-493e-b3ec-fd46d9e1bd99", "sighting_of_ref": "indicator--0a1068f2-2470-4678-80fc-abb788fbae9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaf2a83-3b40-49c3-ad5f-5e1171dc29a9", "sighting_of_ref": "indicator--5f05e956-d3ac-4011-893d-aab0d27c135f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113535e6-5ba0-46f7-8c31-ad072056d354", "sighting_of_ref": "indicator--26efed1d-e43f-4c04-b5cc-0db18199af45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c9a588-fbc8-4a4f-9cb6-da145f052bc5", "sighting_of_ref": "indicator--12050330-684d-4029-8b2c-dd22562213e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8f6afa-401d-4969-9e58-e79e866aa767", "sighting_of_ref": "indicator--79fba39d-250c-470c-8794-e2d7bf4058ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73879fe-5196-454b-a0c7-b6271fde1992", "sighting_of_ref": "indicator--a4162910-f5f1-4832-ad0c-682917ea05f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dcede0-8656-4009-9178-e61020b7d2c8", "sighting_of_ref": "indicator--246cc080-9fc2-4828-a3da-f4661665fa4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a0a773-5599-456d-8a7d-ddd3f03822ce", "sighting_of_ref": "indicator--03eac996-1d94-4939-998b-fb1c8ad1431f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bf1809-2909-47c2-9fd8-c2cd64ced900", "sighting_of_ref": "indicator--a82946db-c4de-403b-87df-8190539a8c57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fc1a68-7607-4ca0-9f12-5ee686791638", "sighting_of_ref": "indicator--2ef5564d-2376-40b0-b629-53da85f558b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2498d226-32e3-4401-9b84-70f1b6f60e86", "sighting_of_ref": "indicator--cb39ef80-7042-4f5a-87b4-14a238b5efb3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47fe600-8593-40ff-b761-2c30b1fcd548", "sighting_of_ref": "indicator--c253c8b7-f3d8-42a9-b627-3fe1fb201f4e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14472657-5779-42bc-aed2-d39ae7984027", "sighting_of_ref": "indicator--0b5dbf88-0def-40ac-bf20-1955fe1bb105", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a69b2-eb14-4d34-a47a-1107506085a2", "sighting_of_ref": "indicator--0b5dbf88-0def-40ac-bf20-1955fe1bb105", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d3478f-99e3-4210-8eef-8b281a8ce694", "sighting_of_ref": "indicator--2f558cde-192a-474f-9326-284f86f0be81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c3c1c1-8678-4c05-a9be-076ba6bd5501", "sighting_of_ref": "indicator--38460749-b3c5-43a7-821a-d4857cce2830", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9238914e-75cb-4b51-a202-d51e76039e6c", "sighting_of_ref": "indicator--0714ddd3-ff79-4953-97dc-12ee0770390c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d210c2-c542-4d87-aa0c-08f7768bac15", "sighting_of_ref": "indicator--0714ddd3-ff79-4953-97dc-12ee0770390c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d870a446-e5a7-45bb-a231-92e93612f4b0", "sighting_of_ref": "indicator--545e32fd-5093-4817-ac4e-e8dc47c8d24c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b297c903-2b8e-45fc-b5b0-10d8ead659c1", "sighting_of_ref": "indicator--9feb6ce9-d231-4c5e-be7b-698c27d93807", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e55ec7c-eb2d-43ac-a41f-59f76e489867", "sighting_of_ref": "indicator--06e8a84f-df1f-4322-a24c-4e13abd7fab0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9cf750-044e-4d7c-83b6-c68e2aea29f3", "sighting_of_ref": "indicator--04f04507-5388-4cf6-b003-c55188f32030", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedb2ae6-1cc6-46d4-865f-11f1f3483541", "sighting_of_ref": "indicator--b2adf4f5-fffb-437d-814e-3dff075efc67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7163183-3c31-438e-ba0c-efc882d4da13", "sighting_of_ref": "indicator--b0193e36-cac5-472d-8b47-c278811983a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de0af86-5346-4f7b-8872-a57f1cce9c74", "sighting_of_ref": "indicator--187b4b96-70cd-46c7-b4f3-3d49488485a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2164a1ef-47b4-4a6e-baf2-54de5cb230ad", "sighting_of_ref": "indicator--ebc9bcd7-2544-4154-9bc3-76fa75cea68f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a4902c-1342-4455-b6c3-76754ec773cb", "sighting_of_ref": "indicator--68226520-e494-484d-a837-d65dff788f2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e259aab2-8291-4710-9f8c-4a4c8ce647e0", "sighting_of_ref": "indicator--35c45397-fee5-4de3-bcdc-7e6c62cb25df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70368d6-4e54-4c62-8dfb-68f69af95c26", "sighting_of_ref": "indicator--d5217cd0-b18d-410b-802b-f847d48b7a5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a06f1ed-38d0-47da-9afa-24b13745c279", "sighting_of_ref": "indicator--8b069787-17ab-49a5-bc89-f1fb39ee06e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5086bfd-eac6-4405-b074-942901eb8dad", "sighting_of_ref": "indicator--645e5222-9e9d-43f3-aa32-99845a91ffb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6430af7-48a6-43e4-a47e-c6c22ceca5cb", "sighting_of_ref": "indicator--7bbb5639-938d-44a5-9a27-d58166f730de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e626b6d9-7bf6-4ca5-b800-77ef108ddffe", "sighting_of_ref": "indicator--7bbb5639-938d-44a5-9a27-d58166f730de", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3db99a-1905-40f9-a9a2-01a4a7212390", "sighting_of_ref": "indicator--8c2036d2-08e0-4d92-9cb0-2f561a47aac1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad4c2a8-9612-4182-a462-6dfdc9499f39", "sighting_of_ref": "indicator--94dc4e30-808a-4082-9eb9-e5d5f2ff2f40", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526cc2ca-174c-468f-bdc4-e2b1da635ce1", "sighting_of_ref": "indicator--d06e0df6-abd4-470c-8921-15dd7e15d871", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28b0778-f1a2-46ab-8e95-6157ee58048a", "sighting_of_ref": "indicator--42799763-e629-44a6-b67b-525e6bf64015", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d64aa6-f21a-4577-8458-3d5fec49df1e", "sighting_of_ref": "indicator--b14681f8-0c48-4b7f-949a-12789a13d3c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa7bffa-16fa-4b71-908a-86bef365e2dc", "sighting_of_ref": "indicator--c7431a93-2c92-4a66-9eb2-83fe0deb3a52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118fafa0-a480-495b-abbb-3017e7edcaf9", "sighting_of_ref": "indicator--22c256ed-c09d-4e25-a148-9e3a23aa1e2d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a778bd0-56d5-489b-b484-b705eb5e466f", "sighting_of_ref": "indicator--2c9818e4-ea8d-4047-a922-cde8a2d01a63", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f888bf-41c4-43c0-8d7f-28aefea98b92", "sighting_of_ref": "indicator--2d492bfd-1588-4fd3-a12d-48d245614fe0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d222573-4a36-4eb1-9c61-e02a3e85cee9", "sighting_of_ref": "indicator--35b1263c-8427-40d0-ba0b-dd58ec31dff4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141a4556-ed31-41a4-947b-ca6dc3c26683", "sighting_of_ref": "indicator--b4cdd95b-f4ba-42fb-a1fc-3c5bb7e99411", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f77ce09-4e6f-4f24-8c97-893b02525c78", "sighting_of_ref": "indicator--a45f1a87-0078-4b3f-bdbc-65cc7aba9996", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c559a3-584d-49fa-ac7d-aa122b3de1d7", "sighting_of_ref": "indicator--d77b8be8-ac5d-4d30-b225-f111b2307811", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec2c581-49fe-48b0-8fc0-2328809c20da", "sighting_of_ref": "indicator--afe8ca3b-6ed6-48f1-8cf0-92e41f408ab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab803be9-34f3-41b2-a2b4-8c669f501c67", "sighting_of_ref": "indicator--11ea5ce9-b143-40cf-a57c-9de26dc7a4e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d8ebe-36b7-4091-936d-ad5071e7b93d", "sighting_of_ref": "indicator--879c7888-67fd-456f-a8c5-087264eb1625", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb46c0-1142-477f-8ade-d30d0947474b", "sighting_of_ref": "indicator--af6cda25-f4f4-4347-9863-d242e13209ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb45d06b-66c7-44a4-80c7-bb4b70126b80", "sighting_of_ref": "indicator--4753505a-9dd4-4ca0-afde-3cd327259d0e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab14eb09-bb54-42be-b3c8-69a31917b509", "sighting_of_ref": "indicator--7c5ec34f-0c36-49c0-b32a-a32e0df74742", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4176721f-fa40-431c-865b-9291504ccc9d", "sighting_of_ref": "indicator--a6382247-0fac-4e36-a035-71769f9215af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272a0c3e-ef6c-4f28-a2be-f08f8e5f69dd", "sighting_of_ref": "indicator--e226c67d-3ee0-410f-b297-1a40dd221713", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c240061-c7fa-4622-a8e9-b2ae2f86ba8e", "sighting_of_ref": "indicator--6d5e38d3-af74-431b-b522-cad646c5c9b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ce0151-1e50-42e1-a075-183ba8fb3810", "sighting_of_ref": "indicator--7239d5ac-0ea1-47fd-8ac6-30370879b50b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bc27c8-3503-4583-a2b9-6b7cd696136c", "sighting_of_ref": "indicator--28a6107c-7520-4f11-86ec-30cc689be973", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef2fdb-9321-4b08-a29a-d18f04c5da4b", "sighting_of_ref": "indicator--53c458d8-ef52-4535-86aa-a788df6275b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f86e49-0d38-47f7-9227-a1e3c645aeab", "sighting_of_ref": "indicator--90e1963f-ef2d-4b74-bb9f-734f0d9de427", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188f14a5-e589-494f-9dde-8d1faef1443d", "sighting_of_ref": "indicator--0b0159ce-571c-49e0-9cd0-a05caf3fe9e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5129eab-06d1-43c4-8050-45f3bdc33bc6", "sighting_of_ref": "indicator--0b0159ce-571c-49e0-9cd0-a05caf3fe9e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a0c0a8-7153-4dc9-8f0b-71edc518288f", "sighting_of_ref": "indicator--6920e826-aa43-4d3b-b88b-01f1ea1f94eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc2a9e9-8ccc-4c7c-908c-c5e78f2fb11a", "sighting_of_ref": "indicator--10d8189a-de8c-49bf-a8d2-d37a304724df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57d53e0-33aa-4624-b276-f9b5f56a575e", "sighting_of_ref": "indicator--5ccc9dbf-42b7-4491-a6f2-45fe8b59ef5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecdfcfd-37bd-43a1-a892-3e8f45e6e5a2", "sighting_of_ref": "indicator--13f63e39-75d3-4716-ae1b-236a0b60525f", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a043cf-85d5-4cae-973e-ab2b32a3585c", "sighting_of_ref": "indicator--7e12ea3a-865e-414b-ad84-0b428dc46099", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03001c81-582c-4f65-865b-d6c661c7173f", "sighting_of_ref": "indicator--075fe5ed-78cc-469d-b2df-a1a5af3b6a61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be7d9d1-eb1f-41dd-9b6d-997ade1629c8", "sighting_of_ref": "indicator--3a8b033c-cc65-4425-9780-da2ed63f6203", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a73401-e3a1-4c4f-a99b-21767dcf9d2f", "sighting_of_ref": "indicator--f0136125-7f56-4ac9-806a-f977c5c83b3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e37515-4684-4a48-a70d-cb1ab9346d10", "sighting_of_ref": "indicator--9327a8ff-0013-4fec-9be9-6c10c9bd48b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafacfd3-9c2f-4b63-81d4-0986ecfc30dd", "sighting_of_ref": "indicator--08182038-6ac6-4b79-b3d0-43998aaa9421", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a1c676-4a69-4102-88f0-d2da362315cc", "sighting_of_ref": "indicator--99887874-3593-46f4-a16c-e009891fc947", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0769db-b765-4f92-b7b2-d773962435dd", "sighting_of_ref": "indicator--99887874-3593-46f4-a16c-e009891fc947", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f79276-901c-48cd-a04f-faa172733bb3", "sighting_of_ref": "indicator--97f7f75a-f12f-4300-bb59-adbde7f3964b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaff813-5b4e-415d-b806-7e4e846abe7e", "sighting_of_ref": "indicator--6e52227b-0e83-4757-8195-76b4f30f4cb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65186562-b7ab-4825-b622-d90372dbecbc", "sighting_of_ref": "indicator--29465ff8-9413-4ada-827d-5c6a8d01d9f9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a2e240-087e-4217-9a71-c8e159f0a030", "sighting_of_ref": "indicator--8e269f47-d975-4b80-bda5-29908c5c1002", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfb81dd-d24e-4771-995f-438ac13993dd", "sighting_of_ref": "indicator--a1429a74-406f-4a64-965a-9f84962a7605", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301fa78c-726f-4417-a844-481d1cd3742a", "sighting_of_ref": "indicator--d4058412-c12c-42c4-b857-0b8918d70597", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd7ea94-386a-4fa4-908c-c79c01e43a23", "sighting_of_ref": "indicator--b79ef2e9-e97d-46b1-970a-5fd2b0150b03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7974e4a6-b590-4feb-8522-250b2c341907", "sighting_of_ref": "indicator--ab8db678-34aa-4f73-954a-0bb0240d8bda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36227ef-c99c-421f-9211-8f6899cab052", "sighting_of_ref": "indicator--ab8db678-34aa-4f73-954a-0bb0240d8bda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8d840e-03af-43ed-a2a8-e730cf5e6ba0", "sighting_of_ref": "indicator--17479078-e67b-4b33-a14a-54618b757661", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b58969-8ab4-4294-87de-077f1af4a419", "sighting_of_ref": "indicator--5e7cf6a7-d101-4bea-9ea7-4e59c44d50de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7637c54-690b-4073-b1e3-3088d44591a3", "sighting_of_ref": "indicator--face94af-a199-4e16-878f-c6c23062739a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e4a8c6-dd56-42cc-8b67-27449a6b7d81", "sighting_of_ref": "indicator--e7ad7f44-e20c-467f-afdd-d8f26bf91549", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f592756-b131-4e7c-9fe3-3152299a4b6e", "sighting_of_ref": "indicator--ec297027-abc2-4ecc-8756-a96afb071229", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6247f561-f4f3-43d2-b328-91a6446378d2", "sighting_of_ref": "indicator--7f7745ad-d62d-4e2e-a142-14abfeb580ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8281ade5-f054-40e8-afab-990c6c9ac9fc", "sighting_of_ref": "indicator--53b68479-f165-4367-b159-02455b2a3603", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0419706-c05c-4719-ad4f-fcd2e115a323", "sighting_of_ref": "indicator--fc88f5b4-8a6b-49f8-89a3-a73dc7d11ca2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8288c9-5d4e-49b2-a8be-5303b5a24359", "sighting_of_ref": "indicator--839ec578-84d8-4923-bdd8-e5f5842e4307", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f8e0a-acd8-4b11-91f5-0ff6bceebc11", "sighting_of_ref": "indicator--92c47cd7-2111-41cc-bfe7-db6399a4269a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ff6b22-1e59-4cbe-a59b-1236c843228c", "sighting_of_ref": "indicator--f05b164d-6084-405c-848d-3d8c19c10d7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a3d7a-b7d8-4e21-b1d4-1a54d2fbd397", "sighting_of_ref": "indicator--8a6fab4e-ab53-493d-b362-a5bb8897b9a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5ba514-123d-48b8-b2c2-54392ddc19c3", "sighting_of_ref": "indicator--2b654f31-97de-47cb-956a-bc2c2f7a828c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5b5140-6103-4574-9e3c-a7602479b291", "sighting_of_ref": "indicator--cbafdcba-6a33-4456-9e10-7b3f0bccbf0d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7ba200-f1a9-4860-98b5-fde6cf1bbab5", "sighting_of_ref": "indicator--cbafdcba-6a33-4456-9e10-7b3f0bccbf0d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa073e1f-51ba-4a20-92bd-b1aa5a8a4830", "sighting_of_ref": "indicator--1244b4b3-06f0-4327-b205-d74397f2625d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e362aff2-fa33-4d39-85cb-20a2eb2a9b6f", "sighting_of_ref": "indicator--3a9e04de-ddd5-4f12-9434-cbaffb5a18ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354f321d-b71d-40d2-8f4f-5758d2abaa52", "sighting_of_ref": "indicator--3a9e04de-ddd5-4f12-9434-cbaffb5a18ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0221c2cd-6901-4f3d-8829-166db2ef799e", "sighting_of_ref": "indicator--bde5c22e-d4c1-43f4-99ce-6dae5db4187f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce9850-9419-4ad5-adff-2b289657254b", "sighting_of_ref": "indicator--bde5c22e-d4c1-43f4-99ce-6dae5db4187f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f425a1-7f56-43e9-8d3b-8cb0b3065d0a", "sighting_of_ref": "indicator--21f475f2-8fd4-45a2-a46b-fcc7ea5447c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7230c020-0e88-4097-a605-6d7a40a0c201", "sighting_of_ref": "indicator--21f475f2-8fd4-45a2-a46b-fcc7ea5447c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d6c219-f1f6-4ef5-978d-6ef6e87822bb", "sighting_of_ref": "indicator--e4bdfaf1-05b3-438e-a4c5-e307c791c195", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8b1bf9-3193-48f4-a2ae-fd7d3c31ccf1", "sighting_of_ref": "indicator--08d0776c-759f-4586-af9c-0b8a08b60736", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b89337-78d2-48d8-8013-1aab68b0fade", "sighting_of_ref": "indicator--4ea90087-ae0f-4d78-b443-6544a58ecfb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7e16cd-bafc-4bad-806e-3f0185649166", "sighting_of_ref": "indicator--ad42293b-1e1d-42f6-a3e3-6a670ff60d8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c2b112-8cac-40f6-b46c-4f9a7afd8b13", "sighting_of_ref": "indicator--e1546723-f866-4538-b493-609b042ffa46", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c17562-2d43-499b-ad6e-4d1dd2d04408", "sighting_of_ref": "indicator--e1546723-f866-4538-b493-609b042ffa46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad27354-237b-41ef-8ed9-3de7b686f236", "sighting_of_ref": "indicator--4d161bcc-0e2d-4aaa-9214-b92ebb975b8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd655aa-d31b-4be1-a58c-c422d7587b5d", "sighting_of_ref": "indicator--ac330805-961c-406f-b7d2-18ab044d2a9d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad61c75-8338-45ab-ac10-ac1ee48a7151", "sighting_of_ref": "indicator--32ca3d31-f777-4eaf-9514-4326f46be2c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f6c7ce-ed26-42b5-9b51-a64e26f65391", "sighting_of_ref": "indicator--155f5e78-c8ce-49d9-9f37-33c4d845bea7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebe1560-1d66-4291-80a4-97e1df827d8c", "sighting_of_ref": "indicator--ede9234b-6e4b-4f74-b239-75fbb1421822", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdd473f-7e76-4e0e-b8ac-8732e06d8e03", "sighting_of_ref": "indicator--da85a324-42ec-4ae7-8445-669ea3ccdd2c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cad6d82-455e-496b-a315-7e5273f2a251", "sighting_of_ref": "indicator--6ab672b6-f66f-418d-b11f-0102269c2cf8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbc8bc3-dc11-432a-88c6-79a746833ff9", "sighting_of_ref": "indicator--c095a580-e072-4788-8f96-38fff5e6f743", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d56d985-f025-40a7-9b91-b009a264382e", "sighting_of_ref": "indicator--36b367ea-f55c-4627-bdf2-5195f613e221", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948fb22-1175-46e7-9345-660d2b3c524e", "sighting_of_ref": "indicator--bec1fde4-e6ef-482c-9af6-92d8466a2d47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794fbc14-7f69-46d9-ba23-acf58eb44a5e", "sighting_of_ref": "indicator--33750cd3-4cb6-47da-8ae3-8de905275fa0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3f27e-1996-43c7-a03d-80974b6a37c0", "sighting_of_ref": "indicator--1033503c-074d-4e74-b25f-fbaf11598f08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09d5df7-2ec4-4863-af74-a3b230313304", "sighting_of_ref": "indicator--c1f6a5de-173a-404a-afeb-f8ea51394bfc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6213fb8f-b253-4b5f-ad77-cac0f2f445aa", "sighting_of_ref": "indicator--c1f6a5de-173a-404a-afeb-f8ea51394bfc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ea7e5-b543-47e6-ae2c-3dcfb591ea76", "sighting_of_ref": "indicator--38f92c1c-cdcd-4ffb-8e40-cb254b0fa20b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002acecf-4527-4f6f-8787-d5d7ca864d85", "sighting_of_ref": "indicator--5f3139e5-977e-4c4d-95ca-a6e6a69f944d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c8ed05-bc55-4edf-b1fd-56a02b316485", "sighting_of_ref": "indicator--17593990-740c-4777-b128-3a5fef1f88a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fccfe4-f750-460b-839f-60880861239b", "sighting_of_ref": "indicator--17593990-740c-4777-b128-3a5fef1f88a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f365c4-26f1-43ba-a100-77f377cf7423", "sighting_of_ref": "indicator--6d7dc4ac-ccad-4b60-b596-ae573c06beaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c23f15-1005-4647-bde5-e044fac042cb", "sighting_of_ref": "indicator--6f94f73a-7c36-4a6c-a1e7-1f9f5b0b10b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9790d07f-01d5-44f3-bf33-f253dd978a55", "sighting_of_ref": "indicator--23c4f5f1-68ec-47ef-935e-9f38b04778c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fc7281-2d27-452a-a1f0-6cf51c7e62f6", "sighting_of_ref": "indicator--c90c5b34-1c98-4f97-b4b7-98913972c11f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf1d444-4ab3-4ecf-82f8-d3730a6fff77", "sighting_of_ref": "indicator--f8c3667f-ca2d-41b0-8575-a2c721ec2c1d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ac2aa2-93e3-4ef2-8169-c95cca511780", "sighting_of_ref": "indicator--9184b139-6f65-4cea-acba-31426f2f304e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30185f3d-8ac2-405d-8f26-ebe4d15636f3", "sighting_of_ref": "indicator--867250bb-93c5-496f-86d0-c0138f28788b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6855f97-8039-4182-b2d9-073136bb5109", "sighting_of_ref": "indicator--430be727-8e44-4b85-967b-7e45b423ae33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da65f7-ef3e-406f-8da5-f085c15883ed", "sighting_of_ref": "indicator--a4ce02fa-97f0-4893-8bc6-706de19937f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e290ee3-c2bb-40d8-a2c2-51a512b644e9", "sighting_of_ref": "indicator--5bd7847c-0fb2-49a3-99dc-660133ed641d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9cbebd-6a82-4e2b-b4ae-694e16d74d0e", "sighting_of_ref": "indicator--8b544305-be2d-4e2b-ae4e-f3f7fd8a1177", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a66282-12ae-4148-8b7d-c5780c253fea", "sighting_of_ref": "indicator--3763d49c-e938-4579-9f43-e0598e12e8a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4220bf8f-24bb-438b-a06c-88de5412837b", "sighting_of_ref": "indicator--8a78b60d-5190-4df9-940b-2afc9e87fa7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc281005-b4b1-4c11-af64-32b9b8fd7b13", "sighting_of_ref": "indicator--8a78b60d-5190-4df9-940b-2afc9e87fa7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888a6733-45c3-4075-bdde-010d133f32ad", "sighting_of_ref": "indicator--684cdd97-84f2-4bb4-9a7d-b7e908111334", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3670acf1-0b83-4dc5-919d-559d511c9647", "sighting_of_ref": "indicator--fcc41768-acf4-495e-b496-1b74aaef0d6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b978d492-fe33-4891-8d8b-3ab8f8e362ad", "sighting_of_ref": "indicator--3a2c57b7-4d06-4c19-8cee-4b0cefd32d31", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7c3c67-5e08-4ea8-9f45-880de6680007", "sighting_of_ref": "indicator--e856d0b3-5e42-48ec-bc95-5c85f0cad23c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bda2813-c017-430f-b0e0-707898a791d7", "sighting_of_ref": "indicator--e856d0b3-5e42-48ec-bc95-5c85f0cad23c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de12b22b-1a58-4aca-b646-43ec957a744e", "sighting_of_ref": "indicator--b772358f-668c-430c-b7e3-26c74bbef6b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada07a20-c5a2-44b9-b1b6-95c8acf63193", "sighting_of_ref": "indicator--ddbccb8e-6ce2-4360-af2e-4a70f2aac553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da28578-01d6-467b-a172-665b06b036f2", "sighting_of_ref": "indicator--b7fd255e-ee16-4314-a7cc-70808367eb71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a4923a-a546-4931-a4c3-234fd99b64cc", "sighting_of_ref": "indicator--8fc3fa9b-0dda-4a80-a584-7dd01459d5d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4fe0b0-566d-4092-9a25-0e8dc90f9f05", "sighting_of_ref": "indicator--6c02d40d-09fc-4d42-8241-33d5bbb542e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f54adb-c3e7-4110-8247-6d1d6db2a89c", "sighting_of_ref": "indicator--6c02d40d-09fc-4d42-8241-33d5bbb542e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2f89cd-abb2-47c8-89dd-75a3ecf35fea", "sighting_of_ref": "indicator--f806020c-a3df-41ee-9f15-79d46e4f5ded", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74643743-2555-4ce6-b432-d955fb165682", "sighting_of_ref": "indicator--68d95ff8-7c08-4497-8746-dbab19380153", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad9759-0f64-4dec-b7d9-ebe43351ed50", "sighting_of_ref": "indicator--c2c96d52-df6d-4960-9be4-700630c85bf7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec64e795-dd03-4934-988e-54e4798ee8f8", "sighting_of_ref": "indicator--b27ae580-ab44-4095-81ac-45ab2efd0b9a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23ad53a-1812-41f6-a179-2ad76b1bdcdb", "sighting_of_ref": "indicator--b27ae580-ab44-4095-81ac-45ab2efd0b9a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dfb5d2-8569-430a-b2ac-45f357ccc679", "sighting_of_ref": "indicator--58cd749f-a62f-46f9-814d-34867b1a7395", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2436c8-6f96-47ba-b895-d554e6be16be", "sighting_of_ref": "indicator--5ecf9c29-cf4a-4d81-851b-ef35ef5b1db4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76866851-3c8e-4f1a-abd3-fac6cf7ef018", "sighting_of_ref": "indicator--5ecf9c29-cf4a-4d81-851b-ef35ef5b1db4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac1d6f3-2009-4950-9773-483bec8f7924", "sighting_of_ref": "indicator--fa7ba28b-37f7-40d5-b608-74324ed16734", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f8f711-ca07-4d43-9744-b6f984267422", "sighting_of_ref": "indicator--0edcc93d-1fe9-4da9-a956-64581df5de62", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8361ddad-f62a-446b-a288-4f4a03fc52a4", "sighting_of_ref": "indicator--13e4a10a-7ff7-4924-9715-7ae636390c9f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c118839-a714-497e-b40d-129dfc582cd1", "sighting_of_ref": "indicator--cb0aaf14-1769-4609-ad4b-af25b4561042", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94be2297-a280-4195-9229-2020e75779b4", "sighting_of_ref": "indicator--71e47577-91b1-4669-a9c6-a24907ed06ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87384d32-148e-4d72-83b1-105c35ef96da", "sighting_of_ref": "indicator--eb50ffec-fde6-46c4-8874-1ca0999e14aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb25ba8-1dcb-4c89-951d-62c7443ff50c", "sighting_of_ref": "indicator--353755fa-2d95-4b5d-adb1-b323035f4d1b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ff5618-b2d6-44ac-9096-13e6329b2e45", "sighting_of_ref": "indicator--057d6784-f28a-4fd2-aaa6-4fc073260e08", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42da2f4-19a4-4ce3-95f6-da58c6eb242b", "sighting_of_ref": "indicator--057d6784-f28a-4fd2-aaa6-4fc073260e08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecce8059-f2d0-444d-b40d-ab8720baac1a", "sighting_of_ref": "indicator--f77cb2b1-b30a-4d37-91d8-23bd31886532", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9146bdc2-c740-4858-bd0c-88d95966dbef", "sighting_of_ref": "indicator--01273a05-b25a-48a2-a44d-a33f0007f770", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754b044-8ed1-481f-807d-1024e8e3980e", "sighting_of_ref": "indicator--a1472fcd-38b8-4d0c-bbb0-7e47aded33f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51de294-f7fa-4b52-9349-73fbe1ae12a2", "sighting_of_ref": "indicator--ab4f38e1-8626-4995-a11d-734b9ef11adb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac723fe-efe2-4da1-95fd-c69592f4f01d", "sighting_of_ref": "indicator--c7aa08b8-0f20-4c91-9721-092dad029c5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2361241f-1776-46ff-9fa0-c8de6c1a5f0a", "sighting_of_ref": "indicator--2d14e0cc-329f-45db-9d9e-5fcafcd26589", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6f9724-63cd-499f-b093-5108ede95c96", "sighting_of_ref": "indicator--2d14e0cc-329f-45db-9d9e-5fcafcd26589", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7807163-3ec9-455a-82cc-0c9c37da5044", "sighting_of_ref": "indicator--d1d96252-a4e1-48e5-89eb-0eace770966d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dbf38f-0e99-448a-8561-97c1ab505ee8", "sighting_of_ref": "indicator--1b7324af-c85b-4cd3-85fb-f03032cb2149", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d825c-d6b2-4028-b3e1-93e653bc791d", "sighting_of_ref": "indicator--93094c62-431d-4d2e-a35b-94616df5d144", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb1e213-5ff0-4567-b863-854da1a81f59", "sighting_of_ref": "indicator--93094c62-431d-4d2e-a35b-94616df5d144", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f575c9-569d-4d3d-91af-bbfbb7c38c25", "sighting_of_ref": "indicator--ae474974-a771-49cb-a121-1889cc90f51a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794ea03a-4063-4d47-bdab-4a75d6bcc9d6", "sighting_of_ref": "indicator--15b8247a-e024-46ef-bf5a-53d8c0afcb6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286794c0-ded9-4669-b76c-d22a4563bf7b", "sighting_of_ref": "indicator--682d6c2f-f0b4-49d2-8549-aa88048fa66d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01073d6c-241d-47ba-b7c1-f23feb551976", "sighting_of_ref": "indicator--682d6c2f-f0b4-49d2-8549-aa88048fa66d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdad9b16-6cdd-464d-af42-9280bcf28005", "sighting_of_ref": "indicator--68c56aa5-e0ed-42d6-8c94-8716afa913d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f986480-f66d-4c7c-890f-ba4c9e30372d", "sighting_of_ref": "indicator--56bd7cf6-6fab-4831-85d6-9b33b1fceb16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc87475-6cf7-4c3f-94ca-59b651a88312", "sighting_of_ref": "indicator--4c3360ee-f728-49f8-a057-0db864eb2c34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b57f38-6cee-44da-be2c-74ece58eb8ff", "sighting_of_ref": "indicator--da7dbefb-96b7-426c-a77d-5485f5114451", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b147ec-f342-47f5-b80a-c4a1a11beed3", "sighting_of_ref": "indicator--13779ef1-79bf-420f-8945-78142f5859c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d564625-171a-4d53-958c-c0da573cd434", "sighting_of_ref": "indicator--90022800-4db6-4959-bff7-37c9306a1003", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba1db39-9595-4c07-ab1a-c4474b1bac38", "sighting_of_ref": "indicator--b8bb7c57-b098-4cbe-b636-57c52d31f560", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cabfcf-a870-405e-91d1-cfbb81febdab", "sighting_of_ref": "indicator--0f7ed26c-b46c-4e94-ae91-ac088e14178c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c04345-7f19-403f-8e6e-b13ab55724cd", "sighting_of_ref": "indicator--a53f4d9d-0ff5-4c01-8797-5b9f76a31fd2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e7de80-0639-4969-a847-124984df3278", "sighting_of_ref": "indicator--bc88fc81-80b3-422f-a47e-767d8c6d3153", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2111f60d-e745-412f-a124-c47a67096130", "sighting_of_ref": "indicator--1cb9417c-79d8-49c1-9769-f59c0120c4d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dbeb41-1675-48de-b1fd-b76006f5501f", "sighting_of_ref": "indicator--18b371b4-e954-4eab-b8c3-795de5e9c66a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb687017-78b0-4431-9e79-309330b413d3", "sighting_of_ref": "indicator--18b371b4-e954-4eab-b8c3-795de5e9c66a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44540620-e878-46d9-807a-e03c2eafd684", "sighting_of_ref": "indicator--040f2184-24c7-476c-917e-fa3360c991f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099c301f-f4a1-4393-8565-66207e57c3be", "sighting_of_ref": "indicator--811fbc84-b40f-488a-b424-9d5a412dcbf6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ff1e8b-1bf0-4e81-8dac-720bfee544f4", "sighting_of_ref": "indicator--10d809f3-a20d-464d-b881-899baa8e8677", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c02897-5f1d-4797-b9da-926547230f96", "sighting_of_ref": "indicator--648db4d9-4bd8-4cc4-a3c6-7ada3c7a6df2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32a963a-9ea8-4f82-bb82-05f1d52466a0", "sighting_of_ref": "indicator--648db4d9-4bd8-4cc4-a3c6-7ada3c7a6df2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0858f670-e314-47fc-9e51-ae3796d4568a", "sighting_of_ref": "indicator--c348963f-c6e2-47ca-9c67-3cae71669caf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5150d2e8-c641-40a9-8faf-da53f4f30cb1", "sighting_of_ref": "indicator--355a6201-937c-4e28-a02f-e237614e0e01", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9666ae-e90e-4d56-a772-90a8797e0639", "sighting_of_ref": "indicator--62649ed9-bd2d-4d3e-9e5b-8967d9d1b8e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57947e4d-2b38-4139-a7e6-ccb346cf3d2f", "sighting_of_ref": "indicator--6e2c466f-e8c7-4f65-a5e8-b9e9ceb46f4e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5d9171-8395-49b9-bf22-600035d945eb", "sighting_of_ref": "indicator--74f21470-e30a-4310-ac5a-9c50f51c997b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d81199-8554-40a4-b2c6-8e0b70c26685", "sighting_of_ref": "indicator--3cd31275-2b1d-4a87-b432-204385051323", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6f4320-ba36-4f38-9103-97686521ce2b", "sighting_of_ref": "indicator--3cd31275-2b1d-4a87-b432-204385051323", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63340057-1b98-417b-a123-30972b39c750", "sighting_of_ref": "indicator--6b14dab0-1334-47f1-a1f4-c76c7c90a431", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e334641a-f705-49f8-93f3-e3054243e7a1", "sighting_of_ref": "indicator--e267fa0c-0fb4-4549-bafb-22fd0e14aa9a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82408a0e-9d07-4534-88d7-44a7e752947a", "sighting_of_ref": "indicator--605c098c-7b7c-4b22-adad-72a95bee4558", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e7eb7-e7d6-4044-a0ea-102a324f4fed", "sighting_of_ref": "indicator--605c098c-7b7c-4b22-adad-72a95bee4558", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a18e47e-0c36-45ff-bc6e-c0d2dcc7b107", "sighting_of_ref": "indicator--cf6ba4ca-8836-4cbb-b197-2240659a7030", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f0d6f5-e8e3-4c7d-9311-e047bf968ec0", "sighting_of_ref": "indicator--d6ef777f-dd8a-415b-8b20-08f0359260b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4c0a3e-5506-4e80-91fa-15f0493fcac0", "sighting_of_ref": "indicator--ef972510-bd36-4a02-9db7-93e0100ecfe6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f09310-5976-429b-9da6-724130cefa6a", "sighting_of_ref": "indicator--5af2e601-0f96-46a6-a7e2-07f04783c562", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b34cc8-da5a-4238-8014-f49bc8fd92d5", "sighting_of_ref": "indicator--a23f3fa3-3a75-4548-af9f-46ec18f34eff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e23df-ef13-412c-b4a5-cc11fe1dd6a3", "sighting_of_ref": "indicator--d640bbdc-1255-49f0-96e5-17ca30c814f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a3b0b3-727a-4d57-9976-4b0c4a810528", "sighting_of_ref": "indicator--8beecdb8-0f08-498a-be6c-671bfe6ae5e7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b17421-3a90-4388-b006-f70f9edc1342", "sighting_of_ref": "indicator--952ef3ac-0820-4dfe-9fee-4caa806f4626", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ad336e-196b-4afa-ac21-1a1002ebf0bf", "sighting_of_ref": "indicator--bc5970fa-e549-4363-b0de-c3594671f25a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698eef61-eb8d-462c-9ba8-3c3c6a1c540e", "sighting_of_ref": "indicator--34c74bf5-7db5-4cf9-bce4-82aeba0aa42d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba3aa93-d184-46e2-9a69-793f1a37b22c", "sighting_of_ref": "indicator--34c74bf5-7db5-4cf9-bce4-82aeba0aa42d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4a39d8-27fb-455d-a2fc-350008924d7a", "sighting_of_ref": "indicator--601b06f8-84ac-4e8c-bd59-599b740bd3d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2e6ef9-ba93-4af8-b87c-edc401f4ad5a", "sighting_of_ref": "indicator--5774a06b-254a-4d78-9278-5e66b171338d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a48a9c-13f7-4c9a-9c3c-7a15d3c34880", "sighting_of_ref": "indicator--af42746e-3da0-4e37-9659-adb3ed6cd6e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d8cc79-c696-410f-91f2-1cba9d51c359", "sighting_of_ref": "indicator--d7684be9-b867-4c17-a05a-cb39fad96f64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf17a0d5-6d17-415f-bc29-7dd58d856bd0", "sighting_of_ref": "indicator--66549810-f1df-4434-8228-b148c85d9872", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab2cd42-9f1f-4f12-a21d-58fdfa6040dc", "sighting_of_ref": "indicator--66549810-f1df-4434-8228-b148c85d9872", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9734906f-b0c0-4fa3-9a0e-6930c1c55e2b", "sighting_of_ref": "indicator--4ab9faca-cc10-4580-aa40-8289614b3a6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082b622d-762f-4f88-8e20-95682877bbc5", "sighting_of_ref": "indicator--0ff35fbe-2b7c-47d1-a20f-54d37feac9c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408cc3f4-e518-43ed-ab06-95678e7a73ea", "sighting_of_ref": "indicator--79b67c0d-36ae-4c88-b1f7-7c975d91d32f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4339a966-b02b-4454-b8f8-df20015bbac1", "sighting_of_ref": "indicator--c9c7e498-8789-4676-b8e1-be0d1c218b05", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d79cdf-72f7-4cb8-ba27-89257a955f4a", "sighting_of_ref": "indicator--4371e074-c7eb-4895-bac6-a4a8bfa3efb8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7053aa05-4a5a-43f4-876a-d00015644bbc", "sighting_of_ref": "indicator--50c4531d-b09a-4374-9008-12047997e2b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c696a693-81e4-4cb4-af13-9796113edfe6", "sighting_of_ref": "indicator--ef27fe5d-28c3-4020-a15d-cd2025a87306", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1050c8-1274-4917-abaf-aea5ab01e486", "sighting_of_ref": "indicator--b1a25175-ce8f-4be2-97fa-770395b2e118", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2114df95-80f6-4a24-a8a9-206325ad75aa", "sighting_of_ref": "indicator--4132843b-ec4f-4678-b6f5-635fb627d9e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe554a8c-e3a1-4e38-92ec-167cbdd12a56", "sighting_of_ref": "indicator--757345c1-70f7-40f3-97f3-be686b14fd6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cec121-0e13-4ecb-9449-5c7343aeeef8", "sighting_of_ref": "indicator--0f4252f6-6780-452f-bd7e-22451e7c2307", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76968b8a-8573-4e14-b4ff-5851095956df", "sighting_of_ref": "indicator--026d9568-df89-4cd5-b8b4-a83252fd087f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ca8521-4e61-46e6-8862-dd78a3816dea", "sighting_of_ref": "indicator--39f0a330-417d-45fe-83b2-97d84d5d7f7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a449bb5e-5792-47b9-af77-a9a53e625c8b", "sighting_of_ref": "indicator--4078fcdd-b23b-48ed-845f-53e436ddc678", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d51fbf6-bbe4-4db4-a941-d661329813b9", "sighting_of_ref": "indicator--7e328fac-0249-4370-af4c-a4abc8936488", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4a70fd-5f76-4d38-8273-fbda90d4094c", "sighting_of_ref": "indicator--21299858-497a-4256-a63b-dc065e611830", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3b7f7f-13c7-462e-8718-9d271305f435", "sighting_of_ref": "indicator--4c367e4e-7f01-49d3-b299-6592f1892531", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114a2d6-b126-4b70-97c2-472b3c37f5e9", "sighting_of_ref": "indicator--4c367e4e-7f01-49d3-b299-6592f1892531", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca841bc-17cf-4fd7-8659-35707327434e", "sighting_of_ref": "indicator--0c3364c9-432b-432b-82a0-050f8ef6bee7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abbfad5-059b-4c86-baa5-f3e3c73dd992", "sighting_of_ref": "indicator--245cb5cc-2887-43a4-9f21-d03316556d5c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afe2efe-db74-40ea-8cd8-50cb9c80e2f8", "sighting_of_ref": "indicator--32c65918-a5f4-4c6f-99d3-4df4d84c021d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17511859-d14f-47e8-9ad0-74693adad888", "sighting_of_ref": "indicator--32c65918-a5f4-4c6f-99d3-4df4d84c021d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a548c403-504d-410b-a84e-85dc91adda3a", "sighting_of_ref": "indicator--3331abd9-a137-4476-a0a2-fc98ebb6946a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d58efc-84aa-4ad0-a825-a4ab9e321a8f", "sighting_of_ref": "indicator--07306b83-7b85-4c33-a055-365efbd8c857", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57cd8e7-9234-49b4-8f17-07b113e8827e", "sighting_of_ref": "indicator--10fb659b-29b6-49b8-a1c1-26bc810ee6a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c844328c-ee7b-4f33-91ef-feb0029efe8a", "sighting_of_ref": "indicator--59dd4ee7-73c0-428d-a941-082ef981e4f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f6ad57-7284-4106-966d-2415ffab3e04", "sighting_of_ref": "indicator--b0e46a36-c70d-44bd-9bed-33665c798bb1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6416df1-58ac-468a-a124-91b5e345cc5b", "sighting_of_ref": "indicator--0c19cced-34cc-4775-8130-3d9027987732", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721e152-e2f2-4573-9a03-a5db56db90aa", "sighting_of_ref": "indicator--1098a604-b6b2-4395-8eb7-6932763ca0aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea2332-34ad-4c91-990b-705d20ef7eec", "sighting_of_ref": "indicator--1098a604-b6b2-4395-8eb7-6932763ca0aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e516bb7e-8727-4253-8506-ad4dd47d5f79", "sighting_of_ref": "indicator--bbfbb365-58e5-4f58-b0f9-fea1f0ee9bfb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d73f623-68d7-43b0-a607-e6d95ab328ea", "sighting_of_ref": "indicator--dd91dcec-6f15-43a8-944b-04c1c87729ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9962046-6337-4c21-bb43-0d988d5349cf", "sighting_of_ref": "indicator--4bef9afb-0461-4572-82bc-2380ee979e7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8455be11-da73-40e2-87e3-e69e947aec52", "sighting_of_ref": "indicator--1502bdc2-6c79-48ea-a1a5-c2e4f6f28891", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e41f1c-9fe8-4870-8b39-094b11b1cc50", "sighting_of_ref": "indicator--b028558c-2270-4228-8b69-7030cf50936e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a630514-379c-4253-b971-88884f744f0b", "sighting_of_ref": "indicator--62e739e8-0b74-47d0-90c2-c1e0fbe6e16b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136eaf36-f31c-492e-b3bb-dd96b5584b89", "sighting_of_ref": "indicator--16b3c188-3884-4abb-8c8e-4bf1f144bf4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fa31a7-a012-420d-bca6-6025c48f5082", "sighting_of_ref": "indicator--5c61179c-5ff2-4734-83a5-6a1c17178e10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5503ec-de57-4ee3-93ae-2e2788ccf46e", "sighting_of_ref": "indicator--e6874cf0-a332-46a7-acda-09e696e42fec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9307fc65-866d-4618-86f9-5938390cea39", "sighting_of_ref": "indicator--548e56c1-cc8d-44eb-8682-e8acc4060b0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fde6b7-7ab2-47bd-a407-e2fc0aeb95a6", "sighting_of_ref": "indicator--edfe4d70-ec91-487a-9329-ba0953fc3988", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f858503-5cb0-4aba-9fa2-dafc7a7c45b6", "sighting_of_ref": "indicator--3e688317-cd01-42d9-bd2e-0c8a0c0fd38d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09313570-4139-42b8-a865-0fbf371259dd", "sighting_of_ref": "indicator--39332d98-0717-492a-81f1-035d5845cb9e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03970708-233b-4bd8-892f-3c6345c8a0d0", "sighting_of_ref": "indicator--06ce9026-b36e-48bb-bdf1-69860ec2e102", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa43de8-bcd6-4f2f-b07c-d1fb5800aa8f", "sighting_of_ref": "indicator--06ce9026-b36e-48bb-bdf1-69860ec2e102", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e1990b-db0b-4f63-8738-6fcd29fc7d07", "sighting_of_ref": "indicator--94bd8692-e76e-4d79-95d2-cc00999538fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31cd151-54dc-4103-a6b7-307b37f57ece", "sighting_of_ref": "indicator--0aec340e-05a4-45df-babf-befe76e21954", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bb7f74-bee8-44fe-8277-554e584eabb6", "sighting_of_ref": "indicator--8588d827-7099-4799-aab7-5edfefc253fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62a9f48-f633-45ee-bef2-a24a4863136d", "sighting_of_ref": "indicator--f2a09716-0143-4734-93b1-53177a95f5b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62d097b-75a6-40ce-a32d-0ed656e25fd1", "sighting_of_ref": "indicator--5f741787-ff37-4ad7-8434-7f4df955efbb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3613a852-0f4d-4187-a14a-294470bfabd6", "sighting_of_ref": "indicator--47784bf1-0adf-47bb-ad31-2708f291fae3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b33cd06-b295-4003-9197-c17fca090f65", "sighting_of_ref": "indicator--45cb3260-f388-436f-a508-1741a94a6a6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63f2232-100f-4fda-b160-25a3fd60d522", "sighting_of_ref": "indicator--45cb3260-f388-436f-a508-1741a94a6a6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b46f48-c5a4-4854-af1a-eb8eec4d1f79", "sighting_of_ref": "indicator--9659b869-ad2e-44c0-af9d-83924fb4e2ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e9e2b-3750-44af-921c-792b31ec5848", "sighting_of_ref": "indicator--f40868d6-35bb-4ec0-b15f-7fdf605e07ff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89db7a56-0766-4a90-9375-2d39a32d7432", "sighting_of_ref": "indicator--afb58e3a-85b9-4888-977a-742bd242ccce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591388c1-1f75-41d2-ac6f-847c41e748cc", "sighting_of_ref": "indicator--bb41c03a-061e-423a-80c1-2d3257b43578", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf280f-2d4e-498a-ac36-ca7087e8dfd4", "sighting_of_ref": "indicator--5f6a06e1-4923-46ee-bbda-b7654437de6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea27147-a015-4264-94de-fdc7066879da", "sighting_of_ref": "indicator--1ac4f515-f663-49b3-a4a1-e7542bfbf69b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fc71fd-3fcb-41f8-ae74-01ec423007a9", "sighting_of_ref": "indicator--3f67813e-cd8a-4124-b3bd-2e9dfba46510", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15e7a48-2a81-4a9e-be7b-662fd3198ef6", "sighting_of_ref": "indicator--67df7e9f-1e88-4806-a98d-6b219b654ac6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eeb469-9157-47b5-93a7-795eb0b61928", "sighting_of_ref": "indicator--ec387f4f-5721-4af4-bb72-f41aabee9572", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9181bf-7588-40e1-9023-4e8e9d67a11e", "sighting_of_ref": "indicator--1da8781f-753a-44ea-aeed-15a768d1364d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66e2576-a966-498a-a4f1-eb699b7b9976", "sighting_of_ref": "indicator--87985f02-7ef8-40e2-89d6-12359cd982a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab858c92-0947-4bf3-97ca-c55711f11eb2", "sighting_of_ref": "indicator--ad351d9b-fbd7-44dd-b16e-87ed2b583f6e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c920f4-5d00-42e3-bf62-a51d14ae60e2", "sighting_of_ref": "indicator--ad351d9b-fbd7-44dd-b16e-87ed2b583f6e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d53a541-8ecf-4692-acc1-bcb821c04310", "sighting_of_ref": "indicator--0f90e5d6-265a-44a5-8f4b-e1e3122db1bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17fb87d-3a8c-4f1d-83e0-1c73d8fa95ab", "sighting_of_ref": "indicator--32770533-f4db-4a82-9fa3-6aa9c6620e9a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff52fb1-da23-4fbf-83e1-34d7d092ed82", "sighting_of_ref": "indicator--32770533-f4db-4a82-9fa3-6aa9c6620e9a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd7356c-6415-47c0-9490-abca8d4b6ddf", "sighting_of_ref": "indicator--3656e95b-e81b-474f-b6a4-8b3f6d08cb9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7dd62e-fc20-4857-ba31-3a694f0dc02b", "sighting_of_ref": "indicator--90bb8c4d-72f5-478e-88e1-b876cc2f88ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7576d1e-2579-49af-bf20-becf25a7a2cb", "sighting_of_ref": "indicator--204fb70e-4d51-4ad8-95d2-d91221326093", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d70b566-947f-4069-81e0-1aec55040365", "sighting_of_ref": "indicator--ba1cf63a-d4ce-4ebc-b59b-1cecf6a14c3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8932a54-de1f-4d54-86af-4d66ae09e924", "sighting_of_ref": "indicator--a90adc1f-b54f-409f-a71b-575dc3ab0704", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf10987-fdf7-4704-b94a-30a9abdab395", "sighting_of_ref": "indicator--85a100cf-26ac-4246-8524-1e5493cdf8a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3bba94-db75-4da3-b693-52a0a0a46df9", "sighting_of_ref": "indicator--85a100cf-26ac-4246-8524-1e5493cdf8a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dc490b-46bc-4c01-8db0-dc7dbb2baff2", "sighting_of_ref": "indicator--97968f87-c843-4d92-a3dd-d4bab1bffc1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407dff44-3a63-4a08-9a8d-cd79c5e30008", "sighting_of_ref": "indicator--97968f87-c843-4d92-a3dd-d4bab1bffc1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3eade3-ac8f-493a-bf68-17fb4ce98aa8", "sighting_of_ref": "indicator--c64e3a25-0ff2-4e06-a2a2-0aea0bde9589", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a73ac6-0109-4d3a-8f4f-6e204f6ee95e", "sighting_of_ref": "indicator--6798cd97-639a-48d7-a52f-e03fb631b044", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9609503c-7872-4f8b-afb1-34eb2da65ba0", "sighting_of_ref": "indicator--75f73797-e473-442f-aae3-c07ce29f9145", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfc1f41-5721-47b7-b598-95569f2b4a7c", "sighting_of_ref": "indicator--5f1d9629-fd53-4bc8-9539-d03bdcffb2aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c29b5-876c-4409-a3ed-2189659b3bda", "sighting_of_ref": "indicator--0a922894-93c8-4dc4-912c-73c0a9c55785", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdb0e53-e72b-4633-b19a-36b980167d6f", "sighting_of_ref": "indicator--0338c90a-55b0-4ac5-ab17-8a0a7e9068d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404a3ae2-337b-48d4-8be4-c1f51c97e946", "sighting_of_ref": "indicator--26a4e4e8-6c37-489f-a311-98db236b92c7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82ad7b2-57bd-4c53-aa67-0f95d49ed108", "sighting_of_ref": "indicator--26a4e4e8-6c37-489f-a311-98db236b92c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5231ef09-103d-4d75-8ed5-b2e89cc812d2", "sighting_of_ref": "indicator--9975728e-863b-427d-91ee-da6c60748a6a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732cc2db-0470-4342-baf0-a6ca3efd77ed", "sighting_of_ref": "indicator--7e6290d1-d86c-494c-a3bc-c6f7f1ae6c25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d432ca-e1fe-4ef5-a677-40853ab98fd8", "sighting_of_ref": "indicator--91f9a403-7016-4a1c-92a9-ef49cf17051f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a7e51e-0a87-4a94-8ecb-e628b58a4535", "sighting_of_ref": "indicator--5a28840c-81f0-4cf3-83fa-e43d8a16cb36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3898e5-7ef3-4daa-ad01-04b00054885a", "sighting_of_ref": "indicator--4ff6f8d1-d74a-48d4-b0f0-f81bd05dc48c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70194144-9081-4cfd-902a-5a7248d83b48", "sighting_of_ref": "indicator--4ff6f8d1-d74a-48d4-b0f0-f81bd05dc48c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0576a9f5-1176-4123-8e58-fbfce8674f26", "sighting_of_ref": "indicator--06d80e89-14ce-4858-9c88-d169505bd777", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90479cd2-9719-4752-a169-c73df609225d", "sighting_of_ref": "indicator--4146a0f4-b2fa-42b7-828d-0c1b884c0fac", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f4892b-f517-4274-94a3-8c3136f6a155", "sighting_of_ref": "indicator--4146a0f4-b2fa-42b7-828d-0c1b884c0fac", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dc0dc7-4004-4787-8d56-8eb5954d334f", "sighting_of_ref": "indicator--0eb8f87f-229a-4a11-8e2b-8b8aef5f4389", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a24247-1ed5-4a83-8725-0a5f655a9045", "sighting_of_ref": "indicator--c3b1992c-78ab-4775-a29e-fc2180edbb1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1740553a-1ba6-4337-8126-a1401569220a", "sighting_of_ref": "indicator--6e95cfb0-45f7-4922-81fb-5fd1c1db1657", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b00ce48-a339-41b6-92c6-cab19febbe25", "sighting_of_ref": "indicator--6e95cfb0-45f7-4922-81fb-5fd1c1db1657", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc08fd2-f815-4b51-8887-95e5e300628c", "sighting_of_ref": "indicator--f9436932-33d6-4389-b467-4480b599e75b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef15a08-761d-406e-b68e-6fd7f4cc2a70", "sighting_of_ref": "indicator--69ef5d58-63c9-4479-bd5a-1581add4742c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a9b808-63ed-41bf-a57d-c6aa8c4ef3c2", "sighting_of_ref": "indicator--0b1386f7-ce0f-4a62-adba-53547279a82a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb461431-a418-4cc3-b72a-b128db35e814", "sighting_of_ref": "indicator--1edc2ff2-bfc1-48be-9e57-c5a85ab6f68a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfa4425-66d9-42c9-a2a5-e47e726dda02", "sighting_of_ref": "indicator--1edc2ff2-bfc1-48be-9e57-c5a85ab6f68a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffb77a6-0d49-459f-8b60-ade8cdd70224", "sighting_of_ref": "indicator--4d400452-a7c9-4cc4-9bda-2a68f8d3bbe1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bd2572-ed3d-4223-bbc2-4cdbd2122193", "sighting_of_ref": "indicator--82e8c91d-8e38-4c7c-9bd5-d1a2901d7631", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958914d7-41b4-42cb-9af2-dfc426dbee42", "sighting_of_ref": "indicator--34770614-780e-45a4-a7bc-f4884444e56f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954f4a3d-dd28-4be9-a2d6-d6134fece076", "sighting_of_ref": "indicator--7e0c8b03-9160-4170-8d8b-0a9b83c517e2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0112759-6bf5-4a9f-a64d-f71544129160", "sighting_of_ref": "indicator--9bde4945-00c6-4c2a-bd3a-cfe04a09e076", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b58f6ff-4a16-4504-a222-c46f5ab3f77c", "sighting_of_ref": "indicator--d8a38f50-a713-4709-9cab-225f25b4f9aa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec17b2f1-90cb-4a2b-8a01-370b68230def", "sighting_of_ref": "indicator--edd8d1da-da00-42f2-a887-f58769001bb2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2997bd2a-ba5c-472c-b703-ee05d7cbed52", "sighting_of_ref": "indicator--3466a4a2-fc38-46ad-8f22-1a6ef07e82b6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82472020-02d9-49c7-b53c-f4e92c8c3dbc", "sighting_of_ref": "indicator--ca4718d2-6552-4aef-921a-020d644d49ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e324baaa-b6a2-47a4-bff9-ab42c131819c", "sighting_of_ref": "indicator--5897db52-b968-4bb7-8136-57de64a87a17", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f319c75-8bac-47c7-8458-e901f5a0268b", "sighting_of_ref": "indicator--5b261da9-d37c-426c-a056-c362bb8b4e72", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530298a0-6172-40d9-a3d4-06b27c5e5735", "sighting_of_ref": "indicator--cd3fc980-e185-4274-83b0-7fba04cff1a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de30a88-5f41-4c83-85f3-54f0ddfcf972", "sighting_of_ref": "indicator--0981fc69-226b-4215-9ff5-5f1d4831501f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3b9fac-a44c-4d3a-b1f9-150e62d868ed", "sighting_of_ref": "indicator--9c2c08bc-dc8e-4d30-99bb-f1c0ccf40cbb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62232369-a11a-45f5-866f-e2a4c8cbcab8", "sighting_of_ref": "indicator--93df7c68-342f-4f4c-a2e1-ae5d1371340d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1bbd44-1bbf-48e2-b5e2-d24473de355d", "sighting_of_ref": "indicator--2aeb8df1-de03-4cd0-bd38-5e86d2ee1086", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0435d340-fb52-4c4b-9973-3195a420040a", "sighting_of_ref": "indicator--4aa9bc42-d5ce-4c14-8975-8d00e6a09638", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c7358f-d90a-42d9-a76d-4f32987e17c8", "sighting_of_ref": "indicator--8dfa9a84-36c8-4cb8-89b6-75b953e78686", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49478d75-6237-49bb-a1b4-5113aede2fa1", "sighting_of_ref": "indicator--6d47f7d2-5d16-414d-b764-86b218824782", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844ee250-153d-41ff-b4bc-6c783bd8c632", "sighting_of_ref": "indicator--a5c07fd3-9790-4513-8025-a7b018e9c9ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2643ae2a-2a43-43de-be11-bcdbad70f341", "sighting_of_ref": "indicator--852a9098-3673-4de1-b8c2-a535c7c49f44", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb24260a-3d5c-4806-8d96-4ece3e7ce3f8", "sighting_of_ref": "indicator--41993030-46aa-4d3a-a625-01639ca12d80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f43015-91a5-4d61-a93a-4709fedd8106", "sighting_of_ref": "indicator--41993030-46aa-4d3a-a625-01639ca12d80", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d2a530-790b-4879-9a04-b613f19e4864", "sighting_of_ref": "indicator--d33b5bbf-49c2-4f8c-803c-3ef0f09a4e29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b75e531-811d-4573-b063-cbbc5d63a30e", "sighting_of_ref": "indicator--8bf44dea-4291-4e7b-bbc5-080516d97faa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800be272-551e-4857-a97e-2e3fb8c9afa0", "sighting_of_ref": "indicator--50654c3e-ef47-489e-96d6-af7489a50938", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25096298-8fa1-4678-b4d6-0c29fc2889c1", "sighting_of_ref": "indicator--e2da661d-2b07-4906-85f4-972d6da1bf2a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5641e9-e38f-4d4c-a776-1319b7d88cc0", "sighting_of_ref": "indicator--03873220-6211-449b-a554-3498afbec962", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd514a5-2fdb-4e08-a7bf-c58261e41a18", "sighting_of_ref": "indicator--3626253b-e010-4d90-a469-3b43f367b6d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b5aee4-8702-42f8-8a31-d0be5b6f616f", "sighting_of_ref": "indicator--3626253b-e010-4d90-a469-3b43f367b6d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce21f93-985c-472d-8374-d37c4d1fba8e", "sighting_of_ref": "indicator--9f353cb5-4630-4bff-8923-b2f745d2e4da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea76e72-74db-48fa-ae2a-dc0358a48b65", "sighting_of_ref": "indicator--780d8dc5-bb40-4d50-9ae2-10fd167b3ad1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73da87de-b612-4d3e-bc29-6fd6d484fbdf", "sighting_of_ref": "indicator--e22af31d-e2d4-4553-a87b-758ca79f3bf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f13b2c-3353-49df-bea1-7696324225de", "sighting_of_ref": "indicator--1b251f73-8a1b-469c-b357-45293fe593ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823eeb35-056e-450f-abab-d0de15408365", "sighting_of_ref": "indicator--1b251f73-8a1b-469c-b357-45293fe593ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de807588-7a3d-469a-a663-a90c31f86f7c", "sighting_of_ref": "indicator--b5e492a1-25ff-4a00-9b14-7656cf0aa447", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c261405-8b4d-4d0d-8a2e-9ab0b9e2a3f6", "sighting_of_ref": "indicator--54425a75-157a-45ef-b942-afc893fe80e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878c55e1-b881-48ab-9e97-296b0ced85da", "sighting_of_ref": "indicator--2985bbaf-68ec-479e-a6d0-87c033feeb55", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112afbf0-1fa8-4dd6-923e-c3c8636beb36", "sighting_of_ref": "indicator--6d6c2305-46ed-4b5f-ae94-9a35d78a8e2f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb83d8c-ba1b-4cc7-bb63-44d4025f92e0", "sighting_of_ref": "indicator--ba7a3bbc-b589-4966-83ec-6927fa5d1b63", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e82ba2-7329-459f-9eb6-d4a8a07014ad", "sighting_of_ref": "indicator--4835d9e1-d32a-4606-bc85-cb5471431be0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2811389f-294c-4608-9b78-c26ef3bd74fa", "sighting_of_ref": "indicator--7df262c8-6c3b-46a9-8fc1-bf8d29ab74d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba84692f-ec6c-413a-a8bc-012685ed1944", "sighting_of_ref": "indicator--809cfbe4-a682-437a-872e-eebcfd962543", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559991c8-a18e-4c25-92a4-6646a303b2a0", "sighting_of_ref": "indicator--11df3994-1daf-4b18-803b-e666a1df7201", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c1a90d-95cd-44ce-9c2c-7a5cc1173f8e", "sighting_of_ref": "indicator--3c2f9601-e715-40d0-8f17-6ed8461f640d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167b8bfe-45b0-4ac8-9fa4-61620ef354e5", "sighting_of_ref": "indicator--998880d4-607d-4d22-bae1-348923abb9c6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ed4b97-4ba7-4731-8ba7-cb590b307149", "sighting_of_ref": "indicator--603836be-2b08-4c36-827e-4b61565cd0d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6104325b-2d50-493b-981a-70808055d8e4", "sighting_of_ref": "indicator--15e34496-e5cb-4fb1-be03-bff47b2fc264", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccd2bce-b9b6-4a25-92b2-1a741b628a9a", "sighting_of_ref": "indicator--15e34496-e5cb-4fb1-be03-bff47b2fc264", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff5f97f-b0df-47f2-9299-e793f4add5e6", "sighting_of_ref": "indicator--a8385daa-b0a4-4f61-a226-2d36493b345b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f4667e-3e61-4d8c-b014-0e9780060307", "sighting_of_ref": "indicator--c78cea41-92fd-4428-adb9-d6af444a0435", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b5de6f-bdb6-4d89-844b-8026073701e1", "sighting_of_ref": "indicator--c78cea41-92fd-4428-adb9-d6af444a0435", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0581a960-181b-4494-bc0d-4700fb6a421e", "sighting_of_ref": "indicator--b7b6d660-bc7f-4ed4-9cfd-977f50fdd831", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc85b34f-3658-4e32-a924-7a6591ff4b40", "sighting_of_ref": "indicator--2aa42090-13e7-42bc-b176-52653a0ff897", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9660eb32-2b88-45c1-9580-234f5ef0a73b", "sighting_of_ref": "indicator--2aa42090-13e7-42bc-b176-52653a0ff897", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bdbfb9-4da1-40a5-9670-b666adb2cf2f", "sighting_of_ref": "indicator--474a4b50-4582-482d-b892-de931fcd38fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35cf64b-8903-4a95-981e-0b4c9bfbb897", "sighting_of_ref": "indicator--16e58d5e-634c-468c-bbed-10eb7b149fc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e274c2c-7eb2-4b6f-9e6c-1368f1f9b41a", "sighting_of_ref": "indicator--16e58d5e-634c-468c-bbed-10eb7b149fc9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4b9231-9b84-46aa-a209-27b70edf367e", "sighting_of_ref": "indicator--c15ae751-fe91-4f24-9f03-df962e5aeb8a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b27d8a8-4004-463c-ae01-18a3b33ec30d", "sighting_of_ref": "indicator--bfb9d90b-8c86-440e-aa29-b8e00dbaa886", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfe914c-5a4c-463d-9480-4473f6ea3951", "sighting_of_ref": "indicator--60c9a31e-e2e2-4fcb-8cc6-d6b53dec9810", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c75b4a-3493-4c2e-b74d-a652fa61c2c0", "sighting_of_ref": "indicator--ba043ac5-880b-424d-9be2-d1724eafe953", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6515dc6-d4ef-4b3d-b9cd-1e640e4dc707", "sighting_of_ref": "indicator--911ed771-df85-4c15-8717-7026c68929f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2515e4-ef9a-4a6f-aae7-b4bb0c4f2455", "sighting_of_ref": "indicator--a3e30ecd-2df7-4fdd-9678-cf3a1aa484a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea705d97-6e98-4cac-a8a5-2cd9274a3281", "sighting_of_ref": "indicator--c1ccade2-665b-4602-92ea-1af4e24c5ac1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5ec59e-ee40-49c8-8670-8be359dc63f9", "sighting_of_ref": "indicator--ee7f16bb-0472-4ce4-ac24-f9a0c9f4c01c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3bf60d-4496-41ac-90b1-60b7395598c6", "sighting_of_ref": "indicator--456ec9bb-6d80-4c38-b3ba-d53fd139ad16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eae7d1b-4f0a-4973-ae9e-0a9c1c880d7c", "sighting_of_ref": "indicator--083a2123-d71f-406f-8b1f-533f452831c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4d6ccf-5d6d-4061-9a27-550962a78947", "sighting_of_ref": "indicator--35f6cce3-0d97-4fbd-a1c6-ddde7b10d983", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f204136-bd0f-4855-a048-220919d40c09", "sighting_of_ref": "indicator--039a3336-0b48-4b1c-bdda-5648eff6b878", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba64f5-36d0-4d7d-934c-353bce90e57f", "sighting_of_ref": "indicator--75f20c2e-9755-4a1d-826f-fb5bd5870b1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a534acf-d3e7-4edf-86b1-39d83b0c1c2a", "sighting_of_ref": "indicator--afe0d01e-6a36-44a5-a638-998c2d86b34d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c3bd79-d965-41da-841b-96acbf1f07b9", "sighting_of_ref": "indicator--afe0d01e-6a36-44a5-a638-998c2d86b34d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22d1c28-4c85-4a4c-9111-21b663dba246", "sighting_of_ref": "indicator--c250711f-b851-412d-8e0e-2d29fff43390", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b448257-c18b-464c-8012-ad365d04f00e", "sighting_of_ref": "indicator--9cf46abb-0822-44d0-a3f6-1be3b4b34902", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f80ba8-0142-4ef5-8571-879156217280", "sighting_of_ref": "indicator--9cf46abb-0822-44d0-a3f6-1be3b4b34902", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224fea4e-5141-4d4a-8ad8-3b26d555e45a", "sighting_of_ref": "indicator--933c26f2-802b-4e06-a583-3847addcdfcf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effe4dc2-89d6-410c-9f77-c1497d2593d0", "sighting_of_ref": "indicator--e5e1a736-f5fd-489f-aeec-c0211ec5b684", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdea9d4-ecbf-4615-87b3-fd81bea6c648", "sighting_of_ref": "indicator--c26eb9c3-2736-47f0-8ff1-9ec91be8e822", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9386b222-9068-4db9-8c8b-48db73e0b3a0", "sighting_of_ref": "indicator--4148d9d0-4f5c-4340-ab46-0c9dc621f8c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1200ab-794f-4324-be62-8373a258d3f7", "sighting_of_ref": "indicator--5fb8e675-0102-401a-ba4f-b16499b6c93a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed88940-52d1-4f04-8379-32b98be5b518", "sighting_of_ref": "indicator--cfe6f456-2fae-4fd1-9275-a3652afa2d6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2458c92e-6039-4997-a0be-508f8dae9f08", "sighting_of_ref": "indicator--b6fa464e-1f33-48be-b219-2c7123fd61e6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc5ce3a-8c2a-444a-94aa-6998ce7965f7", "sighting_of_ref": "indicator--c7731b56-a0f1-4be3-b3d1-d1b9afc4eb77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59459fb5-01de-4403-8fb0-2db1a7ad308d", "sighting_of_ref": "indicator--59fbd70b-2d32-46aa-a532-db1088c54432", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d14ff6-922c-49f1-bb44-c8e55cbccc1f", "sighting_of_ref": "indicator--9cbbe3bf-6b80-4d98-97e4-a90305b452b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1255a20d-cded-4828-a215-63e50e8d898f", "sighting_of_ref": "indicator--9a302fc1-0dfb-4ec4-98ec-87bd0538d0af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2913d1d8-251e-4e7e-a54e-ce644fce07ae", "sighting_of_ref": "indicator--a3d74bed-7f55-4592-bc62-76abdab151a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fc7ae6-9769-4c0f-997c-e9d91d94143a", "sighting_of_ref": "indicator--a3d74bed-7f55-4592-bc62-76abdab151a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18c532a-a11e-428e-8d9f-361b0aac393f", "sighting_of_ref": "indicator--164be550-9d01-46a8-af75-1ba0a7fd1cbd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c056f6-04ff-4cc4-a62b-fe175fc0788e", "sighting_of_ref": "indicator--b13f273e-fc48-4e5b-aed3-5a88b92aedf5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e700aef-8b5b-4ca9-93d8-9b9920db40f1", "sighting_of_ref": "indicator--b13f273e-fc48-4e5b-aed3-5a88b92aedf5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82939856-3689-4153-b3f8-7ffd67118b59", "sighting_of_ref": "indicator--5ec9230e-cd92-4f78-a9df-ab8429c3999e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a94aad8-d523-4130-9e70-57c1af77ffbf", "sighting_of_ref": "indicator--6527c74f-80d0-4f59-9bf6-10e1171073ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2ab187-5580-4122-91e7-1b77b9c19a65", "sighting_of_ref": "indicator--0bf8afba-325e-4849-81b7-7d4808f6bc1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a2ca2e-982a-4497-a7e0-1012ae920d1e", "sighting_of_ref": "indicator--88d6b138-d348-4f21-b5b2-a82b84fb3fec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0790b39e-c6d5-43e9-9f87-6b9bb05d0c0d", "sighting_of_ref": "indicator--6f742273-30d0-4fc3-8cad-6d49ed90e7e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44392a2-29fa-4404-a533-f8025bd0fbf1", "sighting_of_ref": "indicator--6f742273-30d0-4fc3-8cad-6d49ed90e7e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eff944f-b8fe-4751-b1d8-ea5f820ea245", "sighting_of_ref": "indicator--a80164d1-551b-4f88-9897-cdc5e7e7d17b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ab81be-85a1-495e-ae96-f3b501a15d04", "sighting_of_ref": "indicator--6764f781-e76d-43ce-9cf3-a45cec395646", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c80084-2172-4b86-8948-a720648855b0", "sighting_of_ref": "indicator--75afbd28-519a-404a-8034-2c4cf46529a9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039fedd7-1745-477d-a5c9-dfa1f0c9ddf8", "sighting_of_ref": "indicator--0edec0d9-787a-4a9f-bcc0-dcb203b082f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc51709-c46c-4346-9107-11a7ab1954be", "sighting_of_ref": "indicator--0edec0d9-787a-4a9f-bcc0-dcb203b082f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973c5c2a-d8df-4574-abd9-9672e6af6b75", "sighting_of_ref": "indicator--2fe440b3-4860-478c-968b-774808cf980c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7f4a21-4070-41f6-b130-9e3344e0a05f", "sighting_of_ref": "indicator--0fb56d6d-f6af-4e06-a752-b0e9ce55c8bd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36cfaab-8668-49fc-9612-16afecbd023b", "sighting_of_ref": "indicator--0c854228-fbac-4204-8f50-9e9fd2b67a16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ad1713-2f45-40df-a393-3df6b70da294", "sighting_of_ref": "indicator--b37148d7-2ad9-4af8-8b4b-45427543a093", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247ce1ad-8332-4f09-8f24-950b7ff8df4f", "sighting_of_ref": "indicator--13f1790a-5bd1-4e2b-bab6-a2c7a1f218c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1ff79b-b958-4a1e-917e-330bc3417d76", "sighting_of_ref": "indicator--0d7cde5c-7d03-4c7c-b318-38de74574096", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da08fc-0185-4e34-99e0-c7183d4ca84b", "sighting_of_ref": "indicator--ac57037c-9665-4d05-97d0-dc18ea86fa81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c0f7f5-ce61-464a-a2d0-bfab4761014b", "sighting_of_ref": "indicator--fe2cda25-64a8-4e06-afe2-c7ab67f587ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a167655-4081-4837-b047-eb37d7887048", "sighting_of_ref": "indicator--e561badb-880a-4dd7-a1fd-48a207e618fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d399d15c-f78f-444b-99b4-dca4ab14f579", "sighting_of_ref": "indicator--d1d5f0ee-e915-4d61-944a-9c1926def29d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4ed963-8ec6-43ad-a8e2-35598191d140", "sighting_of_ref": "indicator--154df4d5-56a0-455f-9bb1-f954b42e8a21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d253baa-0a92-4f04-882c-4396bb020a2d", "sighting_of_ref": "indicator--427a9405-c689-4379-a69b-6965c34a2bb3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0f69c3-a02f-40be-aab4-5eae56aab020", "sighting_of_ref": "indicator--ed9fba0d-6ef4-4795-92e1-aa837f19f84f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c2e780-be22-401b-a144-03d800835ce7", "sighting_of_ref": "indicator--e8019703-cf31-47cc-a0fe-64fa0cd22476", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de30a5b0-1349-4c0e-96b0-dadc8b7d9108", "sighting_of_ref": "indicator--e4bf9d70-aad2-49d1-ab0b-25e47fd95ef9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7c2736-e055-4d96-8ddd-d646497d266f", "sighting_of_ref": "indicator--d8455e84-eef5-41d0-8f50-ce33ed57cdeb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0abc7c-220c-4b11-a2a1-8d7fd525ea95", "sighting_of_ref": "indicator--d8455e84-eef5-41d0-8f50-ce33ed57cdeb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6c6ae0-b2c1-4a74-b32a-3f663e31a763", "sighting_of_ref": "indicator--bf73793d-4f3e-4ae6-bcbe-e22958506e15", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065573ab-1cea-4f9f-a0ab-8bcea10b809a", "sighting_of_ref": "indicator--bf73793d-4f3e-4ae6-bcbe-e22958506e15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f715ca-0ac4-4c28-8575-12c7366df068", "sighting_of_ref": "indicator--49519d74-a876-4d92-8399-7b33c0f02a47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aef770-1229-4e4c-929b-dbe078b5e4b6", "sighting_of_ref": "indicator--3fe8c772-f9ce-4bed-9c24-d3ff327a005a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100fccda-4357-426d-9902-52bb0ef23349", "sighting_of_ref": "indicator--c87e1914-fa78-4dc2-b003-ac33223bfe6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0f4366-8b24-4380-bba8-6f8343c6d1c6", "sighting_of_ref": "indicator--73ee2882-e4f3-4ad9-bfce-02b0b4654026", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d365847f-55b5-429a-8597-9834f356999b", "sighting_of_ref": "indicator--d45b8875-3aff-43e9-9a20-f326f960f9f0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41d9953-174b-482c-8b9c-ba8cbda11fe0", "sighting_of_ref": "indicator--d0a9c0b5-a996-40a0-aedf-a3aa1ca5504e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d5f137-a9b6-420a-81d0-0c949f7473d3", "sighting_of_ref": "indicator--00011d4a-13a4-4424-b8d5-3184389fa63a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7a8351-7d3e-40de-b60c-20d972259b3b", "sighting_of_ref": "indicator--e05f00f8-139e-4b0c-b74a-d871a4254f38", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759151ec-4df6-4f42-8f63-13e25fd1b301", "sighting_of_ref": "indicator--f75bbf5e-9592-42d2-84f8-25254b1212e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8fa35e-1146-4870-99af-8889c4048228", "sighting_of_ref": "indicator--7aa1ec51-6063-477d-8234-97a89be192d1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b15239-42be-46c2-bcd8-9be15fd97350", "sighting_of_ref": "indicator--7aa1ec51-6063-477d-8234-97a89be192d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ac415a-acf9-4142-b1dd-85514a1c2937", "sighting_of_ref": "indicator--efb10cae-a6b8-4ae0-87b0-23881468e0d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18695bcb-174a-4c8b-bee0-8067d93499be", "sighting_of_ref": "indicator--1e99642d-9188-4558-99e3-19f1c2044ffd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e2aa97-7d5e-4652-9531-59b8b77d1758", "sighting_of_ref": "indicator--5ae4a608-47a6-4cff-970f-6eba063dc36a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a357a47-1a00-4d3e-b5ea-edab05bdf73a", "sighting_of_ref": "indicator--e5d35ef7-2c5e-44a4-92af-55fa0ca180d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9142a10b-a7ff-40a9-83e3-699a2dc4ec73", "sighting_of_ref": "indicator--e5d35ef7-2c5e-44a4-92af-55fa0ca180d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c191998e-7f2a-4ab5-9dbb-bd60b8717456", "sighting_of_ref": "indicator--25d9c5d7-9e14-469c-8347-3e570afa48e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03bec6e-0640-477d-bcf2-62c4fd5711a9", "sighting_of_ref": "indicator--4abc838e-5a3b-426e-a666-2ff365c3f861", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd14bd76-8dbd-4903-940d-f7165e11420b", "sighting_of_ref": "indicator--4abc838e-5a3b-426e-a666-2ff365c3f861", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2ac2ca-70d1-4675-8162-77c7f0e5ce46", "sighting_of_ref": "indicator--c433aa4f-7d33-406f-ad0d-c200013dabdd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f2e3e5-dd64-445e-802b-44a93ebe3315", "sighting_of_ref": "indicator--3d544234-2386-406c-b12a-136c718157dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2f112b-78b8-4dd8-9a89-69d6d338dd5e", "sighting_of_ref": "indicator--3d544234-2386-406c-b12a-136c718157dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51442ecf-fd75-46f2-9262-834c2c8c7c65", "sighting_of_ref": "indicator--402f75c7-f428-494d-a79e-61d192e1e359", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558a9675-8b11-4287-8620-5b2477370728", "sighting_of_ref": "indicator--d48a8174-dc7a-46d7-b01b-1995bb181d7b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b706fc-f8e3-423f-b3e9-2c1769f1f67d", "sighting_of_ref": "indicator--448d629e-c47b-4654-be50-deeab9b89e69", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af69fdc-8792-4f62-b585-3dfa08cb4ee4", "sighting_of_ref": "indicator--448d629e-c47b-4654-be50-deeab9b89e69", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd3ee12-0ebc-476d-9942-6c18ec0e79e5", "sighting_of_ref": "indicator--e470abb1-791f-4441-81ab-e053ada6ea2e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0fd6c3-2007-4a65-bcac-3889850d94f4", "sighting_of_ref": "indicator--64dc9518-a2da-425c-b52b-91521bd7d3e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d089aa9-6151-42b8-b393-7470a7aeea3f", "sighting_of_ref": "indicator--b98c5b11-bc49-4633-93c3-e61fc2094e03", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4ea985-df30-4ba8-88f5-5e7f8ee29700", "sighting_of_ref": "indicator--b98c5b11-bc49-4633-93c3-e61fc2094e03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25be49d-5869-4b59-a06d-794aaad9657f", "sighting_of_ref": "indicator--4a13ccf2-1d67-40db-b5a1-3658f84c063f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8cc5c7-e07c-4c3c-99f8-6f35f21c6721", "sighting_of_ref": "indicator--200939fa-e059-44c7-8c6f-b26f2d757106", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aaaf91-6d8b-4c63-83c5-4f6c447f6666", "sighting_of_ref": "indicator--cf59c097-6233-49f9-a045-9e9ea5c6e59c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd994dc-ae04-43ee-850d-d8ba66c2918d", "sighting_of_ref": "indicator--54410c3b-3547-482a-b5ef-c60ed9e79a96", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8868e06-ae2b-4b61-8747-6339e79b6fa4", "sighting_of_ref": "indicator--bb3c7b94-cac1-49af-93ec-17f28f52761a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64352226-b1cb-41e1-bfb6-9869affc375f", "sighting_of_ref": "indicator--4779f16d-35b0-415e-b4db-2e73cd1448df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6086660f-f835-478a-8cf8-e74661ec7875", "sighting_of_ref": "indicator--4779f16d-35b0-415e-b4db-2e73cd1448df", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e47a88-3a19-423b-b7a9-5e46ac19247e", "sighting_of_ref": "indicator--7eb17e21-c090-4747-9895-740173969ccc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaecb146-2a04-4277-a224-43be040498b9", "sighting_of_ref": "indicator--441cbd61-43e4-47cc-84d5-2a46eaff5f29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b952eb-65f3-43fa-9268-f583eb561ff6", "sighting_of_ref": "indicator--441cbd61-43e4-47cc-84d5-2a46eaff5f29", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd3eaa8-c198-4ac5-98ab-e35eca4e7226", "sighting_of_ref": "indicator--0bc788a1-774a-4883-b124-541c9097a501", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177c5c0a-0bff-468e-b1ae-a9e56f7683ef", "sighting_of_ref": "indicator--d7cf1a9f-ea0d-48f3-aaeb-2748b4202a7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5b13af-be6a-42a5-ba79-e45d5fedcbd7", "sighting_of_ref": "indicator--d7cf1a9f-ea0d-48f3-aaeb-2748b4202a7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57452e8-1a04-4661-8e5e-070aa95c33af", "sighting_of_ref": "indicator--f38cf8f7-4e30-484b-aae3-c54bfe38b83f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e7cf52-b0c8-4572-a036-7eca93bdd8b9", "sighting_of_ref": "indicator--e2073b38-6772-4168-9aef-11ee6500f25d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a38c8-0ab1-4b32-92ba-f7b3b5ef0d28", "sighting_of_ref": "indicator--e2073b38-6772-4168-9aef-11ee6500f25d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aeff15-d126-4016-9b63-0a8d3e7c444b", "sighting_of_ref": "indicator--890729c9-2a8c-4ea4-a3b8-2ba709502847", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1609334-123c-42af-9305-605a4a1ba651", "sighting_of_ref": "indicator--7211456c-41d5-4dad-a565-41bd541ea620", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a9662d-f8fc-416f-ae18-bcc52fdadf05", "sighting_of_ref": "indicator--2f14426e-d4f2-4269-a850-73df1d69e607", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5f8375-dfa3-4bd5-a810-25266ec0f73b", "sighting_of_ref": "indicator--55752ba9-9f6e-4a87-ab0d-56bfa39cc8af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c98eb-2a21-4f50-b9bc-4815899f8413", "sighting_of_ref": "indicator--55752ba9-9f6e-4a87-ab0d-56bfa39cc8af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5b72c4-526d-4d9a-9056-f71eafd779f5", "sighting_of_ref": "indicator--1e6e91d1-75bd-41a0-a1ab-33789eeb7b92", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed42c2-68b6-4ba8-9bab-8f44761339e9", "sighting_of_ref": "indicator--021dee4e-94a7-4a51-9ac0-ccfbc2e388b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ed67d3-1bb3-4e9d-8232-437efdb20b80", "sighting_of_ref": "indicator--4b60cebc-e875-4c1a-bfe9-37d01bf79a5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42333874-a93e-4a27-8406-bbf74c823ef5", "sighting_of_ref": "indicator--4b60cebc-e875-4c1a-bfe9-37d01bf79a5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b97bb6-947c-4d84-986d-bc32768e7f6f", "sighting_of_ref": "indicator--2ec232f7-9b6b-4dd9-8da8-61ab391baf02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd94e3f-3bfc-440c-86c0-f30698dcf2b5", "sighting_of_ref": "indicator--9c48d6ed-a26d-42b6-aab3-1305edf81f48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0094ee9-01c9-466a-8240-94d3de3e0645", "sighting_of_ref": "indicator--1c186f8e-a53a-448f-b6a5-bf93e1e90b4b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c316bef-376e-4561-8bcc-c7249bf68618", "sighting_of_ref": "indicator--1c186f8e-a53a-448f-b6a5-bf93e1e90b4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f72e4-ff07-4c02-9a00-4de12715f98d", "sighting_of_ref": "indicator--526db939-2bcf-4d32-9efa-172ee468c705", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7042822-c17b-49ec-bcf8-da53b858d7df", "sighting_of_ref": "indicator--681900ec-62e8-408b-9897-8ae3cdcc4e53", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5acbf55-82ae-4a41-b2d1-4a40457c8f03", "sighting_of_ref": "indicator--39508757-b304-4cd2-a50f-b4d9d23b1565", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee45c205-83e1-4a6b-b0f8-0763807c8bd3", "sighting_of_ref": "indicator--39508757-b304-4cd2-a50f-b4d9d23b1565", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287b9353-d810-4cbe-8b27-74cb0bba39e9", "sighting_of_ref": "indicator--3cc1e611-be2c-4e86-aa5c-c60d8d2c296b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3470351d-cbc6-4a01-8a03-8c5300aab229", "sighting_of_ref": "indicator--713a30b4-51aa-4e02-8a3c-57269bc2602b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e3e87f-6007-4d32-9b1c-35d31ad9ade0", "sighting_of_ref": "indicator--713a30b4-51aa-4e02-8a3c-57269bc2602b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a048c45a-9ac7-4073-bcbc-120b2bbfee89", "sighting_of_ref": "indicator--aaace3ac-625f-41a0-a67e-23b55a0cdf31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2169e9-14d7-4789-973b-72f5c46aff59", "sighting_of_ref": "indicator--ffbf6637-08f4-42ec-a71c-491ea76b6e14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb0d154-a09e-41c3-90a4-79b745f62226", "sighting_of_ref": "indicator--56b6b491-088e-443c-910d-5b81d3d34e09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5967a5-7384-4969-87d5-1a3461a4a82c", "sighting_of_ref": "indicator--f2cb8822-6ba4-40dd-bba8-ff201fcd3332", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1174723-aadd-4e27-b0a7-dafc292aefa8", "sighting_of_ref": "indicator--f2cb8822-6ba4-40dd-bba8-ff201fcd3332", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae1a9c7-7d53-40ac-94dc-8283e37f2fdf", "sighting_of_ref": "indicator--c81509a2-98c1-4f47-abbe-3aab1da72266", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9c0893-e4d5-4ef8-8a8f-f912c569b9e6", "sighting_of_ref": "indicator--c81509a2-98c1-4f47-abbe-3aab1da72266", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c9a4c7-3061-4e2a-93ab-fcc3e1b820cc", "sighting_of_ref": "indicator--6bebe421-fb23-4d46-9670-399103dd351f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7570b406-7d4e-4ab5-896f-61b1636d1ab1", "sighting_of_ref": "indicator--3c66bb3c-7b0c-467d-b2ca-22c9fc9e6788", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a624642d-01b8-4f4b-9278-a6062a0639d0", "sighting_of_ref": "indicator--3c66bb3c-7b0c-467d-b2ca-22c9fc9e6788", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8768faca-9803-441f-8238-c26af65ff6fa", "sighting_of_ref": "indicator--50151043-da62-40ce-8651-dbd06d3b6fb8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d751fc38-e3c1-4640-b768-a5daab5ec35f", "sighting_of_ref": "indicator--50151043-da62-40ce-8651-dbd06d3b6fb8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6634208b-cac6-4253-ac27-2b42abed29f0", "sighting_of_ref": "indicator--7f0bdc57-8af5-4ef0-8e23-eabbce3d5590", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ea82b7-ecd3-49b5-97c3-49d37f3bb09b", "sighting_of_ref": "indicator--03bae830-1f56-4e97-901f-e77d01d1afff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a41aea-4cdd-482b-86f8-4429ee3c0192", "sighting_of_ref": "indicator--03bae830-1f56-4e97-901f-e77d01d1afff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a413d1-c102-489d-99cb-d61efc6e9c7b", "sighting_of_ref": "indicator--74e44409-8488-4ccf-85e6-7380dde9fbf1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7921c82-33f7-4acb-86a7-a5871fcaacae", "sighting_of_ref": "indicator--fb35cc44-0cb3-471b-9f71-1dbde34be4ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e17f9c5-d8e9-4896-a465-5083cbd44c27", "sighting_of_ref": "indicator--fb35cc44-0cb3-471b-9f71-1dbde34be4ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e0dc62-e4fb-4b92-bca0-8f8df63c6816", "sighting_of_ref": "indicator--b080f333-cfd4-430d-8eeb-6d3542c6ae43", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4821417-7816-41e8-a0eb-54c2062a0f56", "sighting_of_ref": "indicator--d94a15e4-1f16-47ec-a0b1-8e1e6e45afc0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaa0ed5-954f-42e4-8c38-677f4662cf59", "sighting_of_ref": "indicator--65560b5f-0bad-42a6-ae88-2344813cedd3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775f8807-3767-488b-a90a-4588f362d432", "sighting_of_ref": "indicator--65560b5f-0bad-42a6-ae88-2344813cedd3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccc0dc0-51f4-4b9a-bb91-231ead28d29d", "sighting_of_ref": "indicator--7636b26d-f0ae-48ed-8886-b2cb45f9b45d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff9c474-1c7f-443c-998d-534fe04f9d25", "sighting_of_ref": "indicator--454ce06b-dfc6-404c-ad17-ed5efc4bdea3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddff9087-c623-454b-9aaf-f0655d5c0951", "sighting_of_ref": "indicator--e6c9613f-7012-4e68-8581-979b309c5d58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a73d5f7-aa4a-45f5-a773-8ebe6bd3924a", "sighting_of_ref": "indicator--08065bb8-c4ce-4bd5-bf8d-5e9fc2c35b5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9984f57-ab80-4ca1-a93b-2b4bf8ea1487", "sighting_of_ref": "indicator--e64e74e9-ca9f-4f7a-8d53-e283743c3499", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2720e7-05e8-4865-bff5-29cdf5c79130", "sighting_of_ref": "indicator--2e80a47b-f1f9-4a6c-a322-fdbd7981e06e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b8b972-4f29-4ee7-80b8-8dbf40fd2b47", "sighting_of_ref": "indicator--1f45c6f7-bc61-4477-aff1-f5f82ef312fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e666c1-3be1-462e-bb05-7160b531c26c", "sighting_of_ref": "indicator--fd2a2b6f-f6c6-46e3-8374-3db77a0792d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca6a1e0-e482-4012-adfe-a9d1eb22f2f1", "sighting_of_ref": "indicator--21de7fc3-92bc-4fe0-92b9-f22f6f4ab32b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2895413-a11b-4cae-a1c0-9346f93999e8", "sighting_of_ref": "indicator--88efc645-2b58-4c76-b6d2-720ed3aec1ad", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d96f52e-f1b2-40c1-b168-7ad579789c4f", "sighting_of_ref": "indicator--3e4b7d8f-919e-44ce-883b-0e40de349c45", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0333265-a729-4f6a-8358-c9f7278998da", "sighting_of_ref": "indicator--d123f0ee-23e3-4c4f-a59a-ae3432252067", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad62a9-e4df-484e-be78-38725d2060f7", "sighting_of_ref": "indicator--11ad1923-502d-4859-b7b9-d23928b6a3e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0411258-2462-458c-a424-f13580ac58ff", "sighting_of_ref": "indicator--11ad1923-502d-4859-b7b9-d23928b6a3e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990489bc-27c7-47bf-934e-aaefb8b8c23f", "sighting_of_ref": "indicator--e35de945-2c60-4931-a6d5-517c67133814", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23c01ca-80d6-452c-8d0b-562974f0ae73", "sighting_of_ref": "indicator--be94999b-8f30-4185-9f4a-109563bbc9b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd3c157-95ca-44d7-afdb-9ad80cd12400", "sighting_of_ref": "indicator--be94999b-8f30-4185-9f4a-109563bbc9b7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ec1fb3-1791-465f-b5e7-f2970cc497fb", "sighting_of_ref": "indicator--313ccb6e-0387-4ce0-87d1-8d6f9d4df0a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7d2f14-a490-44a0-97b2-ba25827566c2", "sighting_of_ref": "indicator--71e4062a-ab4b-4527-9133-523081f84f83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285a68ca-4433-4411-a34e-812856e5a03f", "sighting_of_ref": "indicator--86afe9ad-4417-49bd-b2c9-effb20469061", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcc6ffd-07aa-49ab-98b9-b2ee3d1af635", "sighting_of_ref": "indicator--ffc0e428-020d-4078-907a-09f3a3254f16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81a2cff-cbd8-46f8-86df-19c51c76abf9", "sighting_of_ref": "indicator--edcee7d2-00c7-4dbf-9143-17f92bc34d71", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9adf23-2b40-4fcc-89b8-349ca3e65171", "sighting_of_ref": "indicator--edcee7d2-00c7-4dbf-9143-17f92bc34d71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f49194-35d0-4de4-a3ce-9d8af6e070bd", "sighting_of_ref": "indicator--a4359910-f5af-4dba-81f0-9f2634da37eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fd9af7-fbdd-4ae6-989d-8e45222e00ef", "sighting_of_ref": "indicator--a4359910-f5af-4dba-81f0-9f2634da37eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccb4bfb-e0e5-4ccf-b928-2b9ae1f487cd", "sighting_of_ref": "indicator--f167bf8a-32cc-4c8f-b344-c0a7bc715120", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d1a139-3cd2-43c6-b59c-e79dbc15573b", "sighting_of_ref": "indicator--4bb4a4ae-b6b4-4ad5-84a0-fa2b83fe2a58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4f99a6-e5d6-4032-8a49-c493668201f1", "sighting_of_ref": "indicator--4bb4a4ae-b6b4-4ad5-84a0-fa2b83fe2a58", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43921969-b30b-4b76-b7fe-901aa692d4fe", "sighting_of_ref": "indicator--53898364-c737-4581-bd52-87645989966c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9017b358-4f89-4c1b-b9b8-30de16616154", "sighting_of_ref": "indicator--9c6afca5-5c6a-49bf-b77a-973a1114b3e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f028cf-e2fc-4e99-8435-930052466c80", "sighting_of_ref": "indicator--816faf55-412b-48ee-8d02-83824284a673", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9e348-a71c-414b-a4d9-260746f76074", "sighting_of_ref": "indicator--9a1dc9db-43e4-431c-b259-217f03fcf412", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838219ac-5b0c-4e15-8f5c-65d35b3763a4", "sighting_of_ref": "indicator--4b004fb9-aea0-4911-b945-71c2bd69af68", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28c48a7-317c-4d60-98bc-68a482a0c8bd", "sighting_of_ref": "indicator--71d4146d-0ade-4056-9ca7-69ae58a443da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2125b3f6-103f-461b-b0dd-1fe0e2753d7b", "sighting_of_ref": "indicator--56134c4e-4bc3-4c48-854a-72f8451cdf04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58ae481-2ebb-427f-a65d-d471d0986515", "sighting_of_ref": "indicator--f7d816cc-b15f-49d3-b6d4-202e896cd33d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82c3f52-7879-4ecc-9fff-b44e0c497eb4", "sighting_of_ref": "indicator--c762d982-25df-46c2-8c4e-1c625392fa25", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cc1254-4f78-4206-961d-e9d1aa916950", "sighting_of_ref": "indicator--c762d982-25df-46c2-8c4e-1c625392fa25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3799222-60ab-4d6d-baad-fcb79205f85e", "sighting_of_ref": "indicator--c6eb189e-a55b-45d4-b2d0-6a8af33a19bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48177249-4fdb-4b2e-beae-567eda3ff973", "sighting_of_ref": "indicator--a073fe32-7e2d-4267-9c9b-2443b0795d89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3b1dea-55f2-4b00-83be-3a45643819f2", "sighting_of_ref": "indicator--a073fe32-7e2d-4267-9c9b-2443b0795d89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945c6bcd-17b8-4098-ad68-045981a8531b", "sighting_of_ref": "indicator--fadb884f-ce9e-458a-8977-15d5894f3716", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158403b4-bfbd-46f1-923f-5187c500b2d0", "sighting_of_ref": "indicator--e3523143-fdb7-4f47-8fa8-4498231c585c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe1bae9-d139-4a82-9f71-905a89a74da9", "sighting_of_ref": "indicator--0da1c4a1-de16-46ba-879e-c8fb860cfe36", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5baf7b4-c17a-42a3-8a28-d3a1442b8d90", "sighting_of_ref": "indicator--b700bbcf-1668-49a1-a351-f85362806924", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b6fbf9-575e-4ec2-b8dc-5db23e78034d", "sighting_of_ref": "indicator--f4d8b3e3-570c-40e8-be2a-026530c7e6bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83211fd-6af6-4fb6-a095-b83e1d942819", "sighting_of_ref": "indicator--2795d144-c5ed-43ae-bdce-dd102fa744e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5da4f2-2f78-42db-8dfb-ab8dc710d79c", "sighting_of_ref": "indicator--408f852a-482e-43d3-95f9-b73fa9153958", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc4d175-1705-4868-8ebd-1d2e22dfaaf8", "sighting_of_ref": "indicator--c89253d5-e770-4bdb-a444-5a116bd4018a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50b5f12-10cb-41b6-b96c-1a10275ab65c", "sighting_of_ref": "indicator--79f48aed-8bee-407a-aa7c-b587bd53c1da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee43162-bb6f-4843-b3b5-72e7ab344ce5", "sighting_of_ref": "indicator--21d34deb-50ff-4bf6-ac26-65a26f81efa9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021549a5-4138-4921-83a4-98109015b771", "sighting_of_ref": "indicator--2871b771-efaf-4d97-893b-e7fd4d2a4b9b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c85216-d7d4-4f4a-997b-b34726b2cf0f", "sighting_of_ref": "indicator--28468be9-e1f3-441e-b360-d04bb4d7613a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51935542-5e57-4e44-9532-d62dd35388c1", "sighting_of_ref": "indicator--3c76098b-bdae-45f7-b92a-3d0ee4d44ec7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d6bf3-b117-43ec-ab98-c62c91fae804", "sighting_of_ref": "indicator--2effe42a-fb61-4f26-a500-5b6154be6d76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59aadeb-1662-44f0-ab31-dca11c9206c3", "sighting_of_ref": "indicator--3e2008dd-500b-4c9c-bd5d-9b31208f5342", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4913c4d9-e13c-4f04-ba2c-f89b900f3c61", "sighting_of_ref": "indicator--3e2008dd-500b-4c9c-bd5d-9b31208f5342", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029f0428-23d9-4f5e-8f75-3e4ccbaf198f", "sighting_of_ref": "indicator--defe1548-e1fe-45d5-bb61-842219489deb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e2495a-5d50-4609-81ea-e87e3e2958fe", "sighting_of_ref": "indicator--b40b26b4-d05f-4b01-933e-11eb444edb01", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eac7678-a61c-4e1f-8033-d55a6fd73054", "sighting_of_ref": "indicator--ae267f2c-5556-49f0-92be-131e3a96f51c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af474839-ad3e-4c4e-ad32-df5e56243130", "sighting_of_ref": "indicator--492830d5-1d23-4521-bbce-4084eb9b7891", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8497395-0969-4071-9f00-9b18cd6f1cf7", "sighting_of_ref": "indicator--492830d5-1d23-4521-bbce-4084eb9b7891", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fd9ef3-b403-40ad-895f-38d9a8f097b3", "sighting_of_ref": "indicator--d5ee3371-2ffe-482a-8ce6-54e54a841605", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e33d8c-325f-4c30-93ad-86e97f28ea5c", "sighting_of_ref": "indicator--30c3ffeb-40a1-411a-a54b-4db88050a5f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767010b6-5718-49ce-b615-872598115c5e", "sighting_of_ref": "indicator--cf52c7d0-9db2-4574-82ba-4b79f59d3039", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972722b6-1dc4-48df-9675-88287de88a01", "sighting_of_ref": "indicator--cf52c7d0-9db2-4574-82ba-4b79f59d3039", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c10e8b-08f4-417c-af5e-d74ade9461b6", "sighting_of_ref": "indicator--e6dc5f74-e0c1-45f5-88ee-53300f4a09e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290f49b5-6bce-4fe3-80db-2b9f85b85386", "sighting_of_ref": "indicator--2e1dcc07-616f-4409-af8c-7d15b422c665", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b647ab70-42a2-41a2-9049-d3cfbdc5b6b3", "sighting_of_ref": "indicator--91a0ca88-2a93-4e35-a13c-1ad3ca48bd83", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c5862-7e58-4501-8954-4c4dfdda3a22", "sighting_of_ref": "indicator--399ff2ca-8730-4383-988c-ca8024cc3b9b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46fdb8e-9329-429a-9ee5-4a4d263d3ad4", "sighting_of_ref": "indicator--41484a04-2831-4b41-b4f2-4cb24eac3e7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ccffd0-9119-4fcc-acc3-4331bb9b7d50", "sighting_of_ref": "indicator--ac214799-15c6-46f2-85a9-36ffe39aaad6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cdfc05-589e-411b-9502-c9309e63729f", "sighting_of_ref": "indicator--5e869856-d3f4-4086-8bc2-6149fbcd64bb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe17cf5-48f5-439c-8ebe-73c421e30245", "sighting_of_ref": "indicator--5e869856-d3f4-4086-8bc2-6149fbcd64bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb47c90-e6b1-4c4c-8b42-566e54f03679", "sighting_of_ref": "indicator--71acf100-1002-4b4c-84fc-e8ebb060a260", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939abbc0-3ff8-45ca-9d46-4e69bbd3d7d4", "sighting_of_ref": "indicator--71acf100-1002-4b4c-84fc-e8ebb060a260", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94167bd6-198a-4211-ab11-2d384ece97b7", "sighting_of_ref": "indicator--5f57836c-ecc7-426d-bd50-c38cddeec683", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b065b87-dba7-474b-a1ac-e2efd2b3bcaf", "sighting_of_ref": "indicator--9d12b2e4-5773-46ce-90ed-c7aca0d0bcb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82da5fd-de79-432c-bdb0-40d56232cfbf", "sighting_of_ref": "indicator--9d12b2e4-5773-46ce-90ed-c7aca0d0bcb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b908fb5f-f982-4355-b690-a64126274b7f", "sighting_of_ref": "indicator--d82573f7-362f-48cc-a0c9-2c3e51867650", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407f53e8-23a5-4852-8c44-481e0a2f44e1", "sighting_of_ref": "indicator--9517c642-85c1-4ff1-a195-d5caa37b032f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab88831-0133-4b22-b038-43f5500bd39e", "sighting_of_ref": "indicator--9517c642-85c1-4ff1-a195-d5caa37b032f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c41d39-4759-47e4-b100-00dd1271e1a3", "sighting_of_ref": "indicator--cc8c650c-74ca-4ad5-858b-0cd254e6344b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e1ac3e-1c43-41fc-b155-67e6789517c8", "sighting_of_ref": "indicator--d3ec4a1a-e127-42e0-bf0d-baf4b0d7870e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35db282f-3fce-4411-9f56-04629f04c0e6", "sighting_of_ref": "indicator--83eca74a-0daf-403a-984b-072bac3a497c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46167121-61de-49b0-862b-0d2b335bc9ed", "sighting_of_ref": "indicator--83eca74a-0daf-403a-984b-072bac3a497c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da799b0f-96c9-45de-9067-4510bc968fd2", "sighting_of_ref": "indicator--ad263a32-6023-4026-bedd-723652ad7bf2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617e6c28-540a-4f2f-89dd-eef5e23a3a6c", "sighting_of_ref": "indicator--03575c05-8c50-40f8-98c7-c9a8f4394f25", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4a81e-6c66-4ff7-86c6-b57c4bde32c0", "sighting_of_ref": "indicator--95ca6079-9b46-4bb7-93b3-64f4d75534d5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408f6638-d307-49b4-be5e-6857e3ab962a", "sighting_of_ref": "indicator--2816d9f5-9015-4f14-9c9b-4fd4533371eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb254fc0-7e33-4139-bde2-8cc287c4736d", "sighting_of_ref": "indicator--2816d9f5-9015-4f14-9c9b-4fd4533371eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7f64cf-9a92-416e-9589-03c7c958c384", "sighting_of_ref": "indicator--37b6e807-c785-47c1-9f09-c4a6fb0d4064", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf39f2a-938a-4a1f-b965-f356887e9598", "sighting_of_ref": "indicator--37b6e807-c785-47c1-9f09-c4a6fb0d4064", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c6b677-145d-4a40-9cc5-0dfe1142efd5", "sighting_of_ref": "indicator--ab18c94e-60ee-4e5e-9e3c-9da6edccc9e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9345a21b-58fd-4a95-86d9-67bc035b27b1", "sighting_of_ref": "indicator--ab18c94e-60ee-4e5e-9e3c-9da6edccc9e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec26bb2-cfef-4383-b233-50b44c542dc7", "sighting_of_ref": "indicator--d576d6cd-f343-47e4-b92d-72f305e58092", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de3581-8bed-43c2-9011-6b506fcdf89d", "sighting_of_ref": "indicator--d576d6cd-f343-47e4-b92d-72f305e58092", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e367cd-bc3c-4ed4-98dd-a154803d5997", "sighting_of_ref": "indicator--53456f19-73f8-467a-9156-d5303e36a234", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83c64bb-1210-4166-bd6a-c97f0254fa3e", "sighting_of_ref": "indicator--fa290e58-9ccd-4208-9772-03ccf69e7665", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e91afe-98b0-4ea5-b421-905e8ebe1920", "sighting_of_ref": "indicator--da909e0c-6eab-4d64-9c7e-01ada41435f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d865eef-7f78-46e6-a75a-edce38d38945", "sighting_of_ref": "indicator--cb3fdcd0-7c61-49ad-bba0-e9a79117d59a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ceee62-86ea-4a60-8e02-f0d9e53e1276", "sighting_of_ref": "indicator--5c03a9f7-8430-4808-8b7a-e66352c5aeaa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c156ed3-e0b9-4cc1-aa09-246ba97cf587", "sighting_of_ref": "indicator--d5a6889d-7c5a-425e-8185-463c5a780e47", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0c8aa0-2180-41dc-9a5f-b42f85aa1d72", "sighting_of_ref": "indicator--d5a6889d-7c5a-425e-8185-463c5a780e47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf81f2b-ab7a-47da-8b06-18d6f920605a", "sighting_of_ref": "indicator--9517feea-13a5-4208-879b-26ac0f899151", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269d7f20-dea3-4d2e-8b50-211ca7f41fb1", "sighting_of_ref": "indicator--9517feea-13a5-4208-879b-26ac0f899151", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37a1a1-593c-4991-b5fc-7b368a240d25", "sighting_of_ref": "indicator--5518dac1-0d71-446e-8a46-d91fe7889eaa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7430615-069e-4949-8113-c46568dcfecc", "sighting_of_ref": "indicator--5518dac1-0d71-446e-8a46-d91fe7889eaa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eead03a-4b67-4ac8-ab5e-aa23e2810043", "sighting_of_ref": "indicator--8a58b944-1cd6-4680-82a5-627f2f37a951", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872b368-be8a-4bd5-9e3b-a7c443387e0f", "sighting_of_ref": "indicator--8a58b944-1cd6-4680-82a5-627f2f37a951", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d394d07b-5d69-420a-92cb-ee5ef859c483", "sighting_of_ref": "indicator--895d8011-b1b5-4735-8b6b-3231544ed130", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e1a59-3d2a-4a7f-9a54-7876b78fa558", "sighting_of_ref": "indicator--895d8011-b1b5-4735-8b6b-3231544ed130", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdab0614-3b4e-46b9-8bcd-ce7e0e87e5fd", "sighting_of_ref": "indicator--36ba25c6-e14e-482a-bef5-58de1d4ac101", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da609b17-6a67-4951-b960-b00cce7394aa", "sighting_of_ref": "indicator--36ba25c6-e14e-482a-bef5-58de1d4ac101", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54077fd0-f622-4be6-aa64-fd5b8e20f42f", "sighting_of_ref": "indicator--f866c7fd-0bf9-4508-8dfe-bebfecd8f34a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabb7b4b-860e-4afc-836a-ec31c9a3d762", "sighting_of_ref": "indicator--f866c7fd-0bf9-4508-8dfe-bebfecd8f34a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6f6d9d-fd76-4357-8d09-aab21d0de0ec", "sighting_of_ref": "indicator--8cd2994c-6b81-4f3d-aa86-900041538524", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8106d92-8839-4d53-9d4d-26180208b919", "sighting_of_ref": "indicator--41259aa1-fca6-4bb0-8ba0-b2b6a09eb00c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9aa4c6-e8f9-4c48-acaf-f99dc48fca30", "sighting_of_ref": "indicator--6bea0cb1-8308-41af-81f0-a057f0be1421", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6033e8bb-ffb9-4856-9ef7-a1a980df38ab", "sighting_of_ref": "indicator--6bea0cb1-8308-41af-81f0-a057f0be1421", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3edb0c1-f530-464d-9c64-e06148ab4dfe", "sighting_of_ref": "indicator--48f99ce1-13d1-4dc6-86fe-dc6b162f9369", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d72cdaa-172e-4c7b-b58d-77f38060181e", "sighting_of_ref": "indicator--48f99ce1-13d1-4dc6-86fe-dc6b162f9369", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2547fc5-67d4-47d1-8669-36447ff30fa2", "sighting_of_ref": "indicator--31ddbb87-a2a1-4cc7-9aea-275d4ebb3931", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d63a05-b160-4863-8670-dbafba5f4c45", "sighting_of_ref": "indicator--daeb727d-29dd-451a-947c-1184a5e467b6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1db421-3063-4752-9f25-2c1f013dc4eb", "sighting_of_ref": "indicator--776f4136-99f9-41f9-86a2-36afe52d99c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cec4607-305b-4ae0-9fa1-fd842c862686", "sighting_of_ref": "indicator--776f4136-99f9-41f9-86a2-36afe52d99c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7dedbb-4d29-4bdc-a9c4-d8c50a5b8e9b", "sighting_of_ref": "indicator--c9680b30-922a-4958-8380-dc0d3a8ec297", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56192a8b-3551-4be9-b5cc-99e657273e4f", "sighting_of_ref": "indicator--971bc143-6c4b-4a42-a924-9ca312dd592a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256eb8eb-010e-4e6b-98ea-8b81e8b0357b", "sighting_of_ref": "indicator--dee5dc97-0fdf-4b6e-9a6e-5e8a8011fc54", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1919be88-6a72-470c-ba34-f8b9cd8990d4", "sighting_of_ref": "indicator--dee5dc97-0fdf-4b6e-9a6e-5e8a8011fc54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15544315-0e08-47ca-b0bc-69e2d2f71d3a", "sighting_of_ref": "indicator--58399601-e89d-4808-b715-6711fcb57e03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc85e5ef-f01a-4565-b9c0-0f71b0ef2b82", "sighting_of_ref": "indicator--200dac61-ad7d-463a-a16c-c3f5de6cfbe6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b49863-20ab-4b77-a20b-dd4cda534115", "sighting_of_ref": "indicator--a99ccc09-1dfb-4f93-9792-94791cf97f0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146e7ff9-fb02-4be7-b735-6e76cec5dfda", "sighting_of_ref": "indicator--6b24d600-290e-4c0c-88fc-b80de9dc80df", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c430307-9832-4b33-88b5-398337631eb3", "sighting_of_ref": "indicator--5c9fd2dd-cf3f-4b96-86fb-aa0538147edb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd47c41-fc87-49b5-ab9f-067ae894d7c5", "sighting_of_ref": "indicator--6cd139c3-88f8-4b22-9caa-ee4db3108b9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de6f6f6-dddb-4aee-a9dc-62502eb4baf7", "sighting_of_ref": "indicator--f7b1f51e-5ff6-4fb8-9b5c-9d196f80558a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3a6288-4625-4e37-aa30-dd5fd27abca7", "sighting_of_ref": "indicator--99993f3b-5be1-48be-9357-f677eea6fa7e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b89a4d-f4b6-4181-911a-c24f1f93c402", "sighting_of_ref": "indicator--02300d1d-75b7-47a1-81ae-02d9bdf4be00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79668df5-55a5-4340-9719-ad7d60e234a3", "sighting_of_ref": "indicator--02300d1d-75b7-47a1-81ae-02d9bdf4be00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c2e18b-7393-4ca0-8eb0-f5b5058b9a01", "sighting_of_ref": "indicator--1f300167-e43b-46cc-81ce-eb279b9ffacc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2101de-f612-4331-bcf7-b7cff0323715", "sighting_of_ref": "indicator--52a22366-a292-4793-8f6d-8aab329e7952", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e448515-3b6f-45ab-a55b-fc85286a0903", "sighting_of_ref": "indicator--d2e3b356-7385-4946-bfb8-33c74b1e67c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354b3df4-98f3-49b3-9dc1-1e0f937895cc", "sighting_of_ref": "indicator--d2e3b356-7385-4946-bfb8-33c74b1e67c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3f1a2e-ea43-4f2b-bd69-fe3bf4985ca7", "sighting_of_ref": "indicator--f75ebc16-6d70-49ff-a315-a8fb6cd2d3d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59764d9-fca3-42bb-b59d-5364ef357fcb", "sighting_of_ref": "indicator--9d3c743e-0146-4691-b3f3-012fa2b4c949", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68036178-2e80-4aa5-b01f-2b46e6a3cc15", "sighting_of_ref": "indicator--ae4f1dc8-9edc-43be-b3a0-8e1bfce3a73f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0430ca6b-2d4f-401e-a8f5-9ed51643633d", "sighting_of_ref": "indicator--ae4f1dc8-9edc-43be-b3a0-8e1bfce3a73f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6aea58-d143-43fe-82fb-146ffe76754f", "sighting_of_ref": "indicator--c2428024-84e2-478e-8e73-7b2a06bd5755", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f058e2-2442-4db0-b70f-cc9a3acf42d4", "sighting_of_ref": "indicator--c2428024-84e2-478e-8e73-7b2a06bd5755", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8171cf-a119-4e60-9c4a-d97514d916cf", "sighting_of_ref": "indicator--9287b500-dabb-46ba-ac48-eae8365c593a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d558d373-0f54-4c0e-9f8c-7576b3e6fcb3", "sighting_of_ref": "indicator--9287b500-dabb-46ba-ac48-eae8365c593a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3968d907-045c-47cc-9025-b5ef5d785c25", "sighting_of_ref": "indicator--643ef1d3-1347-486c-9337-9bdd31c480af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c12340a-8809-48c8-a978-d9b74a30b47f", "sighting_of_ref": "indicator--643ef1d3-1347-486c-9337-9bdd31c480af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8b523e-2378-4c24-8e1c-d95bb5dc6dea", "sighting_of_ref": "indicator--c51bb24c-ff3d-4475-8e80-3091bf1bba53", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20ac31b-c9b3-43ed-a350-d342ed7b510e", "sighting_of_ref": "indicator--c51bb24c-ff3d-4475-8e80-3091bf1bba53", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cd796b-78c9-42f0-8a81-21b8998337b5", "sighting_of_ref": "indicator--ea03eee9-6e5e-4edb-90c1-8c71694f092d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17b85b0-16cc-432b-aa3e-7e2416ac2da7", "sighting_of_ref": "indicator--ea03eee9-6e5e-4edb-90c1-8c71694f092d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9d167d-8e96-49a7-aec6-2bcb6df5cb9b", "sighting_of_ref": "indicator--d9cf9bca-719e-43d4-a5c4-5f500f1981ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b088a87-ff6b-4839-bf6d-add0b7be2899", "sighting_of_ref": "indicator--d9cf9bca-719e-43d4-a5c4-5f500f1981ca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8905127-a57e-41a8-af14-653e68781f4d", "sighting_of_ref": "indicator--8819867f-0cd3-40eb-8a1e-faf306780995", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bacb9f0-a2e9-4d51-ad25-ee6eff46e723", "sighting_of_ref": "indicator--8819867f-0cd3-40eb-8a1e-faf306780995", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aca1949-f1d0-4bda-9dfa-f0e17574d5e4", "sighting_of_ref": "indicator--67020de6-2441-4209-8a9d-871f56c5075d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28247f5d-8458-4b43-a43c-d6c194e91aac", "sighting_of_ref": "indicator--67020de6-2441-4209-8a9d-871f56c5075d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e821782-6f24-446d-ac87-d02136be97c5", "sighting_of_ref": "indicator--6bd4629e-c33d-4c9b-84be-b9c2a608cce9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639e4218-9229-4d71-8cf0-8b39548e9065", "sighting_of_ref": "indicator--ac9aa68c-02b9-4ba1-aadc-9e9460fce642", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931ad214-2673-48db-94f7-e1019fec74dc", "sighting_of_ref": "indicator--06d01213-702a-4e4b-8cc5-fcfdbbcbe3a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d802c16-efeb-464e-a8e4-251a5da1de8c", "sighting_of_ref": "indicator--717464db-0e05-4873-934f-251baf531109", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560f67ef-c2a5-4b49-a1c7-58d5436bc928", "sighting_of_ref": "indicator--0f2eead4-1a27-4f0f-b58e-7f83cd6f3a1f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf80ade7-9578-42bc-b5c0-3d33304d12ab", "sighting_of_ref": "indicator--626e6ab6-f794-467b-89b1-a93edccc4c8c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbce827-5a64-4ad4-b454-72f6cc88a0c7", "sighting_of_ref": "indicator--91e36b41-b77d-41bb-b6c5-cd94d0c8b670", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24696a21-0f25-427b-b045-0b3c6c2c5dc5", "sighting_of_ref": "indicator--91e36b41-b77d-41bb-b6c5-cd94d0c8b670", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a713808-df42-44e7-a040-197e11b5672c", "sighting_of_ref": "indicator--ab51f6dc-1ddb-44e2-9499-cc9e20d4ec02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c690d10-2b94-442f-b64a-c3735203e5c5", "sighting_of_ref": "indicator--ab51f6dc-1ddb-44e2-9499-cc9e20d4ec02", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2098906f-ecca-4646-9dc6-027af8eb453a", "sighting_of_ref": "indicator--0bacd1b2-9393-43e0-b56d-c04af139b999", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a50d6b-90b9-4c3c-b27e-4cbe4e255d0a", "sighting_of_ref": "indicator--0bacd1b2-9393-43e0-b56d-c04af139b999", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc299fa6-eac8-4223-951e-f7d9f619f3e8", "sighting_of_ref": "indicator--21464b7c-1f47-4abf-9365-21462c687f13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa38253-fb46-4f23-992f-3ba70a8e81c7", "sighting_of_ref": "indicator--21464b7c-1f47-4abf-9365-21462c687f13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e141944-bb90-4b67-9278-96bbfb64347f", "sighting_of_ref": "indicator--b5d3a52c-1f28-41bf-ab63-895a25b04cd7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba7bc5e-1bc3-498c-89c7-bcf8d26aac95", "sighting_of_ref": "indicator--b5d3a52c-1f28-41bf-ab63-895a25b04cd7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dde5eb7-5682-4929-9009-f52ae69a811f", "sighting_of_ref": "indicator--373a7640-87a1-4f4e-9e3d-7d15466393db", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2c8847-31e8-437d-8223-f7d1d65bee6c", "sighting_of_ref": "indicator--373a7640-87a1-4f4e-9e3d-7d15466393db", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160e95cf-d7d9-4858-9ad3-35ab9791984d", "sighting_of_ref": "indicator--3edc70b6-0048-455b-91f4-733c66f72822", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a95dc1-89ac-4ccb-9aab-f6b73103e479", "sighting_of_ref": "indicator--3edc70b6-0048-455b-91f4-733c66f72822", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de81e31f-2b0e-40c0-b798-4dc17ec90cbb", "sighting_of_ref": "indicator--f5348571-2b31-48e6-9a3e-ce69dedf5b9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1d82de-10e1-41a3-a5de-8486d00160fe", "sighting_of_ref": "indicator--fd32042c-a6be-4ba8-aeb2-88aa736191fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67116d57-e88b-44bd-b1f0-882df0215652", "sighting_of_ref": "indicator--fd32042c-a6be-4ba8-aeb2-88aa736191fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8978331-8c3a-4e80-9994-04585b93b850", "sighting_of_ref": "indicator--4b100e66-dad7-4210-b635-0f28c6fd9fcc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e35294a-30dd-418e-b85d-847033bad6e7", "sighting_of_ref": "indicator--4b100e66-dad7-4210-b635-0f28c6fd9fcc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0bfdcd-ba6b-432c-a96a-aab62504140c", "sighting_of_ref": "indicator--09eec30b-a615-42ac-b646-24e726691df8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141c45b2-9d72-4633-b6fb-c5715a94b048", "sighting_of_ref": "indicator--ab1407fa-3a4f-4a52-9199-6e64084a3c59", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cdfb63-9d24-4750-9508-2155e61e5eef", "sighting_of_ref": "indicator--ab1407fa-3a4f-4a52-9199-6e64084a3c59", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ba4643-809a-4674-a4ed-8fce389afa60", "sighting_of_ref": "indicator--b3a34f4d-2da6-491a-84df-6f292194860b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f505c496-572e-4374-9762-17c986fbec87", "sighting_of_ref": "indicator--b3a34f4d-2da6-491a-84df-6f292194860b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7a6ce4-4cb3-42ce-a2e1-e01ca4314411", "sighting_of_ref": "indicator--1981b2dd-2350-486c-8848-924e98a3814a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45e5d75-f822-4595-8dd1-2f65094768e0", "sighting_of_ref": "indicator--1981b2dd-2350-486c-8848-924e98a3814a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc74c11-cfa9-4236-bf71-cc3efa67df5b", "sighting_of_ref": "indicator--123084c8-5d49-447e-939b-d84e80281a5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a92e3b-4f00-4f8a-9075-27452777d262", "sighting_of_ref": "indicator--1e0f90f0-bf7c-4d1e-b1de-99c46bf01dd7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fb6572-7c43-4537-b961-fbee88685437", "sighting_of_ref": "indicator--89804674-0734-4308-84a1-c1760f36e894", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94387c74-de7c-423b-b27c-9929c3b5c286", "sighting_of_ref": "indicator--5d768eae-0957-43ca-896c-c999629a7904", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64577ba3-86b5-49af-a97f-96d3822932bf", "sighting_of_ref": "indicator--058a07b7-2c68-4c35-8950-09e7715dc1dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe79fb-dea1-4b42-b6a4-6d0d41e61223", "sighting_of_ref": "indicator--ece18687-51d1-4cb4-b6d7-474b1cbb9182", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f0d58d-e9be-4e0f-b9ca-8b25d07e4722", "sighting_of_ref": "indicator--9458292c-4b63-4b37-9ffa-7375f8e2256e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6903400c-e41b-4368-9587-88d3376736bd", "sighting_of_ref": "indicator--a09b4e01-7ba2-49cb-91f8-67a0aa783e02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c370d425-299b-41b1-bbb1-fa38c31f1f1e", "sighting_of_ref": "indicator--25f1a844-df7c-4b32-a49e-108835ee89a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351e317c-68b5-4091-8e73-ebed3bc92e92", "sighting_of_ref": "indicator--04767174-f20a-475a-981d-8fcd5a793a8d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c80677a-ade7-4b9c-ae5d-8e7658a5dc25", "sighting_of_ref": "indicator--04767174-f20a-475a-981d-8fcd5a793a8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba312d63-bcfc-42bf-a90a-e013b5b24b78", "sighting_of_ref": "indicator--07087522-a904-4df8-8269-c76d9849b6f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36762f88-5a7f-42c7-8c04-6b8c00d8e390", "sighting_of_ref": "indicator--cd242ec7-1c74-4e1e-b43c-f842d5582ac1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ba953c-d9d7-45d1-9924-7f945cd7a56b", "sighting_of_ref": "indicator--99ac0f6f-958f-48f3-b854-5edde14c33e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b7e694-6664-422e-a896-97da87d872cc", "sighting_of_ref": "indicator--dccb5ce6-251e-4827-9213-985f823e2e34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9acd26-b8f6-4488-aa7b-2674949dcc54", "sighting_of_ref": "indicator--dccb5ce6-251e-4827-9213-985f823e2e34", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15832b4e-e296-42ab-9e84-1c4690b843ba", "sighting_of_ref": "indicator--4df3172e-b583-40b3-ae4a-81570b11b32f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe816c6d-641b-42f6-a421-3ca2e840c0ce", "sighting_of_ref": "indicator--f4f12eab-f731-48dd-a0aa-0a7e7b6461ba", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67e7870-dcd2-4dba-a6d7-767ad2a7fb50", "sighting_of_ref": "indicator--f4f12eab-f731-48dd-a0aa-0a7e7b6461ba", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee02171b-6170-423e-b36e-1cedda5f555c", "sighting_of_ref": "indicator--22305550-e49b-4864-b230-988dabaaf7e5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6990120-f0b8-4ffb-8837-9a2b4a4be7ff", "sighting_of_ref": "indicator--339a2c0b-8f14-4123-aeff-bad32310c8ad", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdf2a59-1ee7-4eb8-8b8a-61494b5bd495", "sighting_of_ref": "indicator--48b1282c-9913-4f3b-a70a-52b265158a11", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07623cc9-8ff0-4897-bf02-37a9c396ae65", "sighting_of_ref": "indicator--48b1282c-9913-4f3b-a70a-52b265158a11", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349d6ae4-a1eb-4144-8b65-750223ee8d2a", "sighting_of_ref": "indicator--a6ae32af-246c-4efb-bcb0-9a032d646400", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffad1545-aee6-4ccb-a214-ab29532bdfaf", "sighting_of_ref": "indicator--a6ae32af-246c-4efb-bcb0-9a032d646400", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2b674b-3ad4-4d02-9be6-75a7e40375c1", "sighting_of_ref": "indicator--90da6a43-4879-41b5-9615-0afbf20dde79", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3d7b41-7bc0-487a-aca0-4ee8ea56662b", "sighting_of_ref": "indicator--90da6a43-4879-41b5-9615-0afbf20dde79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ab377e-ebe0-4141-9b42-9d89c48ee2dd", "sighting_of_ref": "indicator--f6429f34-8b18-4be6-9156-13b98adc405e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcefae2c-a294-43c8-b3fb-5461d6aa2182", "sighting_of_ref": "indicator--cfbc1675-7ac8-4e88-b560-d2fde2a66ac9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eee74d-f95b-4549-8fb3-f8a29c1d31c5", "sighting_of_ref": "indicator--cfbc1675-7ac8-4e88-b560-d2fde2a66ac9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7b186e-a43a-4d6c-8467-1aee95016669", "sighting_of_ref": "indicator--e154488f-f72c-4c86-a822-cc7cf18e376e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703e6a01-c868-46f5-a18c-03a8a87b3d8b", "sighting_of_ref": "indicator--e154488f-f72c-4c86-a822-cc7cf18e376e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a09a003-9a8d-42de-afae-b83fca2ce545", "sighting_of_ref": "indicator--04707cca-35ea-4345-9663-b9cb0416e053", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cdc7f9-3375-4163-bf83-056b845fc2c6", "sighting_of_ref": "indicator--ca57a3db-1e19-4b56-b49f-4de07f69f693", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dd5c9e-d793-4bb5-ab27-da0ce9aa53fd", "sighting_of_ref": "indicator--ca57a3db-1e19-4b56-b49f-4de07f69f693", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c7d29c-7b1f-4184-9830-a7526c8b889f", "sighting_of_ref": "indicator--67e1f7b4-a19c-4fc4-a2aa-397f4bc0b5ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c244b48-283a-4504-86ef-3482ad5dec68", "sighting_of_ref": "indicator--5f0df7e1-e615-434a-9481-391decb42dff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee81cc32-8efb-41af-9fb3-ac33859f1c54", "sighting_of_ref": "indicator--9de9a4b2-d974-47ae-a0f9-bda8a4d90f7c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f136e5ee-a304-420c-95b0-7ebbcaac6183", "sighting_of_ref": "indicator--9de9a4b2-d974-47ae-a0f9-bda8a4d90f7c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0433d4f7-8224-4296-a258-50941a90ff7c", "sighting_of_ref": "indicator--d99857cb-6380-4996-a0db-f068afa77ba1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bc4191-d6f2-4be5-ad4e-cb3ded2e392b", "sighting_of_ref": "indicator--d99857cb-6380-4996-a0db-f068afa77ba1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139e9c8e-dc7a-4ca9-89ab-4ebff4c99f67", "sighting_of_ref": "indicator--0eef027f-8725-43bc-b2b7-c39c647e1798", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f949fa26-8516-4737-94c8-c76d424f1112", "sighting_of_ref": "indicator--a06b7ab0-b789-422d-8e3f-7add84d51915", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0147b0-b863-481c-98aa-e75db78d1a6b", "sighting_of_ref": "indicator--9de3ae24-acc6-449a-a220-86032e7f9af1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92987b91-8b9e-4acb-b207-d217db3c8566", "sighting_of_ref": "indicator--d734701b-ce74-4420-9f2b-6e6f66896ef5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eb9c5e-c214-45da-8a54-dd5fec00e988", "sighting_of_ref": "indicator--d3b8b518-e172-44fd-89ac-e7e9c3350427", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cc4c6c-89f5-4ddf-ac77-5717732d8e5b", "sighting_of_ref": "indicator--2104fc88-115b-4528-9366-c106114dea31", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563fe388-571c-49a3-b755-cc426445b4d3", "sighting_of_ref": "indicator--2104fc88-115b-4528-9366-c106114dea31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2083701a-2e0d-455c-83da-34f4c8e9ef63", "sighting_of_ref": "indicator--0e9a918c-be7a-46b2-9c72-f03c64314049", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afc46d1-7d9c-4036-85f6-da701b1ea406", "sighting_of_ref": "indicator--0e9a918c-be7a-46b2-9c72-f03c64314049", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa700a58-e992-419e-92e2-f99a0ace7eae", "sighting_of_ref": "indicator--fa981eac-f975-449c-8f78-66b9640072dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82c2945-00f1-4482-baac-f96773d8e969", "sighting_of_ref": "indicator--fa981eac-f975-449c-8f78-66b9640072dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24980ff4-cb28-4633-940c-a682d9402601", "sighting_of_ref": "indicator--e08c2c31-767d-422d-a4b5-7bca4bbb554a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f51f5ea-4211-434c-b00c-ba98945602bf", "sighting_of_ref": "indicator--18ab308e-4d78-4a9e-9e81-14775190d824", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3921f1d4-7697-4881-9753-506e6186dec0", "sighting_of_ref": "indicator--64151327-2b43-4eb2-acdb-0ba3dfe37def", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b35ea88-9cdb-49c7-8ba0-264a42e9e071", "sighting_of_ref": "indicator--64151327-2b43-4eb2-acdb-0ba3dfe37def", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0417c7b-3cb1-41b5-8d8e-e22494b47e29", "sighting_of_ref": "indicator--21297606-16e2-4857-9127-9f028becb419", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff510cc7-343a-4721-ae39-7d215b677057", "sighting_of_ref": "indicator--21297606-16e2-4857-9127-9f028becb419", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e6b3bf-6242-4981-91aa-b0d537594b3e", "sighting_of_ref": "indicator--de7d25de-cb1f-4b42-b421-6ffc8db193a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f49d4cf-843c-4a17-8f1e-6f04bb972d75", "sighting_of_ref": "indicator--de7d25de-cb1f-4b42-b421-6ffc8db193a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afeeae2-5fde-4598-84c3-75847075169f", "sighting_of_ref": "indicator--1f0345e1-eb90-4634-b941-3c52a88d5340", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d253f-fbfd-436f-bba7-a0cd33e8b85d", "sighting_of_ref": "indicator--1f0345e1-eb90-4634-b941-3c52a88d5340", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a213864-5387-4d33-aeb6-e205fc1f2bdb", "sighting_of_ref": "indicator--268c1fb8-f9a3-4dee-8fb0-3291270ea958", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869fc45e-ebfd-4944-b5fb-532671ddb89b", "sighting_of_ref": "indicator--268c1fb8-f9a3-4dee-8fb0-3291270ea958", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4794a193-b8a6-40a9-99c2-9cc864e539f2", "sighting_of_ref": "indicator--c03f6805-1f41-403f-917e-33e20e38aa06", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c049ef8b-c3d6-4d32-84c2-33ba03e9b425", "sighting_of_ref": "indicator--c03f6805-1f41-403f-917e-33e20e38aa06", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2abe23-aba2-4dc1-9eb9-155395b071aa", "sighting_of_ref": "indicator--109aeec9-25f8-4d8e-9a5c-f8236a378b52", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98f37ff-8fcf-4bc4-a9bc-bdfb6518f563", "sighting_of_ref": "indicator--7829f79e-4dca-4091-997f-2f061c2bf62f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0271ff16-33c0-4a57-bd6a-391057a6f0e0", "sighting_of_ref": "indicator--c44280dc-f85c-4061-abd5-a71f4dedf0dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5028dc2-9228-429f-8b02-818634a65584", "sighting_of_ref": "indicator--72463c18-7132-459b-adaf-a57df39e0e4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c60c179-00ce-45d3-b191-943b1fc13561", "sighting_of_ref": "indicator--72463c18-7132-459b-adaf-a57df39e0e4a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc87fe1f-6e4d-4382-a85f-9b734c209140", "sighting_of_ref": "indicator--1a19f71c-7d77-456e-92be-11da9927468d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e671a49a-1a85-4282-b417-5ac5d345911a", "sighting_of_ref": "indicator--1a19f71c-7d77-456e-92be-11da9927468d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a583ee-da70-4801-95d8-c1a4efae93b5", "sighting_of_ref": "indicator--2af60ddf-f751-4855-a500-2b81b4be31c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b088b57-cbf2-4bc2-a16b-77954c0a9e29", "sighting_of_ref": "indicator--9f84d8c5-eb11-4b5a-b71d-6fd501afa9dd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98463ba3-6c44-4480-9bf7-55f613533aaf", "sighting_of_ref": "indicator--9f84d8c5-eb11-4b5a-b71d-6fd501afa9dd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51af2e0d-4cc4-47f3-a1c0-f19ceabaf6b0", "sighting_of_ref": "indicator--78d83286-5b88-45b1-a2da-540f0bd41fce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94067a6b-ba7f-41ad-84fb-03b3f3a22e1f", "sighting_of_ref": "indicator--78d83286-5b88-45b1-a2da-540f0bd41fce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29beca0e-0a51-48b2-87df-a4cb54facf05", "sighting_of_ref": "indicator--ddcdb73d-3b10-4cad-97ba-eeec212c7bc3", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5313e8b2-1b02-4302-b170-50a6328dcb7b", "sighting_of_ref": "indicator--ddcdb73d-3b10-4cad-97ba-eeec212c7bc3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218560f7-aa53-4b3b-93a9-a21c7b723ffb", "sighting_of_ref": "indicator--ddcdb73d-3b10-4cad-97ba-eeec212c7bc3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80beba7c-3125-4076-a1cd-9681391f514b", "sighting_of_ref": "indicator--104602d9-cbd8-44c2-9979-25d30cd92733", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769f8ca1-2135-4e18-bf85-251fc2eb7827", "sighting_of_ref": "indicator--104602d9-cbd8-44c2-9979-25d30cd92733", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe16ba6-3780-487b-8998-0e385efe6648", "sighting_of_ref": "indicator--ffc33bab-a40c-48ae-ae97-331ef6f231a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c15f72-79d2-48f3-b9b9-d2b7fc6e80d3", "sighting_of_ref": "indicator--ffc33bab-a40c-48ae-ae97-331ef6f231a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89e1636-cd97-414c-a163-47562ee29195", "sighting_of_ref": "indicator--c082b205-d1b7-426a-8e9b-1685b1593a16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e293f46-7c29-4349-91f8-66d97e56b9b6", "sighting_of_ref": "indicator--c082b205-d1b7-426a-8e9b-1685b1593a16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb99589-e267-41cc-8d56-b494a7aa889a", "sighting_of_ref": "indicator--73be95c8-ddf8-4906-a2aa-4145df43a6b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51ad0a0-f49b-4c65-94c3-0ccb6f9e15a4", "sighting_of_ref": "indicator--73be95c8-ddf8-4906-a2aa-4145df43a6b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7301948-6d7e-45f8-92bb-f058746bc750", "sighting_of_ref": "indicator--c2455acf-8626-4ec3-bced-baa560e03a6f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af15d1-c92c-439e-a2d2-b2199c3fec75", "sighting_of_ref": "indicator--c2455acf-8626-4ec3-bced-baa560e03a6f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f615fb-2dca-471b-ab3c-8b208434c2ea", "sighting_of_ref": "indicator--13211bb4-5fc6-4425-bbc0-060a35650006", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79ec060-806e-4b1d-8f7f-c91ff6c625be", "sighting_of_ref": "indicator--fa7a20e3-7a82-401e-bf99-392c9ff3559c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54195f45-447b-4610-a5d8-334a668cd32f", "sighting_of_ref": "indicator--fa7a20e3-7a82-401e-bf99-392c9ff3559c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4e5855-1204-4909-8275-2de04ff708ec", "sighting_of_ref": "indicator--45efecbd-fcf5-4118-bfcb-57478a2f32b2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb93cd4-353b-4f13-a2c7-c738e5d5768c", "sighting_of_ref": "indicator--45efecbd-fcf5-4118-bfcb-57478a2f32b2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af39855-f972-43b2-934a-11897c58b08a", "sighting_of_ref": "indicator--e34e8587-f87c-45a4-9977-d7cc951284ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2247f8-0de9-41cd-ba49-9f67ce2167ea", "sighting_of_ref": "indicator--e34e8587-f87c-45a4-9977-d7cc951284ea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414c3673-4e90-4bd5-9a5e-2f872bb6c02c", "sighting_of_ref": "indicator--39befacc-f404-415e-abd8-727c502e01c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f35b0a-2b56-4a4d-8b50-73234ceab070", "sighting_of_ref": "indicator--39a352b8-50ec-47b4-a9ab-ad3343782481", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605fea45-f970-4369-b361-ea3019a7cd35", "sighting_of_ref": "indicator--5e53e284-493a-4cf1-9795-4b521a1f28f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ef2664-456c-44b5-b299-57f12caf22eb", "sighting_of_ref": "indicator--c669c507-a451-4338-9f5b-0233bef5518a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f4706b-d130-4a66-958b-4bf29fd9a655", "sighting_of_ref": "indicator--7d0bb960-3813-4f51-890e-c6ca87461f66", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6e97af-8f0a-4a31-8413-98706c857322", "sighting_of_ref": "indicator--14f62578-5910-4645-a89c-676f823136f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0277e2bd-6fc8-4a1f-8452-4f09e0d03881", "sighting_of_ref": "indicator--25d05758-e797-4784-b831-2bfc77cb76cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a16851-428e-46bb-b513-c22b6398c4c5", "sighting_of_ref": "indicator--93a99d36-4b11-49a1-baa5-1d38778177ea", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af7d3ef-4c8f-4a15-a858-548b4158e7b6", "sighting_of_ref": "indicator--f988fc1d-2a4e-48c1-9c10-78f53b401c17", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09ad054-ceff-4a5f-b3bc-ce6066cbfca1", "sighting_of_ref": "indicator--6ecd8ca2-eaaf-4075-8334-b210d3c38e33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020f7b85-3403-4cf8-9fe8-9686f24cf750", "sighting_of_ref": "indicator--6ecd8ca2-eaaf-4075-8334-b210d3c38e33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88036879-3478-452e-bf75-b232e201d725", "sighting_of_ref": "indicator--e4ed4c2b-d770-4aad-aa21-105ab51eaf87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b928f5-8646-4457-a451-8332a0602b4e", "sighting_of_ref": "indicator--1f227343-68b7-4590-8aa5-3c8ffe5f83de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df1a3bb-9773-411d-8adf-f822dcbef43a", "sighting_of_ref": "indicator--b8a69e68-9423-4912-8830-4539734ed9f5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6001d741-f746-4f87-9682-84153f9b374b", "sighting_of_ref": "indicator--b8a69e68-9423-4912-8830-4539734ed9f5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8c4dd9-a4e6-426c-b771-776b4d437730", "sighting_of_ref": "indicator--433e78de-545c-458d-a4b8-7a2830dcd6bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954ab1a8-d253-4538-88aa-5d4a0e2ad3e9", "sighting_of_ref": "indicator--433e78de-545c-458d-a4b8-7a2830dcd6bc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027bb998-72a9-4125-b669-6d08b8a1165c", "sighting_of_ref": "indicator--d7a3ebfc-60ec-484b-98ef-09a1c0e69945", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357d5c1d-8f36-4e7d-9401-c71b855e1efa", "sighting_of_ref": "indicator--d7a3ebfc-60ec-484b-98ef-09a1c0e69945", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a656c3-34a5-4a54-ab38-c47fbf92bd18", "sighting_of_ref": "indicator--cceb58ca-3a24-4c5f-aa0d-1da91cf7276d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149657a0-e151-4f81-85bd-6110cbd875f7", "sighting_of_ref": "indicator--cceb58ca-3a24-4c5f-aa0d-1da91cf7276d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d87b07-1bff-48f4-a437-eb72f5300a26", "sighting_of_ref": "indicator--958adf64-378c-4011-ae7a-5a89b5c4742f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6fa2d5-13e7-4fa3-b508-3fed2b738bdb", "sighting_of_ref": "indicator--958adf64-378c-4011-ae7a-5a89b5c4742f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8e304e-155e-4cd2-88c0-45a5a4f0dd53", "sighting_of_ref": "indicator--0324a8e6-82fc-417b-afff-628a06e51f91", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28acd16-8607-400b-aa90-6578b076009f", "sighting_of_ref": "indicator--0324a8e6-82fc-417b-afff-628a06e51f91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b0aea5-0e61-413f-bc50-5a21f0b8d5f4", "sighting_of_ref": "indicator--808b9732-b02b-4b06-9110-0e9afedd903a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e57f613-3155-46ee-a95b-aa497cd83e5a", "sighting_of_ref": "indicator--808b9732-b02b-4b06-9110-0e9afedd903a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9bda7f-c87c-4edd-9acf-ff08fd24cc4e", "sighting_of_ref": "indicator--9590d828-857b-49b8-8df5-cd58e603a590", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc6256d-0b95-4343-a8bf-faa8731b323c", "sighting_of_ref": "indicator--9590d828-857b-49b8-8df5-cd58e603a590", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69e066a-1982-4ed6-b2e8-c75afbdee0b6", "sighting_of_ref": "indicator--c3852ff7-131c-44d4-9f32-1f884b46b28e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87e82ae-53d5-41ba-89fc-23bc0fa5fda8", "sighting_of_ref": "indicator--c3852ff7-131c-44d4-9f32-1f884b46b28e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86870157-1423-45c5-98a2-894b3f0def4c", "sighting_of_ref": "indicator--abe14b16-c2c6-4997-8812-549c7a8198d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f822cda5-4ecf-43e1-9dc8-21dd89583186", "sighting_of_ref": "indicator--6bc73d23-4329-4441-b800-6f8b3cbb3b45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229120f9-1f0b-4b58-bbc0-71f78aea89e8", "sighting_of_ref": "indicator--474b4f56-1a5e-4a4a-a7ea-489d56368755", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a8e50f-ed02-4e9a-a5f9-2c504dea5434", "sighting_of_ref": "indicator--474b4f56-1a5e-4a4a-a7ea-489d56368755", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45286bee-117e-4c6f-bfe0-19d42449c754", "sighting_of_ref": "indicator--561f0ae7-7e61-4962-bdaa-28a734a4d110", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553953e0-5cdc-443c-84a5-78ccb14128e7", "sighting_of_ref": "indicator--561f0ae7-7e61-4962-bdaa-28a734a4d110", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0296694d-b629-4a07-b599-527f7e81cb07", "sighting_of_ref": "indicator--5e7f76e8-935b-40ab-96de-f04b83272735", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16348942-4bae-4952-a06a-3e47b3c828b1", "sighting_of_ref": "indicator--5e7f76e8-935b-40ab-96de-f04b83272735", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5913be8f-57ce-4c34-adb9-d186ff1cb8ee", "sighting_of_ref": "indicator--20adb51d-bd64-44dc-8af0-86c87a246600", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd54fa9-f75e-4e16-850f-14961c5bc826", "sighting_of_ref": "indicator--26b3ccb3-0058-4617-8119-ff3774891501", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5308c6cf-b4fc-47c6-bc1b-25957893a09a", "sighting_of_ref": "indicator--0fef3037-2cf2-497f-b37e-dd658e35df89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2938859c-19d9-4b07-b351-dd4f8de90202", "sighting_of_ref": "indicator--14048e3e-25f2-4f46-a4db-8ed1ed35180e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631e6122-75a8-40a5-b48e-35ce59b01d6a", "sighting_of_ref": "indicator--0fa2a14f-652c-4f0f-ae5f-d103b4bffb3f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c30c5d-22a7-40f9-b170-40b0c5618737", "sighting_of_ref": "indicator--351e379f-1af0-4a16-9f9a-d662f8059d1c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc81646-8dca-43a6-9843-0f359b3275d0", "sighting_of_ref": "indicator--c3952bb6-371c-4fd0-b8a5-ee3f0cda1530", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0413efed-c18b-4b79-bb0a-efbed4543820", "sighting_of_ref": "indicator--7c81b006-c8a7-4ef5-8f75-520078b715a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c1caf0-c76f-4689-bf14-a648549b2d3e", "sighting_of_ref": "indicator--0dbf9f8b-e3f4-4c7d-8560-128467d860cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9901db16-d501-4054-ace8-da3ebbbe58a6", "sighting_of_ref": "indicator--c4eb0ab6-1365-4f01-9dc4-b95676b480bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69f2ab4-3349-4df5-b5ee-5818147a8699", "sighting_of_ref": "indicator--c4eb0ab6-1365-4f01-9dc4-b95676b480bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4046897-0d48-454d-bc49-977a7c704ed3", "sighting_of_ref": "indicator--a14831ed-94db-4a22-89b4-23d094f4193d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47aaf37-015c-4502-b3c9-f2a338983011", "sighting_of_ref": "indicator--9a3ddda0-f18f-4162-9bcc-7b6c1ef22ee0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23dc478-280d-478e-8fb5-903bf2a8482c", "sighting_of_ref": "indicator--1059c42d-3661-4372-bdfa-1ca370c4f8f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ade234-f63b-40f5-89db-199eb89dd577", "sighting_of_ref": "indicator--f91b8c4b-2d1e-4a40-9cdc-e556e4dbf0b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a20d9-5cb5-4795-8408-a04af01728e2", "sighting_of_ref": "indicator--f91b8c4b-2d1e-4a40-9cdc-e556e4dbf0b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a87c09-c5ff-4f60-817b-23e83ef20edb", "sighting_of_ref": "indicator--829feb68-0a07-4a57-b35f-a4103b8d918b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7b7355-be67-4c38-ac83-815b829aee8a", "sighting_of_ref": "indicator--bf7515c8-f3fc-4cad-a1d3-fd17c644c051", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6f2b8b-2040-428d-a242-a47547ba426a", "sighting_of_ref": "indicator--bfb28aae-b5f3-436c-8883-1acad0db0ce8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02477a28-7afe-453d-aad8-ee41ac2aa50d", "sighting_of_ref": "indicator--e9b7b2ea-ce3a-4635-bd6d-f15999b16c24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf03de7-844f-4a65-9af2-7ca0ad102cd7", "sighting_of_ref": "indicator--78d58804-850a-462f-83e0-681c640683fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909a094a-84bb-4461-8e1a-678885ec6cc7", "sighting_of_ref": "indicator--78d58804-850a-462f-83e0-681c640683fd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bd5184-2858-494e-a6ad-d43f4ad3a1e6", "sighting_of_ref": "indicator--3dbaf1e1-ba08-4a06-b33e-3af1429e121f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56db32b-6830-4011-aa1d-4b49bf876479", "sighting_of_ref": "indicator--3dbaf1e1-ba08-4a06-b33e-3af1429e121f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f60b97-ce2f-49af-a5f7-82a8e8afaf47", "sighting_of_ref": "indicator--f95a3736-b762-4afd-b5f8-0ca8484097ef", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c04dcc6-d219-480f-af1a-09c5d9ff3f43", "sighting_of_ref": "indicator--f95a3736-b762-4afd-b5f8-0ca8484097ef", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ac8848-9f2b-4a22-8266-9fb343173565", "sighting_of_ref": "indicator--769ff602-47fd-47f3-8868-c7aa51a2e33e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09875c60-e2ee-4b90-a0f8-b67d1119eab8", "sighting_of_ref": "indicator--769ff602-47fd-47f3-8868-c7aa51a2e33e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1236b222-4fda-4d2b-99f9-53cd7512f00e", "sighting_of_ref": "indicator--d0dd5b17-981f-48da-9465-4fa1f4a222a3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94baed8c-70c8-46b9-ad76-739c7dd29777", "sighting_of_ref": "indicator--d0dd5b17-981f-48da-9465-4fa1f4a222a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612f96bd-3cc7-4217-ab7a-4c707863c16d", "sighting_of_ref": "indicator--d84d682d-08b0-4f0c-8e19-bdec39f142d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc6903b-de8d-4c95-8075-1c5b9d5cfc28", "sighting_of_ref": "indicator--d84d682d-08b0-4f0c-8e19-bdec39f142d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1f7064-0949-4a1d-aa30-b669db1871ee", "sighting_of_ref": "indicator--96711c50-9322-43b4-bd48-6d673849dd70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e325a738-913c-4200-9b40-3135e1c5927d", "sighting_of_ref": "indicator--3cd2f15a-dd79-4f42-91e4-edae4eb0998a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1b4866-ed22-47b0-ad22-e8e3da5ed86a", "sighting_of_ref": "indicator--30db6b30-084c-4fbf-ac05-a5b3893c9290", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e658d7b-5d63-4e9f-9785-aa310a3aae09", "sighting_of_ref": "indicator--88ff4983-d5b6-4107-94c8-f357ffc3d553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279942c4-4ebf-41b3-9b76-bb7ef23a5c25", "sighting_of_ref": "indicator--44e18b9f-8c18-4e94-97fc-266b0998bc2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab41675-3409-49fd-b48c-1fa909585bd3", "sighting_of_ref": "indicator--a1acff74-c890-44f1-8cbc-5d9c66ed4338", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c85a51-65cc-4b14-b554-e06569221531", "sighting_of_ref": "indicator--a1acff74-c890-44f1-8cbc-5d9c66ed4338", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5763516-228e-4c80-a5d6-947de7306fc8", "sighting_of_ref": "indicator--07f43193-c1c3-4748-9f30-4bff18db64ff", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029f75c7-1452-48cd-8273-4e2596a9f2fd", "sighting_of_ref": "indicator--f4af8684-ee81-4ff8-a51e-7c68e4b90583", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c93c6e4-b122-475e-bf60-c1fe55bba0d3", "sighting_of_ref": "indicator--f4af8684-ee81-4ff8-a51e-7c68e4b90583", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85590dde-9735-4cda-bfc8-cfebc483cb92", "sighting_of_ref": "indicator--467bf831-0649-48a8-97eb-9a3f4d97e2a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b39580d-b656-4be4-a715-18ac4f23f83f", "sighting_of_ref": "indicator--06ddd412-bf75-4844-8242-55df3af82868", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c5c181-9105-4ef3-bafd-8042ee72c7d4", "sighting_of_ref": "indicator--06ddd412-bf75-4844-8242-55df3af82868", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a257a5-ac93-4ed4-bc7f-3e23fc07406b", "sighting_of_ref": "indicator--7a968555-ae54-4954-986b-492ee0ba4809", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b51812-bf30-4996-bde9-46bdca8cf83b", "sighting_of_ref": "indicator--445b5250-a344-430d-900d-22cdd812ba0a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ba292e-5c7e-43e0-b79c-0c8b20c5441c", "sighting_of_ref": "indicator--445b5250-a344-430d-900d-22cdd812ba0a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d107b-2b1a-40e5-ad8c-add98ccdabae", "sighting_of_ref": "indicator--073b85ef-f711-42b4-a8b4-f1bd5362d7ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40843122-2c42-4c73-a086-b402df9dcba7", "sighting_of_ref": "indicator--018f630a-527d-4e4c-8f06-52b4b50741a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54207906-18e1-4471-8796-aff2bbeaa3c0", "sighting_of_ref": "indicator--6a698e03-71fa-460e-af37-bfe6d39e9fc2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6851fa1d-3f0c-4e88-a905-b49abd81e2fa", "sighting_of_ref": "indicator--6a698e03-71fa-460e-af37-bfe6d39e9fc2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bf26e2-651e-4775-8b28-c0128c26ca8b", "sighting_of_ref": "indicator--74867a7a-c804-4583-a8a6-e358695257b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cebd249-f77f-4f58-8ee6-3032483561d2", "sighting_of_ref": "indicator--54136c24-81fe-4d92-a6d0-905b88c7a6d3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c03400-0f23-4f2c-b8f9-2ba49667b25d", "sighting_of_ref": "indicator--54136c24-81fe-4d92-a6d0-905b88c7a6d3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2365a242-2b1e-4264-b2cb-a6caf963b091", "sighting_of_ref": "indicator--5af0f76a-041c-4644-92de-aeef97b08139", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b582b2f7-a61f-40a7-97b6-30a7aeb72cab", "sighting_of_ref": "indicator--c9878c8e-bf0f-4fc0-8ea2-98a8f042d9ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b1cefe-c3a8-4709-a5cd-546c97e15094", "sighting_of_ref": "indicator--63625fc6-2a95-4c47-be00-5c8476942d10", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2bd4f6-0ede-4bc9-90e5-c081f5e49d3d", "sighting_of_ref": "indicator--7f17fff1-af4d-43e8-b098-78ec14897ab8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64c19a3-6618-4bb1-99db-effbcbe3faab", "sighting_of_ref": "indicator--47eaab10-14b6-4727-a89a-d18bd1b03268", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836d0a41-384c-4316-9248-e05c860f59fc", "sighting_of_ref": "indicator--ab2d1512-f56b-440b-b6ab-5b13f3b876fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb39bec-06fe-4894-b131-2529502f76b1", "sighting_of_ref": "indicator--584e993d-9b3b-429e-bcce-7d67e10f396e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c2bf1a-068f-4243-914b-de2aa92586df", "sighting_of_ref": "indicator--584e993d-9b3b-429e-bcce-7d67e10f396e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6e2b3b-5e1c-4679-9c26-daa9d09ccb2d", "sighting_of_ref": "indicator--2352fb08-7b6b-4671-84be-794f94cc1a20", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77a3e64-8864-41a9-b0e0-7adb0d3dbe3d", "sighting_of_ref": "indicator--33a18348-47aa-42e4-9cb0-cff28f48fa07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca210026-d63b-4784-bc66-189168567b9a", "sighting_of_ref": "indicator--93f82522-8856-4a0a-bf3a-66c461947933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7e81cd-0029-462f-8ad1-50ab6ea96896", "sighting_of_ref": "indicator--4876d8fe-0cf0-47d4-b354-ba039f2be198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2465f914-a5a7-4a04-9c0c-a9cd0fb338eb", "sighting_of_ref": "indicator--7426af34-8fa0-4cf6-9c1e-db039b8a707f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2bb137-862f-4d2d-ac77-83caf92f0888", "sighting_of_ref": "indicator--7426af34-8fa0-4cf6-9c1e-db039b8a707f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556b393-f1d7-4dc9-a0ec-d69b8d9af577", "sighting_of_ref": "indicator--f115cf2e-9045-4ed3-91ad-ae3183ef5c75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81830848-13d7-4bc5-89b0-e5da33e35095", "sighting_of_ref": "indicator--917cd624-0ee3-45a3-ba1c-18b61a593556", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd05d5-f3ce-45cc-b774-b0c446aaad78", "sighting_of_ref": "indicator--88d61f1f-2efe-46ea-a937-1ba64dad8d99", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d301d5-fbd2-4891-bb3a-851cb87d31c1", "sighting_of_ref": "indicator--66c1f42d-1fca-4e16-8dc4-b41072ed8e9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd6c58-e13d-4f83-9a7f-74c490287b17", "sighting_of_ref": "indicator--34b60164-52f8-4473-a067-81c019303a64", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcedd00-88fd-4611-9da8-f796f4fc5254", "sighting_of_ref": "indicator--34b60164-52f8-4473-a067-81c019303a64", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611739cb-a348-41bb-800c-18bc0b94f6f5", "sighting_of_ref": "indicator--99176ac2-9651-46f3-b53a-12f0ac078d90", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b7384e-baa4-439f-abd6-0abb2915d17c", "sighting_of_ref": "indicator--6a2aa935-8509-4114-a0a5-5e1557f00a5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0605cd78-dc16-4822-aed1-ae51b7a4de30", "sighting_of_ref": "indicator--d8fa55ce-2788-4fc2-ab86-576941579cd8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0e98fb-8f42-43df-9cf4-d3aba7c7abe1", "sighting_of_ref": "indicator--fab00b8e-c452-42e7-843c-9443340070d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa15f463-7ebc-4084-a6f7-6a46a53c2f3d", "sighting_of_ref": "indicator--9fd0a127-31f4-4fc1-9c49-63defd3d75a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b36ac-1ae2-450f-a808-6cf4ff265869", "sighting_of_ref": "indicator--ede8c5b7-23d7-4b76-a0cd-41408dc22fb3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe026dd1-6210-457c-a619-3bf8194b674e", "sighting_of_ref": "indicator--ede8c5b7-23d7-4b76-a0cd-41408dc22fb3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a48f7-3fa4-462a-8372-ffbbd1176238", "sighting_of_ref": "indicator--5cc21902-fb89-4242-b3a9-dd714e0f37ed", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61358fa-59c9-45a7-af81-f2925b5f8f43", "sighting_of_ref": "indicator--31e16387-a15d-4089-b217-66f6860e1762", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1b2bc4-3cc2-4316-98bd-ab53c8c0752a", "sighting_of_ref": "indicator--0bb59d89-2962-4538-90d6-c25e5c15a99a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8582e79f-dc9a-4580-8f85-1592aed1cd94", "sighting_of_ref": "indicator--0bb59d89-2962-4538-90d6-c25e5c15a99a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c7d898-fc02-4258-a439-fc08c66682d2", "sighting_of_ref": "indicator--6e2ab067-a675-4004-a2c1-4badb5b36dd8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf646b4-7da8-468a-8502-7ea29677b3ac", "sighting_of_ref": "indicator--6e2ab067-a675-4004-a2c1-4badb5b36dd8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a3d373-a551-47b5-8db8-492863174852", "sighting_of_ref": "indicator--6701364f-121a-4e5f-b928-ac1c87595b74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a06a306-50c6-48f1-b9f1-18ec13e9a879", "sighting_of_ref": "indicator--5908ab8d-84dc-4172-a321-bb2df45c863f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36519819-de1a-4a4d-babd-d8c56cb69676", "sighting_of_ref": "indicator--5908ab8d-84dc-4172-a321-bb2df45c863f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574291e1-f57a-493c-8211-0ce37d714184", "sighting_of_ref": "indicator--76c8b822-939e-4a61-9c36-6c3a45059434", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff97b8e-d545-497c-b4fd-f73e4e20f694", "sighting_of_ref": "indicator--bd0410ca-e629-4c9c-9715-3e6cb34edee8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3760d920-80df-4a2e-b7a6-89eb00f612b6", "sighting_of_ref": "indicator--3a958647-c052-40b3-86cc-826c6fbdf67c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997a5e3e-9a9a-4ab3-a36b-927bf6f45a82", "sighting_of_ref": "indicator--3a958647-c052-40b3-86cc-826c6fbdf67c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9021d5e6-2a97-45e8-9e59-3ecb703e5ca9", "sighting_of_ref": "indicator--cce683f8-96c2-476c-ae83-4e6c79b49b23", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865ae470-dc80-43e2-b195-7417471612e3", "sighting_of_ref": "indicator--f80c794d-d06a-44a8-bc8c-08f1ea733a41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01017b81-7107-4bc2-be45-f44247519d50", "sighting_of_ref": "indicator--1ff99e09-687f-40e0-9d13-257dba78c60f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5c4bab-8f1b-4e4f-8860-d482c683417a", "sighting_of_ref": "indicator--1ff99e09-687f-40e0-9d13-257dba78c60f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac16664-746e-47e9-b62b-98b7a8e9d2fe", "sighting_of_ref": "indicator--ff3b1746-6bf8-481c-9da8-0076d447180c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4102e9-0729-43d6-890f-0fa4ce724997", "sighting_of_ref": "indicator--4bea7c51-e2bc-4b31-8de2-39699165b5a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1c4ea9-0510-4064-a6a1-4e42f18bc1f8", "sighting_of_ref": "indicator--551d6c06-9638-4785-b341-9c59b768e081", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a7dbf7-1b73-4d04-b254-67628401ac27", "sighting_of_ref": "indicator--6557816a-5b51-4fac-b30c-711ea6bad7ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbbba7a-a787-467c-a9d0-6803874c0e69", "sighting_of_ref": "indicator--6557816a-5b51-4fac-b30c-711ea6bad7ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43f1477-a22e-42ec-a2e2-b2c6f8e20477", "sighting_of_ref": "indicator--f6c5b244-a58f-4bc7-943a-6a72a297f553", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c57b11-355a-42dc-949f-9c467b235fd3", "sighting_of_ref": "indicator--19aecff4-26e0-4647-bbd1-97aefc3c63b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14e9ae1-d9f9-4fd1-8526-9466497536d3", "sighting_of_ref": "indicator--19aecff4-26e0-4647-bbd1-97aefc3c63b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b296f7a-1876-489f-846f-ba6b0f7c6dbe", "sighting_of_ref": "indicator--c85c41e3-03b3-437e-8b23-af581feb5d09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca05a2e-049c-419f-8e90-2ce8c1f2c648", "sighting_of_ref": "indicator--a11949fb-301f-4cb8-973c-69385dff00fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151a0f48-dec0-40d7-8a1f-16d883636b83", "sighting_of_ref": "indicator--f947c63e-c446-4cab-8a9e-bb0136c302de", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5258ba8-501c-4897-9656-5efa2527d460", "sighting_of_ref": "indicator--bd5b300d-b91d-4819-b46c-5bd3851520ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c978fd9-553a-4878-9647-9d8f24d9ecc1", "sighting_of_ref": "indicator--15b57bcb-8813-4044-b088-324688fd2ee2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467f4711-ac60-450c-91ca-ca40256025de", "sighting_of_ref": "indicator--aecd84e1-0680-4cd3-a81d-10e923f60076", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fcbb04-cd8f-4f53-8226-91dd9646fdb7", "sighting_of_ref": "indicator--9cb7b81d-d02a-4a99-b00d-988a71531a4b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b62a9f3-398f-4fce-a0bf-23c8ba78dade", "sighting_of_ref": "indicator--33051bec-3780-4e62-95fd-1bb6a19c6bf2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b91b47c-e90e-4231-accf-4a38ea3cafef", "sighting_of_ref": "indicator--fd196c80-b8b0-4122-9b7c-1fdfb7012a95", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb8c0e7-0855-4687-8d7e-da30922f66bb", "sighting_of_ref": "indicator--c08abf6b-1209-4976-91f3-b1999f8e9c5d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eab732-8533-4c16-b939-7df077269305", "sighting_of_ref": "indicator--c08abf6b-1209-4976-91f3-b1999f8e9c5d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf87ec0-48b4-4f24-b030-c62cea9fa462", "sighting_of_ref": "indicator--4ff20c93-4650-4b19-9daf-5507a8bfe93f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1c292e-69c4-4e70-962d-39f185dcd046", "sighting_of_ref": "indicator--c8f3a2f9-3108-4fc3-b386-22d8483efc6b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8518f54-fd04-4487-82e9-0365cfe5b809", "sighting_of_ref": "indicator--56b85da9-0d08-405a-b716-1a8bbe3f07a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eacea2b-0962-4db8-bacc-d1e4e9bb1616", "sighting_of_ref": "indicator--fb2a87de-3ebd-4248-a74a-1a55e2034369", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31787e35-ba27-4555-adb8-bdc400205e9b", "sighting_of_ref": "indicator--fb2a87de-3ebd-4248-a74a-1a55e2034369", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0535d5-7af0-4f8d-84ba-9e1f970dd499", "sighting_of_ref": "indicator--cd11c8d5-e0d7-4e50-a660-d4809a107211", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b213aa-7063-4cce-af78-0ba8c8b9ba49", "sighting_of_ref": "indicator--7805abb0-fdb6-4968-aeea-9cf653479af6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d388a-5ac4-439a-af51-c390c8664a04", "sighting_of_ref": "indicator--615db115-8083-406b-a6c7-5f4433bec836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff08897-0bea-469f-9d46-d8cf71445928", "sighting_of_ref": "indicator--0eb7ce46-548b-443c-8ae0-ed223d804252", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8132ee0-2c29-4d87-a13f-9700f18a4ebb", "sighting_of_ref": "indicator--574e1195-fb8a-457a-8801-0e8f49c3699b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f94dffc-66c0-4a58-8cdc-e3066620ee1d", "sighting_of_ref": "indicator--36322346-361f-4bfc-b198-b9780de7fc02", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50978bf8-515a-4ff4-a08e-e0ce773635ed", "sighting_of_ref": "indicator--2ff6e35c-bb41-4b86-9cf4-116576f121cc", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8212dff-e2fa-472e-959f-57a214054957", "sighting_of_ref": "indicator--2ff6e35c-bb41-4b86-9cf4-116576f121cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcfd908-425d-440b-9daf-31d996ba506d", "sighting_of_ref": "indicator--99a2efcd-682c-4a0b-8ef2-b03ec70aa483", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906da2b8-3ee6-47ad-b934-0cca06cb9720", "sighting_of_ref": "indicator--ee93f1cc-b9c8-49c0-9a3e-d53db5fd6468", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30af484f-99d1-4c03-ba4f-7747e3aa6d9e", "sighting_of_ref": "indicator--9b5a2953-682c-43b5-9357-662901cbc309", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c32d3d-2daa-4e8d-803f-d927b1afc2f4", "sighting_of_ref": "indicator--912f39ca-c9a5-4457-83b9-42be4a4ce238", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be18f4ff-8fb7-4533-9bf3-e41d6ae71a53", "sighting_of_ref": "indicator--d5803dfd-fdbf-494b-aa15-81027b6ea721", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f00f54-370d-46c1-b2a4-81e40c5afe34", "sighting_of_ref": "indicator--b8c19ddd-a758-496c-adbe-75fa9441d186", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56956a2-d862-47d8-903d-0ea35cfa1a00", "sighting_of_ref": "indicator--0d456b9f-b165-419d-bf71-6431e299579a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b783fe2d-16a9-4304-a0ac-43230d6878ed", "sighting_of_ref": "indicator--838d61d7-2c0d-4fde-8542-c8c45a3de4c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b73f21-12f4-4f60-bd49-59e9a2185189", "sighting_of_ref": "indicator--260e41c9-3105-48c2-97f9-8640d65ca617", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c587e1-bba1-4b9f-aa0d-a172926e0638", "sighting_of_ref": "indicator--88877d6e-0591-4250-b1b1-2e0ad484b625", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42cea7e-6d44-482b-a292-a5cb6d44bfeb", "sighting_of_ref": "indicator--88877d6e-0591-4250-b1b1-2e0ad484b625", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0fe1d3-529f-4a55-af15-40c8c4943ef2", "sighting_of_ref": "indicator--fdd69850-000b-46f3-b423-687c08c635e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ab4484-ed2d-4041-9c23-88154dce2fc6", "sighting_of_ref": "indicator--fdd69850-000b-46f3-b423-687c08c635e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150d70e4-4a84-47ce-9618-c654a44002c5", "sighting_of_ref": "indicator--a0d691b1-da18-4bc6-93e3-eecc433422e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4225a768-cf8e-464a-914d-9df2844784ca", "sighting_of_ref": "indicator--3ac3d8fa-22eb-48cc-a22c-ab41b77817b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de800ae2-804a-4d0c-9478-c148b091d096", "sighting_of_ref": "indicator--3ac3d8fa-22eb-48cc-a22c-ab41b77817b9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e8236c-014b-4ea2-bd20-3a94561b752c", "sighting_of_ref": "indicator--50e62712-c940-4234-a3ed-e2f327627558", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e23fc27-23ab-47c9-a3b6-6c0cf44733b9", "sighting_of_ref": "indicator--50e62712-c940-4234-a3ed-e2f327627558", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5ce50b-f285-4a0a-bc56-6c18a847a752", "sighting_of_ref": "indicator--7eb4292e-0275-460e-8222-14a3fc39a6f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0804afd1-453f-429a-ac91-c9e9b4c271ac", "sighting_of_ref": "indicator--444c17a5-a0db-4be5-97ae-19495315570a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c16f55f-67c4-40cb-a8bb-83f7fc1bd866", "sighting_of_ref": "indicator--d4487528-3427-47a0-851b-a6abd0b1fd8c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1e547b-1976-4f3e-81d3-330d1e90d9fa", "sighting_of_ref": "indicator--b5cf5e1f-9c87-4f66-afc4-86d7a1f27c03", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a1e42c-44dc-4a4a-b666-1170b83fd07c", "sighting_of_ref": "indicator--ef8ec0fa-b951-471a-a574-de1b32934f08", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035e899e-3ba4-41cf-b49f-e0174400be92", "sighting_of_ref": "indicator--42e378f0-efa5-4bee-95d4-b29c733437cd", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37533b52-6b1f-46ce-87b6-f272707224cd", "sighting_of_ref": "indicator--681d022b-30d8-49d8-a85a-1695110e0e1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c726df33-fdd8-49c4-912f-f84c7c206e9c", "sighting_of_ref": "indicator--c893d288-9cb8-426d-90d0-75a88e6487ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4babc3-fe1c-49b9-960c-d25c01bc59f6", "sighting_of_ref": "indicator--92bc35fe-6cb2-402f-afdf-0f68e13b782a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df0e1f3-5e18-4b66-925b-c055f3488205", "sighting_of_ref": "indicator--25000fd5-be4b-4854-86e6-73a0a6cd71a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eca3a2e-301b-4ab2-9f43-d55d4b7264d0", "sighting_of_ref": "indicator--806da8a0-d01e-4c9a-8dd2-f90d59ca91e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64134463-0fda-4e62-8d53-a56b909e563d", "sighting_of_ref": "indicator--866d03a8-59b4-4035-8756-239e4928208a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a9bb1a-ca86-4e9e-afb1-373459b0057f", "sighting_of_ref": "indicator--107dc008-8c9b-4df7-b1b4-b12b7dba50b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e75d72b-7293-40ff-8e5e-22fda6a891b2", "sighting_of_ref": "indicator--62bfacad-da9e-4cca-84d4-0ea1547336c3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d436f317-c285-48d8-afcb-9d40d2f617ba", "sighting_of_ref": "indicator--2c52b11d-6a68-4428-9423-6ed0669bf144", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2012d56d-ac5b-45e0-a36a-7418eb6df78b", "sighting_of_ref": "indicator--2c52b11d-6a68-4428-9423-6ed0669bf144", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d5119a-ab8c-42ab-bb59-d9c07724877e", "sighting_of_ref": "indicator--6d4b5879-0873-47cd-98a4-47c0639719ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d213d04-b815-4b26-b7af-4fe291fc5d00", "sighting_of_ref": "indicator--4a0d59c7-721c-4563-9b9f-fd283b0beca1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a7a2f6-1b15-4971-87e5-559a30ff8226", "sighting_of_ref": "indicator--1c49aa76-5975-4ba2-9b10-10ff290d29ec", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60350d2f-6114-44ea-b3e0-12d8a8f64e0c", "sighting_of_ref": "indicator--07e01540-d3e8-448a-9803-e996e890a319", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fad08c0-e035-4f17-a394-50830db94b5d", "sighting_of_ref": "indicator--ec4a4679-08d6-4823-befd-e04783c225cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a53f4-482a-4a06-a5d1-42ab0d6f19ae", "sighting_of_ref": "indicator--4741873d-01b4-40fb-a1a1-1846519280ff", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9519a4b-2326-4de0-b339-77a6a8626a1a", "sighting_of_ref": "indicator--855ba953-04f3-4acf-b33c-cad882927270", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed8a65a-a4db-4a62-bce1-f451698da826", "sighting_of_ref": "indicator--1fb81d1d-08d1-48b0-ae35-5a36c79a56b9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d794ffa9-0111-41fb-bf3a-be48af4de28f", "sighting_of_ref": "indicator--6ac9bb04-9a78-4486-9182-4179707412eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4dbfb4-e018-4723-be10-4faf845db41e", "sighting_of_ref": "indicator--502a9b32-def5-425f-924a-e42660af2ad3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc298071-a130-4f9f-a6c6-d19914660294", "sighting_of_ref": "indicator--daea3665-74aa-4b44-aa16-d68b505ff6a5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5618945-f64d-40dc-9abe-20bfc8583359", "sighting_of_ref": "indicator--6842c99d-91ba-4b0a-866d-3d24c04de72a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f397f0ac-b2a7-472b-ad26-ee72c0927302", "sighting_of_ref": "indicator--b9624c81-5736-4c81-8d87-6b8598aeb474", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832eb7cb-e14f-48b5-ba39-3995d7c148da", "sighting_of_ref": "indicator--84305855-edd2-4380-a577-d241a79d25a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0372e932-b8b2-49d5-816f-339d4e2bd7be", "sighting_of_ref": "indicator--84305855-edd2-4380-a577-d241a79d25a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8a4777-3f89-4d62-a64d-7f5064b4f587", "sighting_of_ref": "indicator--6d10f18f-677e-4cff-8088-01d851da795b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acd6ea1-6db7-4a41-b2a4-d66ba4cf8d71", "sighting_of_ref": "indicator--cc27f52e-a22c-4fe7-80e3-273c96f07ba7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adc6db6-f040-41ca-932a-22c4cbe6b020", "sighting_of_ref": "indicator--a2803fba-907d-499c-92f5-09eb6f9ada46", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ac7482-67a7-4bd2-ba28-cece0ab44105", "sighting_of_ref": "indicator--1e8085f3-4d7b-4c8a-b915-4128c4cf714b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347a5105-13cf-4924-82b0-7ec54bbdf913", "sighting_of_ref": "indicator--b6e26b6d-9230-41e7-8f95-f5e410d9add6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57e2658-5e8e-4d3b-b15e-f0438e19d6ce", "sighting_of_ref": "indicator--d17ab817-6efc-4f73-90d5-0854b854638d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cc6578-3edb-4d42-b3e1-cf48c2e4780e", "sighting_of_ref": "indicator--7795a979-3b86-4ead-873f-0a30c84c7937", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed9b457-b7c9-4313-be93-f8d0b911c17b", "sighting_of_ref": "indicator--751ab5ee-2c8e-4598-b325-26e5eb237561", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63c7a3f-e555-4c74-ba4f-0463fa7228fe", "sighting_of_ref": "indicator--cb483e64-aa59-4dce-9b16-47f661b2de47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4222419f-98c6-46d5-8e0d-f33dbd84d071", "sighting_of_ref": "indicator--89474e59-bd58-4690-9251-80aa3789e7cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bcd853-1b9c-49fc-8e41-734b2b6a2d83", "sighting_of_ref": "indicator--89474e59-bd58-4690-9251-80aa3789e7cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1db5aa-0d4b-42ab-aa74-772262ce6a2a", "sighting_of_ref": "indicator--3685f8d8-407f-4c3a-8696-370459ce27d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f01e31c-2a3b-4b1a-9d6d-6838813a5ed8", "sighting_of_ref": "indicator--6b19df9e-9485-4940-9f0e-c6e671163ceb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db54aa52-e90b-45e3-82c8-100c6b033ffa", "sighting_of_ref": "indicator--6b19df9e-9485-4940-9f0e-c6e671163ceb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7b5243-4fd3-4a28-8ac4-ee935b0fbf36", "sighting_of_ref": "indicator--0555584f-6ce9-4efe-8d48-46d5b3687c24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5612648d-e9df-4df5-806a-147ab00c00f9", "sighting_of_ref": "indicator--290f0864-8ee4-48df-b5db-a184cb83a171", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f6cf94-e74e-48af-bb48-52ebd53f2bc2", "sighting_of_ref": "indicator--e1d7f3ec-df9a-4a3a-86bf-98d74d657ed0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5842e55-19df-49a3-8055-3f3f2107527a", "sighting_of_ref": "indicator--a65a5134-b593-4937-a11b-296c87e3b832", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c8d74e-b77e-4df4-8b35-f4277a4a5edb", "sighting_of_ref": "indicator--d84717c1-d147-4f41-a026-239fe603d3c8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6db5247-116d-4259-a278-97388248422b", "sighting_of_ref": "indicator--8cba1910-2cae-4964-8f80-18ffce51b6e2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60f1757-cdfd-4fb1-bcc1-7d737dfee342", "sighting_of_ref": "indicator--e4b3e1c2-b947-4e8c-90bd-d38d1cd41e81", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2763a84-0507-45c1-9506-d48779d83c54", "sighting_of_ref": "indicator--e4b3e1c2-b947-4e8c-90bd-d38d1cd41e81", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24e2d54-f65e-4e9d-8d56-5622add5c24d", "sighting_of_ref": "indicator--4d54bbb1-e9d3-4392-9405-bd061a0f607f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb60d4-3170-4b01-9c82-15d440c8e596", "sighting_of_ref": "indicator--156bcb7d-8223-4f02-8a39-27d0c602cd9e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c5b031-cae1-4cab-8d6e-3b2ecb776d68", "sighting_of_ref": "indicator--20ebaf32-4003-43ac-b437-9d8990ed6b4f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c6481-c5a1-45ab-a439-6a52bbb65583", "sighting_of_ref": "indicator--5ea5b5ee-cd82-42dd-9baa-34011fb37ca8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac05bf1-8fe4-4f6b-b850-254d036cfce8", "sighting_of_ref": "indicator--c8f2c6bc-6e6f-4c24-9959-a8a7d2c97c88", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328bdd2e-fa37-48ed-9295-a60048771145", "sighting_of_ref": "indicator--d5169636-f76b-410e-a76a-fa270279e888", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faff751-176c-4e93-a0e5-754815fa20f3", "sighting_of_ref": "indicator--d7c4f610-b826-4282-ba8f-87855a909715", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaff436-bdba-4efa-9edc-7f0b36765bde", "sighting_of_ref": "indicator--727afe9e-92e4-4923-9770-b937a27d738c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a162b9ca-5f08-4e72-826a-d1847f702d62", "sighting_of_ref": "indicator--c34945ef-5647-48ca-93ec-af08fca30ca4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a9770-f7d6-4445-ba83-a6135f44ec50", "sighting_of_ref": "indicator--6ea774f7-8198-4aac-8cc0-b30fd01813a3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe07009-6c7a-4e72-b1be-ca4e477b9455", "sighting_of_ref": "indicator--b219408a-ff4a-4010-8610-a7e21d7d17f9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324b44e2-4684-4d3e-9727-c06d07a576cf", "sighting_of_ref": "indicator--629d6bae-d2d7-4f26-a29f-bfd19addcd7a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58b125a-09bf-4432-8a08-13dc3d9ee203", "sighting_of_ref": "indicator--99192778-e22f-4375-81e6-497f2f11e237", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22b3bb3-e2b3-4370-b28e-7341574907d2", "sighting_of_ref": "indicator--bc9f1daa-6b4a-41d3-85b9-8bd6f5a90a43", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e156df3-6f43-4d3d-a55a-b87faae46066", "sighting_of_ref": "indicator--c4ee89fa-38d2-41d5-a441-ce8904d1ad6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ac26f3-a4cf-45eb-b9be-ba1300ef7471", "sighting_of_ref": "indicator--c4ee89fa-38d2-41d5-a441-ce8904d1ad6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02638c14-41ef-4bd6-990a-09f5cdf1ea15", "sighting_of_ref": "indicator--dbae1f39-665e-466f-b484-cb246c0961b2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afad6e2-0806-42f4-a6ce-3945c9521120", "sighting_of_ref": "indicator--ff8de9ec-941c-4ea6-81c6-551944133c8d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8909318b-1759-4446-8f73-865610078f4a", "sighting_of_ref": "indicator--04414432-ce93-4bdc-a63f-0665d80ea84c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0423c74d-baff-4850-a22f-1007804dd66e", "sighting_of_ref": "indicator--98f20d4d-87cf-4ca1-9aa3-473ce5515546", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560e7d2a-4c48-4113-907f-a0c9cf2b7740", "sighting_of_ref": "indicator--e2fce238-959c-4294-97f9-8ee62c1ff47c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29355ed-50c5-422f-ac32-312d474828eb", "sighting_of_ref": "indicator--dd739734-66f5-4743-9ed7-088df1500cfb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5388d0-b9b2-4c07-8db5-60a0909f0c7a", "sighting_of_ref": "indicator--fdb11387-71fb-4630-8249-7b51e138eacf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2988cf7-1a28-457b-9fa9-b91d83879960", "sighting_of_ref": "indicator--2a88897b-4100-48d8-ba3c-60b456b4f879", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfb19fe-8bbc-4797-b620-5669eb1b1a35", "sighting_of_ref": "indicator--9ca38d0c-61a0-43d6-9627-fbcfd1fa70be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1f28e4-84cb-46e6-8e8c-073edee475e1", "sighting_of_ref": "indicator--9ca38d0c-61a0-43d6-9627-fbcfd1fa70be", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c50bed-ea02-48e4-a107-6d367a92e644", "sighting_of_ref": "indicator--5aa6f6f2-fede-431f-abd7-71436dfab86d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e118e-72b1-426b-8db6-465081c00c4e", "sighting_of_ref": "indicator--5aa6f6f2-fede-431f-abd7-71436dfab86d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc5fef2-50e8-4b84-9b02-84a3fecd2542", "sighting_of_ref": "indicator--032845e4-3ffe-46e8-8b38-1594ba96ac91", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cabacb-8c83-4251-89c3-ac8cc2c5960b", "sighting_of_ref": "indicator--c2b359ac-e40b-48e8-a3f3-93ed5a97f1e1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df178922-08b4-43f5-95b1-5b78699b2f34", "sighting_of_ref": "indicator--c2b359ac-e40b-48e8-a3f3-93ed5a97f1e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4cf81e-c599-4ca5-b562-3ce185061199", "sighting_of_ref": "indicator--bc74d0d5-54fd-46a3-a341-b412ed832974", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097ccc8f-9069-45ef-9c12-506ff7f5754e", "sighting_of_ref": "indicator--f45718b3-bca2-4cb8-976d-9b71b1ce3fda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0a458-022c-4f19-911a-f327945c4e55", "sighting_of_ref": "indicator--f45718b3-bca2-4cb8-976d-9b71b1ce3fda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc253b-ea24-4d34-a3f0-3da2e208842b", "sighting_of_ref": "indicator--27cbd71a-e1bb-4e4f-bb00-b3fed2b6eeda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0773eab2-4dd5-4840-9e9b-380ab265bb7d", "sighting_of_ref": "indicator--30cc2fac-8132-4f26-a8e8-d9eaca838fc7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5592e3fd-8486-4ba0-b5d7-ebbefa5888b0", "sighting_of_ref": "indicator--3ef233de-7de5-4a7f-b5a0-1ceec95b5161", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c71ef1-cd8d-4005-884c-e3bf686fb5a8", "sighting_of_ref": "indicator--f15453a2-123a-4f7c-a03d-603e3b168055", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f146350c-de6f-46c9-9832-48ab4082aaf9", "sighting_of_ref": "indicator--e01bb67d-f82f-4e29-94b7-8f6cdcff9f4c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192fc96c-75d7-42c3-9a93-af7efa9742a0", "sighting_of_ref": "indicator--e01bb67d-f82f-4e29-94b7-8f6cdcff9f4c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d8d619-a946-4133-8075-9bbcbb3144c8", "sighting_of_ref": "indicator--56bff21e-f6ba-4fa6-a289-f70d6f6f0f0d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7b3d39-0a31-4c6b-848b-c2ebe3a2953a", "sighting_of_ref": "indicator--ef9562ae-1f37-41a7-89d4-556f2b151b09", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e230265e-a1bc-49d9-bb97-9c92e3cd5bd6", "sighting_of_ref": "indicator--a2e3ecf9-ea6d-4c50-bd3a-53d65427c8da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18763944-bacc-49d6-8632-6f636be502a0", "sighting_of_ref": "indicator--5dd45c9c-1c86-4a5a-a75e-418ddf22fdcf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54386350-263b-47be-abbc-56d4017a7a6a", "sighting_of_ref": "indicator--bafea509-f330-4b12-9e3d-202802d71784", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7967bc9-1656-4984-92ea-7bfca50bce35", "sighting_of_ref": "indicator--c1208e3e-7a84-4ba6-8b1e-e660ff903096", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1e3c41-8a43-475d-bc19-543ebc8c335e", "sighting_of_ref": "indicator--a8e68360-42fb-4b91-b0d0-0333b5ed11dc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91167953-5441-4057-bd10-20be8ad8016a", "sighting_of_ref": "indicator--a8e68360-42fb-4b91-b0d0-0333b5ed11dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6244bd-ccfc-4583-8ab8-1957d4d520a2", "sighting_of_ref": "indicator--f575c896-e67a-40eb-95db-2f07cb7af3e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91edbe6-24b4-4554-b38a-3235b8a28294", "sighting_of_ref": "indicator--f575c896-e67a-40eb-95db-2f07cb7af3e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49177f0f-f012-41d7-a6b0-606d7e35d99f", "sighting_of_ref": "indicator--1e37c402-7c72-4e4c-a848-4b65c5458619", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5b63a1-1563-4728-b607-3f5b36caca3c", "sighting_of_ref": "indicator--1e37c402-7c72-4e4c-a848-4b65c5458619", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6383e06-7ff3-4218-baee-0cfe70cf4bfa", "sighting_of_ref": "indicator--8215535e-7353-4369-9969-fc4612b649b8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1afaab-6dc2-4f61-89ef-12304e56854f", "sighting_of_ref": "indicator--8215535e-7353-4369-9969-fc4612b649b8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfc79b9-b5b8-47ed-9f2c-f902b92fe046", "sighting_of_ref": "indicator--075fa8d2-9428-4210-9455-8a27bbcbb74c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7522b4-d7ce-4074-888e-52c221180f2f", "sighting_of_ref": "indicator--075fa8d2-9428-4210-9455-8a27bbcbb74c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c492cbaa-ad81-47f9-96c9-f5dacd36cf0e", "sighting_of_ref": "indicator--6deaedd8-b91e-4d36-845c-2273be3fe278", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d2501e-dada-4182-a197-8b7adf5c79af", "sighting_of_ref": "indicator--6deaedd8-b91e-4d36-845c-2273be3fe278", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95387b8-d408-4e7f-8fc6-c2a79bfd53c7", "sighting_of_ref": "indicator--e935b186-8b60-4d9d-8210-2d13cb060cc5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb04968-0c1d-43fb-9eea-5b3d2a13f462", "sighting_of_ref": "indicator--e935b186-8b60-4d9d-8210-2d13cb060cc5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4295b01-316f-4177-9fb0-8e294b1a7119", "sighting_of_ref": "indicator--e04f7317-76d0-48a5-af76-d0dbde96d15f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e05548-92d3-417e-ac6d-bee74cb63c2a", "sighting_of_ref": "indicator--fa508cec-c74e-4157-9e18-c32d9cfe2f83", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15e79a7-6e66-476d-9ac3-1033741695bf", "sighting_of_ref": "indicator--347309ae-60db-4f59-a9ce-703fae0f1206", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33da2652-6093-4059-9973-ef47d2824de6", "sighting_of_ref": "indicator--2b02f3a6-d19a-4889-a72c-1b9cab39b014", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ecf5b-510a-4e81-8960-900a1f9d2d34", "sighting_of_ref": "indicator--baf658c1-3a5a-4ecd-9519-6917e16b1abd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33fed22-6893-4a66-b3ff-fa36b229ace8", "sighting_of_ref": "indicator--2d604023-c543-4b0e-87ff-e32e4d7ded3b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70901a88-1279-4e64-8ec5-a7001db0f3ed", "sighting_of_ref": "indicator--2d604023-c543-4b0e-87ff-e32e4d7ded3b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f9aac1-8038-42e7-95a4-669df47b76b4", "sighting_of_ref": "indicator--9fc43c3f-ce47-4765-90bf-d6ecff426957", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e341bef7-a507-474f-84e7-1a7d182c88d5", "sighting_of_ref": "indicator--9fc43c3f-ce47-4765-90bf-d6ecff426957", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b46f9f2-a350-42aa-a9cb-6e3077edec36", "sighting_of_ref": "indicator--3b5cbc0a-1239-404d-a8b9-85e2cd8794bf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d85256-e9bb-4a46-ac72-e5a589509994", "sighting_of_ref": "indicator--9238c68d-e013-4d57-84c7-cd38838d0490", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6550780b-9906-4d0c-8203-e00b3ff0754b", "sighting_of_ref": "indicator--9238c68d-e013-4d57-84c7-cd38838d0490", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c0580d-2179-4eb4-8a6d-d17f38ac2728", "sighting_of_ref": "indicator--a26697e8-c387-46b0-9240-87d2f95d57f6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a82aab-d00a-4cd1-abe2-8ce8c2a695ba", "sighting_of_ref": "indicator--a26697e8-c387-46b0-9240-87d2f95d57f6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2345ea-4f62-4014-91e5-a0e2d4cdd166", "sighting_of_ref": "indicator--a2d68848-b51b-4605-a0e0-d32633c4fe91", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af31c087-a947-42df-9ffe-8cf9ca59f656", "sighting_of_ref": "indicator--6dc21250-c0a4-431d-b289-fb546b17d14a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbe315d-7d93-4fb5-8bb6-6d1902641b93", "sighting_of_ref": "indicator--6dc21250-c0a4-431d-b289-fb546b17d14a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e99cdf-aa25-4c7b-8436-6a21ab426833", "sighting_of_ref": "indicator--6a25bae9-4711-4031-8d78-33c9273aca4e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f1421-edda-4c59-9410-85f7126c1f75", "sighting_of_ref": "indicator--1b3abc2e-2237-4a73-9d15-cdfe33461406", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f44f4c-b938-4e46-9bf5-57e88253f942", "sighting_of_ref": "indicator--1b3abc2e-2237-4a73-9d15-cdfe33461406", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b594814e-322f-4672-a720-54d6653ba479", "sighting_of_ref": "indicator--6fce715c-1223-42f5-a3d7-61e5b31028ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25709e9c-9c0d-4410-979c-bd815d7e7412", "sighting_of_ref": "indicator--2bf40df7-6a40-45bb-be71-0e84732c2464", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1727e1c9-56c8-48fd-b73b-5ea9a3c06020", "sighting_of_ref": "indicator--2bf40df7-6a40-45bb-be71-0e84732c2464", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d3296f-31e4-4ca6-9837-29c0005103f5", "sighting_of_ref": "indicator--f2a5ec97-f588-40a1-8830-93040d9b80ab", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585b885b-4264-45ee-a04d-80da18557852", "sighting_of_ref": "indicator--f2a5ec97-f588-40a1-8830-93040d9b80ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938ccacf-7af7-48d5-881e-328366718ebb", "sighting_of_ref": "indicator--f2a5ec97-f588-40a1-8830-93040d9b80ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47273572-b766-4b0b-b7bf-a8a5dd00372c", "sighting_of_ref": "indicator--5d2a7348-4078-4b44-8202-b931393844ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf35983-2d8d-48cc-a309-21abd7a19e46", "sighting_of_ref": "indicator--5d2a7348-4078-4b44-8202-b931393844ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d278ab29-c9a8-45a6-84bf-daf220702970", "sighting_of_ref": "indicator--0a5c45a6-71e7-45ca-bad9-09db854564cf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cfd27d-9cac-446a-8e3d-91e772bfacc5", "sighting_of_ref": "indicator--0a5c45a6-71e7-45ca-bad9-09db854564cf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393032d3-82c4-4a4a-8cf1-0751998e2112", "sighting_of_ref": "indicator--98758591-716a-4959-a3be-9a67013504a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e804c3-b055-4a3f-9d69-747d46907460", "sighting_of_ref": "indicator--98758591-716a-4959-a3be-9a67013504a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a5c6ce-5307-4956-81c7-1f8357293620", "sighting_of_ref": "indicator--d7627ff7-9d9c-418e-b579-bf3d33501141", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a83ce0-2315-429f-89bd-aa0024361e2e", "sighting_of_ref": "indicator--d7627ff7-9d9c-418e-b579-bf3d33501141", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ec4efa-de6e-462c-9a89-b9413ad7f832", "sighting_of_ref": "indicator--9ca277b2-6057-4299-94c3-b20edaa53878", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d47eb20-8ae9-48ec-b6e7-645c595710dc", "sighting_of_ref": "indicator--aa381245-2097-4827-b871-96118482b417", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f3c031-dc23-40b7-9ca3-feddc74e62cc", "sighting_of_ref": "indicator--aa381245-2097-4827-b871-96118482b417", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078d4426-05c2-41a4-81ea-40ccbb87f3ca", "sighting_of_ref": "indicator--196cc367-fa91-41fa-a03d-0484f3cba4ce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97077884-d1dd-40b0-8128-9fccb1d79a37", "sighting_of_ref": "indicator--196cc367-fa91-41fa-a03d-0484f3cba4ce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7608b63-1d57-4f40-b20c-814309072292", "sighting_of_ref": "indicator--fa3950fd-6410-4fbd-baf9-3e69e954b9d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d652e5-0be2-40dd-a1d7-7721e97838b1", "sighting_of_ref": "indicator--fa3950fd-6410-4fbd-baf9-3e69e954b9d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2b367d-aa4c-4c38-9b00-5e564c880d2b", "sighting_of_ref": "indicator--6fd29083-4909-4ddd-a344-44c4c4718dbc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99741871-2504-47b3-9bbe-e6ad2dca3abc", "sighting_of_ref": "indicator--6fd29083-4909-4ddd-a344-44c4c4718dbc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d150db-744e-466a-9533-2baf7eb28e72", "sighting_of_ref": "indicator--798b591c-cdd5-4c9e-98e4-b3e5644a6f0f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f879505-17de-4520-8cde-749c092fae07", "sighting_of_ref": "indicator--798b591c-cdd5-4c9e-98e4-b3e5644a6f0f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b85ab-28a1-4ebc-af5c-2f75e26e2804", "sighting_of_ref": "indicator--628c6870-d588-470c-ab76-2184c1097926", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f238c6-1bf2-4150-8943-207047d8dcc0", "sighting_of_ref": "indicator--628c6870-d588-470c-ab76-2184c1097926", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7691491e-0707-491b-86dc-1d8230f00f84", "sighting_of_ref": "indicator--b4db2277-6a00-446b-b639-98e78f342acf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccec6618-041c-49d4-aa5d-09bbda390f45", "sighting_of_ref": "indicator--9f6ed0fb-5718-4a27-8660-30f310d947a3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b433dde1-5ac7-4e60-9ba7-3e300b2cf409", "sighting_of_ref": "indicator--dddbf373-5e3a-44f5-b583-63f80643ec2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc700c42-32b7-4918-bbf2-70fe416715f5", "sighting_of_ref": "indicator--6f118751-b1fe-4cea-b173-0dd7dbcd7f71", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81393c06-6ddc-4b51-88ec-341f92206b39", "sighting_of_ref": "indicator--f5cd7f58-0714-4f92-8d26-2f2715d18541", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c252fc-2464-48a2-90bc-90a9611cc3db", "sighting_of_ref": "indicator--86a87cc0-93bf-4323-9209-ea12868f2000", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac13a928-d18e-496f-bcd9-e4a42ee5555a", "sighting_of_ref": "indicator--fa7ba6fe-6788-418c-9b4a-a3eddd023588", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda1c6b8-2b7e-4722-8f48-10a1bc076944", "sighting_of_ref": "indicator--bfb3a513-5a48-47dd-b6a2-9b5e10bbd192", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d837f5c2-d910-4163-80e2-a6b026a223cd", "sighting_of_ref": "indicator--78e4ce1d-8817-42f4-bf4a-91684a48b285", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6f4e99-2a8e-4774-8e90-4af14c812625", "sighting_of_ref": "indicator--78e4ce1d-8817-42f4-bf4a-91684a48b285", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5320526e-ec13-4296-9b5f-3220e962a7ef", "sighting_of_ref": "indicator--3a3622f6-56b2-446a-9360-49fd642ccce9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f832ea9c-a271-41c5-bec1-df7bcdc4f23b", "sighting_of_ref": "indicator--8d47f237-a370-4eb3-ac7d-1e03f21ab73d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ae21f2-d6c0-4be0-a9fe-df5ef51a6304", "sighting_of_ref": "indicator--8d47f237-a370-4eb3-ac7d-1e03f21ab73d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b93b8b3-a037-4ba8-8d89-83043ef3cb81", "sighting_of_ref": "indicator--82a46d73-c7d7-44df-9b4c-366092b39e71", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad412046-a594-4d55-94f1-e093b1fa494d", "sighting_of_ref": "indicator--77feff6b-418b-48b0-b447-34b049ed16ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea84cb1a-b7d0-41fd-9ee5-2805105a5404", "sighting_of_ref": "indicator--aea08717-ce2f-4ab6-9bfa-504656476f96", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef063863-b30f-4357-807b-2a327480eb3e", "sighting_of_ref": "indicator--e9a742ad-1f9d-456e-81d3-5f13e6936a16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef32201-f803-4d8a-9677-06385140485b", "sighting_of_ref": "indicator--c4d783dd-13c1-4659-a7ae-bd8f240cb158", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78326d3f-0b49-4959-a30b-9d7c60b1eb93", "sighting_of_ref": "indicator--38e0508e-cc2f-4f36-9343-08df69a21722", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d1270a-aeb8-48af-93ed-a6ce0d4c4c46", "sighting_of_ref": "indicator--b57074cb-34e4-49c2-a7c3-f5a0c47fedca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe97b5c-17c8-41a5-ac19-354d45450508", "sighting_of_ref": "indicator--9ef37c13-ee04-4034-9124-47c7954fe14b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca810f84-d7ed-47d6-9dee-3cea8b1028c1", "sighting_of_ref": "indicator--0a277685-630c-4b8f-a6fe-f98ce66c48c7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfd5850-be02-4678-80f3-7be5919a76f8", "sighting_of_ref": "indicator--658f98de-2ca9-46fe-85cd-b4a473e1eda8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde52f06-c28b-48e7-b857-69035aae08f7", "sighting_of_ref": "indicator--6bb683e2-ed24-4a84-a3d8-b05cce3e9a11", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb986ef-e936-4a82-8c72-0c970aae509d", "sighting_of_ref": "indicator--8db265a3-0576-485b-9993-f001810b868b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b26994-ff8b-4031-bbf3-a5d3b8d37e23", "sighting_of_ref": "indicator--997697b7-64dc-4ca3-8cb0-18d53189e1ee", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e2fa12-e086-4b3e-9c5d-69c4d826a65e", "sighting_of_ref": "indicator--8309f0b7-ba6e-4713-a784-fa3f0c99f81b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a107d2-1da7-4b88-87fa-ae633d659d3e", "sighting_of_ref": "indicator--637a9042-38f9-47a3-88e4-baa4a6094fb7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de160614-fc81-419d-af34-22e9045d0de5", "sighting_of_ref": "indicator--65d0cb82-a65e-4134-96cf-2f51bbd5e9f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd85f1-b06f-4faf-8f16-06438dd1e0b3", "sighting_of_ref": "indicator--fe3636b0-4613-4e61-9858-aa1e0ed7a938", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21168ffd-a817-4403-a634-9fb77ce38eca", "sighting_of_ref": "indicator--0ca17750-a2b4-453c-9952-b2f157adbd23", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3f6b17-69dd-4ec2-bfc5-b66c2b26cce2", "sighting_of_ref": "indicator--a06f1a8e-71b5-4005-9215-b0f462a8e688", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d541f8-7bcd-45b5-8e05-c2cf701e73cf", "sighting_of_ref": "indicator--fa1fec1f-3cd0-4bb9-b8aa-7b02b3cc408b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07139022-dd3b-4268-a6aa-530b5d1a7ef5", "sighting_of_ref": "indicator--adbb7fba-6a6f-40d0-a1e6-9143f0237e80", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f40f81d-11c2-46e1-8bfd-1d96da9ac234", "sighting_of_ref": "indicator--b40a164d-8470-4af0-8289-37cf796c3c6d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446bfd63-484d-4832-b672-afb598ab6b23", "sighting_of_ref": "indicator--ed911867-adbb-4167-ba1f-6e33f1e209d6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca71791-bafd-4495-8f16-1476b6e6d8d0", "sighting_of_ref": "indicator--4209c32f-f7aa-4861-9ab6-7add3c3671ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d30400-9b86-4a7b-a71e-d5b7aaa81cec", "sighting_of_ref": "indicator--d4e713be-e6d5-435b-afdf-cf936523b03c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048e0ffa-5a15-49e6-91a3-dbc79a3fc493", "sighting_of_ref": "indicator--88b3e519-d2c3-4be1-9e70-2e3e9966844e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e889106-fac0-4385-913e-52971b9f99f8", "sighting_of_ref": "indicator--e751b41e-0d7f-4742-bc70-bfe1659f31cd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8997581-5a99-4370-aa75-1469ff6315aa", "sighting_of_ref": "indicator--e751b41e-0d7f-4742-bc70-bfe1659f31cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246afe20-34a6-436a-9c2c-285f82534ec6", "sighting_of_ref": "indicator--f6aefef2-b2b7-42e1-9c48-d8b88a46c608", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5730bf-0874-4088-a964-9c7a482a0f31", "sighting_of_ref": "indicator--9d117a34-b3f0-48f8-995d-5c217c07eda2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f782a-832a-4ce1-a4c8-1b8795add2c5", "sighting_of_ref": "indicator--9432279c-9d92-4e3d-afd7-e10c3a4a2979", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d69a703-8fc6-4134-b401-01dfc967b2b6", "sighting_of_ref": "indicator--31f12ecb-02bf-4b86-a5af-a3c6fd40e2da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f264a3-23a2-49bc-9054-58e1b5a6a0ce", "sighting_of_ref": "indicator--8d15787b-d7de-40dd-9987-f5a0fd30d8bc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070318a4-890d-4c38-87a6-9ff040e77b74", "sighting_of_ref": "indicator--944c2720-4af8-47a1-af40-9a9b02a9f567", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cad06b-0e99-4722-896c-9adaa9d2dc21", "sighting_of_ref": "indicator--45e8e4c5-c598-4864-a6a8-678f5641974a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d98cc5-6153-4ecf-9b70-4828947cd49c", "sighting_of_ref": "indicator--fcba4438-1c89-4e20-83c3-96c7174b8ed8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed11751-8fa3-4809-8d5e-e1fbd34a4088", "sighting_of_ref": "indicator--2e678c6a-ac2c-46b2-a85c-5349ed9a3cd4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4810977-8538-42f6-9d7f-1cac332a6dcd", "sighting_of_ref": "indicator--c4c26a82-6f5a-497d-997a-a36ac08b7ece", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bc80a2-9e01-4ff9-8e12-f22012423320", "sighting_of_ref": "indicator--a19a3883-2bbb-4881-b5f5-846f5c769f41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6355f99b-bec3-4c55-857d-0cf2d3140de3", "sighting_of_ref": "indicator--1d1fb006-fb4e-4149-962c-7c3448eeed15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176842d5-69ac-4014-9386-fab595a1b100", "sighting_of_ref": "indicator--360265af-8766-40ed-87ed-192b1ac60872", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56784ec-7575-44a9-bf07-be1c6934beff", "sighting_of_ref": "indicator--fc641448-699d-435a-9f01-5ae8b8d70ed5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6423fc-766f-4837-88ba-4aeda6aa135b", "sighting_of_ref": "indicator--ea8d5e2e-75aa-4adf-a341-6fa401ef1048", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946c0c97-c454-4c6d-853a-160ae7524f26", "sighting_of_ref": "indicator--4d16dce6-94fc-434c-bfc1-59997d871540", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cfa527-2c09-434c-9864-5e5cf63f0c2d", "sighting_of_ref": "indicator--9b865800-593a-44df-8741-9f0ed9a6ec2e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6da89a-96b5-4662-b71f-d5398a4fe72f", "sighting_of_ref": "indicator--8855ee79-d1d3-48b8-9257-24e273c60994", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47496317-424e-4262-8f6f-f4fb7461367b", "sighting_of_ref": "indicator--066e26f6-7147-48d5-909e-40923345e69a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6804708-9292-47d1-9fe0-efe26de9e0d1", "sighting_of_ref": "indicator--d877b66e-c44d-446e-961e-20da938fada1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e35bd5-107b-4787-8179-cec79b753f1a", "sighting_of_ref": "indicator--d877b66e-c44d-446e-961e-20da938fada1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db7ddc1-b30e-483a-812e-df66139f5e4a", "sighting_of_ref": "indicator--3761a57f-6829-4c36-9eb3-4649656fd15c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ce868-3dad-49ca-a268-1a43f6e23b78", "sighting_of_ref": "indicator--1af7ee8b-ab7a-446f-9db6-5cc3f26923ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868262bd-1e2c-4494-b8ea-a8ade37c406e", "sighting_of_ref": "indicator--cc146cf4-ebbc-4c33-a56c-d3020a5ba0eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de863ed0-990a-42df-a02e-d128c82aff35", "sighting_of_ref": "indicator--e60e52cb-219b-4471-82a8-f51c2aca09e1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67be05db-ec65-449b-8be3-b14d302a32ec", "sighting_of_ref": "indicator--6e0e25e3-3c5b-4169-8475-1ee50f4c66c6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44659f0f-b8b6-42ed-b3d2-ce3122a2fb9a", "sighting_of_ref": "indicator--d9986ace-13d3-4d09-b791-bb2404f2abbd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeeab28-2ffd-457f-a4ee-19b753cef619", "sighting_of_ref": "indicator--b8f224c3-9b71-4695-a2c3-f5f392999e8f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ec292e-93de-4af4-b456-843ef3fd925a", "sighting_of_ref": "indicator--c9e77362-c42d-4e29-b47a-a9c0d308538f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cfbc7e-48c9-4632-a9a9-e5c833280a14", "sighting_of_ref": "indicator--85bbd88d-57b5-4401-9370-2ea865046eea", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50aedaa-04ba-4618-b457-dabe4641cf4b", "sighting_of_ref": "indicator--e0228c87-18ae-47c9-9600-c22b814dc8d1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d54bd83-46f4-4c3c-b483-19bcc51c86fd", "sighting_of_ref": "indicator--60b1e558-146c-4a18-a369-0ad18a7683ca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1043545b-06a2-4720-9d0c-b42c206b0fe0", "sighting_of_ref": "indicator--6acf1e4b-f867-41c6-86e7-9612179091fc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08e9974-57fa-4f5e-9d82-b7f58ed7ca27", "sighting_of_ref": "indicator--bc3c355e-ef6f-404c-b677-85daf38dee75", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd304b2-02f7-4862-9d0f-088270ccb9b0", "sighting_of_ref": "indicator--bc3c355e-ef6f-404c-b677-85daf38dee75", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6478b0c-dc48-4e53-9158-b12e5b1400e9", "sighting_of_ref": "indicator--736a0671-db43-4db1-9fa5-495d0f5f8e58", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e41d6a-de99-4019-95a0-ad6eed1087da", "sighting_of_ref": "indicator--faadadb8-bd72-44d9-8b10-77c2e04cf694", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359d2dbe-f5fb-4dd5-bdc8-1976b386a31b", "sighting_of_ref": "indicator--78e037d9-8efb-4490-be9a-2f8fd6b68844", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd53d42-f301-436b-b256-1fed7821d0bd", "sighting_of_ref": "indicator--6b2ee498-03f8-4920-86f8-52c3a1617ad5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a762f8-f8dc-4d19-a173-a532a1dc60a3", "sighting_of_ref": "indicator--7f880374-f9af-48ad-9c66-989faca7a5a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fb6d1f-1998-4b94-88b4-97444aec225d", "sighting_of_ref": "indicator--7f880374-f9af-48ad-9c66-989faca7a5a4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f94082-06a9-4926-abf4-d471eaaeed53", "sighting_of_ref": "indicator--783ccb8e-bf49-4d4f-80a1-3a012ec02c00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d0a4ea-7d90-4fcf-be8f-da5e340890ce", "sighting_of_ref": "indicator--0677b9f8-5b3c-4ed8-bb40-04201d122ec8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206248b0-fcfb-4fe4-b861-a3502b0766dc", "sighting_of_ref": "indicator--50b020f1-e6de-405b-8d5b-e81eb2e012e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18955aaf-b12c-4796-9a28-fb415585810a", "sighting_of_ref": "indicator--92e425c1-b32b-4bcf-b113-d07697e2682a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4105f0e2-dc55-4cd7-aad9-317edcf86424", "sighting_of_ref": "indicator--83b786d5-348b-4308-8b93-d920fb1d2f4f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5ed371-4e6e-4b7a-bc44-fdc1ab35e6e2", "sighting_of_ref": "indicator--514d7486-a0b2-49b9-a096-900135db5798", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0dd29d-7626-485b-8e31-8d238cb6c189", "sighting_of_ref": "indicator--a3337e6a-ff2a-4556-bbc2-43c95406d05a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a919193-c46f-45aa-b0e0-1e2415160a42", "sighting_of_ref": "indicator--0b10c9fa-09f9-4061-97cb-5585d63b131b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9441c41-c712-422b-a030-2431b335f265", "sighting_of_ref": "indicator--7d1e3127-e6a7-4477-8e6a-c8db2375dca7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87addcb4-7d8a-401d-a6e5-852fcb25cd59", "sighting_of_ref": "indicator--37f40fd9-912e-47b0-8663-843f86b45ede", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4930669d-360d-4ac7-94f0-aa04d6c27346", "sighting_of_ref": "indicator--b94613c3-71dc-410f-8335-06e2bbb4a3a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6bb609-28c5-461f-964d-1bce78e48f2e", "sighting_of_ref": "indicator--9c74358f-08f0-43d8-b482-c020bc3b8ebe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f4b242-c101-4485-8376-36b1e9b5197f", "sighting_of_ref": "indicator--62fd6452-58e3-4810-aa80-3fbe364dea7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a3e656-b2f9-4ba9-9be4-e741a0fb93f9", "sighting_of_ref": "indicator--058c2b51-c3dc-4d74-8f0f-6d230e89d7c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067de774-32ff-43fb-85ef-424c3d914d9b", "sighting_of_ref": "indicator--5b396ac1-9e3c-4d64-b3c2-a91c46ecabf0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51c13a4-e788-41b8-96bf-adf9140d4ada", "sighting_of_ref": "indicator--04966743-d1e8-448f-a315-1c242997c792", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bd2ea6-c63c-4a23-a5ce-0cad5b854100", "sighting_of_ref": "indicator--5dea615a-961d-422c-bcfe-12076f3cf89c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e073a311-bc89-4d95-97db-fee12beb3aad", "sighting_of_ref": "indicator--50b5fec4-e64d-4b57-8950-b92e5373331c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6441804-9cc7-4543-be5e-6dd7b38c0c76", "sighting_of_ref": "indicator--35654d71-d831-4237-9130-092a95495fe1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ac89b3-f0be-4140-a57a-6f17458cf3a4", "sighting_of_ref": "indicator--1abd54d3-c8f8-48b0-a330-71a7fd09d914", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778c1729-679e-4138-93aa-74242b0e24d3", "sighting_of_ref": "indicator--3a2343c3-c1b7-44a0-8049-3d3bb3b40296", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e81dd-18b6-4fe9-9cd6-37da68050471", "sighting_of_ref": "indicator--3a2343c3-c1b7-44a0-8049-3d3bb3b40296", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36240d7b-faf1-4754-ae8d-3d418e33d064", "sighting_of_ref": "indicator--66b455a7-3936-4670-9233-a070a143480b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb9792a-275a-41e0-8a95-b3fa699068fc", "sighting_of_ref": "indicator--f21696a9-905c-4c7c-900d-80cf63a632b3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746788d3-919e-4c78-b6fb-94eac253e264", "sighting_of_ref": "indicator--1cdd882b-85ad-45ef-811d-b5702c0f1c61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5decc8-2cfe-4f64-979d-b4a8482b2748", "sighting_of_ref": "indicator--6df80f1a-d060-4ddf-9ad0-9dbc17770501", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe3fe5f-28f8-4302-a3e4-ed6326a88d46", "sighting_of_ref": "indicator--b76d87f4-0b7d-4aca-a44b-41da04929568", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180568b2-5ff3-4113-9558-e64498ae9dd8", "sighting_of_ref": "indicator--8ca00722-39be-47fc-885f-91b858937117", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f17537-7b50-40dd-b1fd-73730d256355", "sighting_of_ref": "indicator--f14b7473-77b9-461c-9a57-90b882a29f45", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104776cc-031a-4689-9be1-cb235a278ebb", "sighting_of_ref": "indicator--5cfe07bd-c9ed-46e6-9f6d-eb7a98a5d972", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9704f2-d8ee-4c43-94f3-3c78a1861bbe", "sighting_of_ref": "indicator--513ec6f9-6ff3-423c-8ee7-c7d6abfc23bf", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8631975-bde4-4a9a-9db3-302d93a0ec3c", "sighting_of_ref": "indicator--1a5f7bb9-93cf-441b-8b5c-53f99847f20f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fff083-0bb3-47d2-b415-392814dec777", "sighting_of_ref": "indicator--425db70a-f077-494d-bbaf-2f7b211e9088", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae0f088-6c24-4422-82b4-73e6babebbac", "sighting_of_ref": "indicator--6aea4650-4796-4e39-acb0-ed9e15746856", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6daf662-4083-4508-88f9-99481f641399", "sighting_of_ref": "indicator--be450444-e7f8-448b-89f4-4f9bff2bd8c5", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fef2a5e-da37-4118-9cda-d0aaf05a4eba", "sighting_of_ref": "indicator--289d4b06-b49c-4c95-a588-36f503681926", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03837783-c6a8-4158-8a41-3d76f29ff360", "sighting_of_ref": "indicator--4d0bb619-0445-436d-a3fc-804cfc3f0d14", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf90eb1-6c0b-41b8-b19b-1ac89850995d", "sighting_of_ref": "indicator--607dabea-0fba-45aa-9d49-aa1f4e269589", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b90735-5e2d-4464-850c-5aae8d03783e", "sighting_of_ref": "indicator--72de6ba7-ba8d-480f-8c4a-7bccc490470d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90047a3d-7177-4728-9274-b8b99e0b61b6", "sighting_of_ref": "indicator--71218af3-14c2-4ac1-895c-a35e6bc89592", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac77f499-feaa-4a63-a766-eb18bc67058e", "sighting_of_ref": "indicator--e4f1b2ef-52aa-4f57-8334-7ee05f88df2f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c365e0-5238-4f0c-a232-85a202e46696", "sighting_of_ref": "indicator--e4f1b2ef-52aa-4f57-8334-7ee05f88df2f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff800afd-752f-4abd-895b-11b32b66e370", "sighting_of_ref": "indicator--7f3cf01f-6da4-4dc5-9a43-122d78b67fae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99cf17e-5933-47f6-a5fe-a3e3a0101aa7", "sighting_of_ref": "indicator--de76fa4d-edb6-493e-97d7-336296b448e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b003e4c9-44e8-4345-bd38-c1aaa531de4f", "sighting_of_ref": "indicator--58ae937a-fd63-40c5-8a52-1ec88f59566b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deb8caf-7527-4743-a0e2-08b20f6cd888", "sighting_of_ref": "indicator--4fcafebc-1558-4141-8a32-7074fd6b7d6a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9559226-c07d-4165-b176-fbdc5b4bea6c", "sighting_of_ref": "indicator--79695b2e-1b94-445f-be19-9cddcff27969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a152833-e1ab-46e7-8283-46b1c88736cd", "sighting_of_ref": "indicator--e8b9dc2c-c427-4e5d-9b88-9e1cbf28b8fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93dd0b0-09fb-4832-8757-49c2d89ed29c", "sighting_of_ref": "indicator--3ebb8998-6663-49fc-b4de-bb79c631c2c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed971759-5cc5-467a-bc54-819dfc1e4d0f", "sighting_of_ref": "indicator--3544b22d-dc8a-4367-ae02-69f112301de5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9158452b-1ab1-47f3-a81b-7e12a2e5f3c6", "sighting_of_ref": "indicator--3ed79d8d-b261-4574-bb19-48e3bfc81440", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc17c1e-c49c-4386-a021-555649dc8236", "sighting_of_ref": "indicator--2fa2f166-58c6-4b51-bcc3-a17d5c37ef17", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e0d6b5-fc7b-44fe-a9c5-b3ed9cb72d60", "sighting_of_ref": "indicator--b5341151-46d9-4a3d-abba-41d25f13b9a8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec979b5e-4352-4cd4-82ac-7d5368ee47e6", "sighting_of_ref": "indicator--98e30d45-4b1f-4f6d-96b6-80dc18046530", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0de65b9-34a0-4023-9db9-b9d057cb051d", "sighting_of_ref": "indicator--98e30d45-4b1f-4f6d-96b6-80dc18046530", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5448520d-918c-4184-aee0-e44ab4604108", "sighting_of_ref": "indicator--3cff3dd6-a8bb-4771-9f0a-50b54b9834cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84e5c7e-1d8e-4247-80fc-0abd4b2256fe", "sighting_of_ref": "indicator--3cff3dd6-a8bb-4771-9f0a-50b54b9834cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad63c2df-c227-4ef0-b473-e2476e2433bd", "sighting_of_ref": "indicator--11da5a36-9702-4b0d-b45b-d19a1ecb7d84", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5226fa-3ad3-4048-a702-6bca0c4357a8", "sighting_of_ref": "indicator--469b5a6a-7735-41d4-8504-559a35847e89", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12913d71-6d3c-4828-8113-6402e30fee18", "sighting_of_ref": "indicator--469b5a6a-7735-41d4-8504-559a35847e89", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeb0fdd-0436-4566-a5dc-bdbc9e03c061", "sighting_of_ref": "indicator--2ac98f27-c3a6-4df7-95e1-133e19c3bc61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75239a9-7e22-4983-a7f2-7954c1456005", "sighting_of_ref": "indicator--2ac98f27-c3a6-4df7-95e1-133e19c3bc61", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0e6ccc-be77-46e1-b66b-987b51e781b5", "sighting_of_ref": "indicator--12645b3f-1f8d-442b-ad86-8a0d4e258f48", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e1b902-df7b-4a20-88a8-e8b583febae2", "sighting_of_ref": "indicator--12645b3f-1f8d-442b-ad86-8a0d4e258f48", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e31398e-59c7-4780-88d0-680dccf20334", "sighting_of_ref": "indicator--aea2f7a8-8cfe-4d05-a9ef-237f469721f0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c5c07d-ebbe-4fee-94b3-8ec62d594fbf", "sighting_of_ref": "indicator--afa54c9e-1826-45e2-9b98-1cf475d28cca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224991d-b0c9-4220-96e7-644d5fc8cc58", "sighting_of_ref": "indicator--850b0958-f89c-4883-b0a8-098f4eb94863", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d8a0a1-59ab-4b62-89c1-0d622cb523e5", "sighting_of_ref": "indicator--f5feae99-32b1-4b06-92a1-e6c70874c3fa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a5a9b2-0788-4483-b54c-d111df4abddc", "sighting_of_ref": "indicator--f5feae99-32b1-4b06-92a1-e6c70874c3fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cd3ad6-9e70-496f-91fb-f8e7c559da23", "sighting_of_ref": "indicator--f5feae99-32b1-4b06-92a1-e6c70874c3fa", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bf7deb-3f1e-4f27-a576-e547ab711c68", "sighting_of_ref": "indicator--bbff8ee6-bdca-43ab-b562-7b5ea3fbfe66", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339c79bf-ef61-4494-b8b1-ec288b9de33d", "sighting_of_ref": "indicator--bbff8ee6-bdca-43ab-b562-7b5ea3fbfe66", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2481b2-313e-4d5c-872a-6a26fcfac0cc", "sighting_of_ref": "indicator--bbff8ee6-bdca-43ab-b562-7b5ea3fbfe66", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec179fe-fa78-417f-87ac-858986828d84", "sighting_of_ref": "indicator--f4d184df-84f2-48e4-bc63-384c426ea408", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f70a1c-9e01-4300-9318-7bd01cc90fae", "sighting_of_ref": "indicator--f4d184df-84f2-48e4-bc63-384c426ea408", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447da494-ac78-4928-bc4a-18e204d774ad", "sighting_of_ref": "indicator--f4d184df-84f2-48e4-bc63-384c426ea408", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b676d2-0439-4891-a21a-fbcd6bb5f550", "sighting_of_ref": "indicator--1c0357f9-b542-4665-9a14-e965368b0c00", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df50c44d-c21c-48ef-b5cd-22a312ed4605", "sighting_of_ref": "indicator--1c0357f9-b542-4665-9a14-e965368b0c00", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57891a5-c3ef-4092-a1e3-70c2571cf40c", "sighting_of_ref": "indicator--1c0357f9-b542-4665-9a14-e965368b0c00", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638f4011-c809-49b0-aad4-4c2de5180352", "sighting_of_ref": "indicator--909a7dd7-0ee6-4691-900b-a3758f578310", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ada213-af0d-4732-bcd0-98d43feaf431", "sighting_of_ref": "indicator--909a7dd7-0ee6-4691-900b-a3758f578310", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66151374-1d3f-472a-844b-342fc6b428dd", "sighting_of_ref": "indicator--909a7dd7-0ee6-4691-900b-a3758f578310", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f109023a-8795-47cf-861c-5855631d3e1d", "sighting_of_ref": "indicator--757b8238-1866-4373-a7fd-680479c3afa8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5009ccba-6ef7-40cc-abc4-ddeeee676e68", "sighting_of_ref": "indicator--757b8238-1866-4373-a7fd-680479c3afa8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d19f6df-f7fc-46c5-bf61-0def645d62a7", "sighting_of_ref": "indicator--d072f5d8-c950-4c85-bb79-b9a65fec3c1d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310fba83-1df4-49a7-87c1-1c0c8f5397cf", "sighting_of_ref": "indicator--fc8c8972-8847-4f73-9c87-60736528a4d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dd6a40-65d1-49a7-9f79-117c354ef40e", "sighting_of_ref": "indicator--fc8c8972-8847-4f73-9c87-60736528a4d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6dd5c6-d51b-408b-844d-7f37f1ce2d80", "sighting_of_ref": "indicator--fc8c8972-8847-4f73-9c87-60736528a4d8", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ea2d15-b5f8-4b9f-8f37-3b248856ceab", "sighting_of_ref": "indicator--d0d2ec0c-662c-4a30-b308-7a0e0782b1d6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15101f6-92a2-47b2-9b2b-5e18731ec252", "sighting_of_ref": "indicator--d0d2ec0c-662c-4a30-b308-7a0e0782b1d6", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83be6fc6-7a77-4608-a61c-69e04f22bb01", "sighting_of_ref": "indicator--9b04b2bf-21e5-496d-8b8f-9c15c4efe4cd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00542c18-8887-4fb1-b998-49bb8ec1ec15", "sighting_of_ref": "indicator--6b3f2d6e-3bc6-4f14-b77f-d97530e44937", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea51792-9e78-4057-866d-02f4bcdf2020", "sighting_of_ref": "indicator--6b3f2d6e-3bc6-4f14-b77f-d97530e44937", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31af347-57ee-4627-84d7-2a1fb476e62c", "sighting_of_ref": "indicator--6640d856-fc6a-453a-ab75-2622a58190da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a23a91-203b-48e4-b71b-72bcafc37654", "sighting_of_ref": "indicator--6640d856-fc6a-453a-ab75-2622a58190da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9675eb03-ca20-47cc-b160-8bfccb3acb2d", "sighting_of_ref": "indicator--6640d856-fc6a-453a-ab75-2622a58190da", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7255a8-66ab-4c1f-b014-c3ce93a72185", "sighting_of_ref": "indicator--3632d366-0664-4e5f-82f2-fa31b6331754", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43461223-8f20-4070-b086-c993aac81029", "sighting_of_ref": "indicator--e8965641-eee4-4d0c-9563-dd4ee4b30e70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a3bcb-6640-4b1c-9132-df4dab07cd5e", "sighting_of_ref": "indicator--e8965641-eee4-4d0c-9563-dd4ee4b30e70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22b2ec4-8b4c-49b2-913d-f7efa1bc6df2", "sighting_of_ref": "indicator--6d4c7cbf-becf-489a-b510-285b0827b115", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084fe5d1-5f6f-4d72-955e-8d7c6ef0a3df", "sighting_of_ref": "indicator--491f6ff0-60d9-421c-91ba-d17b4c2b458d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2bb8c5-c3f0-407c-9267-3e2d196de806", "sighting_of_ref": "indicator--491f6ff0-60d9-421c-91ba-d17b4c2b458d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18163411-d8c1-4a61-86f6-2779c62689e3", "sighting_of_ref": "indicator--d6610f50-0f8a-4118-9d13-40b460ccd11f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bd9b05-73b8-4c52-a21a-a33678f1382c", "sighting_of_ref": "indicator--d6610f50-0f8a-4118-9d13-40b460ccd11f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09079c0a-b14a-4242-8f9b-cb93d9ab31cb", "sighting_of_ref": "indicator--48d38682-9617-4b59-a27a-d846e718d1d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68c92f4-f2bf-43e0-8e75-ad9a0f6666d1", "sighting_of_ref": "indicator--48d38682-9617-4b59-a27a-d846e718d1d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf176ad-03b7-4b02-9f2c-624d603ec184", "sighting_of_ref": "indicator--aeecef5a-9aeb-4d88-af3d-8ad7dd0802d4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b149e6-b7fe-4dc7-8fad-da5fc57b46a4", "sighting_of_ref": "indicator--4edc0f3c-0c28-4caa-b5db-c1cffad5069f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bc931d-ed0e-4ad2-91e7-53626ffedb5b", "sighting_of_ref": "indicator--34be881e-3cca-4e57-bfbd-6f24ba0adddc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7c5bce-9d6a-42ac-b682-ad2a0dc1d8f4", "sighting_of_ref": "indicator--ce562d78-f182-420f-ae8a-51e29890bc36", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15e1696-4f2b-4790-a5cf-482f7e7b5000", "sighting_of_ref": "indicator--0c49d97f-4b87-435d-9b33-cbebb3c3dd74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f3044c-62e1-46f5-8677-8cf9ffb69070", "sighting_of_ref": "indicator--47bae346-bf72-48c6-b994-17060d80d3bb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4550f28-8c66-445b-a919-ec329e80613b", "sighting_of_ref": "indicator--9a19ae6f-7844-4559-9846-bf732f76de1c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8438fe32-b328-4765-a604-aba2426e30e1", "sighting_of_ref": "indicator--76fd8a74-24a7-45a7-a152-2b8b4f11f678", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6691fd2d-35cd-4283-95ac-7b29f93665dc", "sighting_of_ref": "indicator--9321524b-904f-4b43-8f0b-e65be0e6e30c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b2f30b-c9db-4b42-957e-7ee61d404eaa", "sighting_of_ref": "indicator--1d2d2bb3-8dd9-49f2-8735-6dd42da5f581", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5779a4e7-5498-476b-824e-e73a3f5b07c9", "sighting_of_ref": "indicator--9a9c0c8b-dac6-4ca2-a2c4-1cdba79077c8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5763702-117c-428d-81a8-053eda66e164", "sighting_of_ref": "indicator--42ee32ed-5c5b-4ee7-a075-a2f6b6df7b41", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e246d9-eeb2-4707-9664-e9dfffdfc413", "sighting_of_ref": "indicator--1dd3781f-bb0a-412f-b0a7-713cf3b16f68", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f961ad9-6409-43dc-a117-4757e1788825", "sighting_of_ref": "indicator--b4d5986a-18f3-4b3b-837c-14b66823eda3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f19a0fc-a023-4448-84d5-260178e59d53", "sighting_of_ref": "indicator--cdfca342-ef73-4566-9d01-652dcb12b6e5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e05211-36da-4093-87b7-e8866fc759bf", "sighting_of_ref": "indicator--f65084e7-ffd5-4735-94f9-5fba44a8f88f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbb60e7-4365-428f-a84f-1b9f11a90a17", "sighting_of_ref": "indicator--8b5ddc5c-d8a3-469e-8760-9e52de2c913f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724b7736-e996-4801-9435-de6b96080fc4", "sighting_of_ref": "indicator--8b5ddc5c-d8a3-469e-8760-9e52de2c913f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38226f93-3fea-4549-9090-e72932bbd1f0", "sighting_of_ref": "indicator--c947213d-b429-4eba-9480-e08e249023c9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec54ff74-7fc4-4853-9f1d-afcd9c957e63", "sighting_of_ref": "indicator--c947213d-b429-4eba-9480-e08e249023c9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3059871-1152-487c-8d80-8a981e54b5d0", "sighting_of_ref": "indicator--d20e184a-e9f2-441c-92e0-f825b4fbef47", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85aaa8b-c910-475d-a9a7-696560a099b3", "sighting_of_ref": "indicator--d181e969-8da7-43d7-a42f-1ddf5ca57f74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae98734-05d7-48a5-8cea-a2efac0f128f", "sighting_of_ref": "indicator--3629f8a3-58da-4535-9b42-c8eb641e9f16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc71f9b3-05db-4180-be21-6e17ee978482", "sighting_of_ref": "indicator--73af40ad-14cb-43b5-bdad-72e5c97504fa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa449c68-874b-42ac-b462-bf9bf1049f13", "sighting_of_ref": "indicator--bbb06822-9914-4ade-a51e-5fef4f598a41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6459eb6-8eb5-44e2-915f-b62cd995b046", "sighting_of_ref": "indicator--2ca5ae82-e339-4a34-a77e-7eedeb2db8b5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4055198-dda0-4106-a2bd-e92253e5418f", "sighting_of_ref": "indicator--2ca5ae82-e339-4a34-a77e-7eedeb2db8b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde4fdea-6e7f-446d-9dba-c26cfba82749", "sighting_of_ref": "indicator--5ed6d231-668b-4e3c-86e7-b53d6e9109d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec79770e-dfbe-491c-a542-05213ed8f8a8", "sighting_of_ref": "indicator--89a94010-deaa-44e3-9b13-a1cc7bf42111", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3003d65a-56f9-4636-9d8c-0c3d3118c55f", "sighting_of_ref": "indicator--c0f429aa-e387-4d85-8e53-5ce47f5fca70", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e5c624-7d67-4a77-8255-ae2f2a2bd34a", "sighting_of_ref": "indicator--c0f429aa-e387-4d85-8e53-5ce47f5fca70", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a500b8b3-0faf-4d09-9b03-b5f30b31ad65", "sighting_of_ref": "indicator--21457eee-9a3b-4e58-869e-75dfb2f8f6cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962fcba2-5a65-4fc6-8b12-2f7b800e74da", "sighting_of_ref": "indicator--21457eee-9a3b-4e58-869e-75dfb2f8f6cc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e7275e-eaab-411e-8bc3-c0b5f8214271", "sighting_of_ref": "indicator--17f75b14-cfc0-4288-9e16-5739988e63d4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60620c75-82d4-4a6a-9689-8004602b7fcf", "sighting_of_ref": "indicator--f90dc3ee-78e0-47b8-955e-d90e9c9aa12e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34344836-60fe-4496-83b8-38cbd7cd812d", "sighting_of_ref": "indicator--7727b570-be58-459e-a536-eefa95daf8aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71953905-1774-48a4-a496-153d4f5b4925", "sighting_of_ref": "indicator--bf122e81-8430-4c98-a9a6-47752585762d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf14e830-077c-43ce-abfb-a188443ac8ca", "sighting_of_ref": "indicator--405977f7-0eeb-4106-b57f-d6e393518532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960a3717-233d-4ea9-8bcc-5b3644befa5b", "sighting_of_ref": "indicator--975ac386-abc4-41d7-8319-c77c927bc55f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fce138-4f5b-404c-a1ea-96a32d4c55b5", "sighting_of_ref": "indicator--fc8b6f11-1632-4561-aeee-5e13155d69eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3588653-15ae-4a37-b72b-479b1d010fbb", "sighting_of_ref": "indicator--807f663c-aa7c-409a-b2fe-24cdc29d5eb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b98a95-8fe0-4276-a40c-3c9c4dd7635f", "sighting_of_ref": "indicator--6d4e16f8-bbfa-4baa-8601-e861e44d36aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7387f26e-b675-4999-b712-d5e3ad7fab29", "sighting_of_ref": "indicator--941975fb-39ef-4d38-9c4c-985ff92f0521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8f2e53-2b0a-42e5-a7df-4f6e16f8070c", "sighting_of_ref": "indicator--31e7f0cf-4995-496e-86d6-770c0d9f5c04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c383e53-1cc2-4298-a34d-9bfa319cfca6", "sighting_of_ref": "indicator--b93592b9-7362-4094-8c08-fd3af9c8427d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763a420-3200-44a5-9642-abb0be7fac46", "sighting_of_ref": "indicator--f3552d77-b04c-4120-9656-dc14610b080f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c651041c-c40f-4712-b472-d7d65a8aae28", "sighting_of_ref": "indicator--3b660b3d-8e42-400f-9a62-2ea651a9f2c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0ea948-6106-4fde-ba4e-1ba710c31d8c", "sighting_of_ref": "indicator--80a6ddca-810f-4395-914e-d072f3cab6e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fd09c8-7c91-46ea-b753-1a936eeef193", "sighting_of_ref": "indicator--8ccb7c5f-8145-46cb-ba98-03c99d7e9219", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91132d20-67a6-492c-aa5f-783104f231a5", "sighting_of_ref": "indicator--b4806f27-8e30-40cb-9b1b-aae5d2de2c6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f3dbf7-71e0-48b4-b25e-670f01f77351", "sighting_of_ref": "indicator--9bef80cd-512d-4af0-af79-5c945fa43011", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aa3dae-b599-497a-958d-d29b84e6d0b6", "sighting_of_ref": "indicator--eb5772a3-0813-4305-9ad9-e73df6ff4039", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93299112-676c-41c6-8d80-8b54c89e9c89", "sighting_of_ref": "indicator--5d9419d5-13d2-44fe-bfe2-974d18f4c469", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e15a289-4917-443e-aad6-e90723b5ad83", "sighting_of_ref": "indicator--469e3a4d-1648-471f-b09f-29d471c65af0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e6f3fd-1f92-42fa-ae95-847dbf4a1b47", "sighting_of_ref": "indicator--1fe661fc-5342-4815-8017-11398f87ffdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c38fb5-9740-432f-bdfd-5bc36b3d4fcd", "sighting_of_ref": "indicator--ab729eaf-c33c-46df-9b24-43f6a1cec9be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ac35d8-dd0a-4851-b47d-692a502111dc", "sighting_of_ref": "indicator--042c7da0-7e42-4498-88ed-a539b31636c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7edd2b-56b0-4346-8b3e-b792f5575478", "sighting_of_ref": "indicator--9d3c6eb8-3d8e-4f5b-bd3d-0127e111b5be", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483ea7d4-2ebc-4bdb-b718-f56fc99f9cbd", "sighting_of_ref": "indicator--2c4d43cc-e2f5-4b55-a842-0b6e24b504ab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6590909f-283f-4491-bd71-c378fa026983", "sighting_of_ref": "indicator--2c4d43cc-e2f5-4b55-a842-0b6e24b504ab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1803b639-dc39-49e2-9480-3391881c8a68", "sighting_of_ref": "indicator--42a499e7-e448-4d08-b35d-267e399c2955", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f35eb83-fb35-4be6-a89f-93484d96470e", "sighting_of_ref": "indicator--42a499e7-e448-4d08-b35d-267e399c2955", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226fd358-083c-498c-9fff-47aa27ce5802", "sighting_of_ref": "indicator--04b3608f-173a-417c-8bfb-d0615913d33b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34bfa9d-f170-4916-8e97-8f6c6f8f9f19", "sighting_of_ref": "indicator--04b3608f-173a-417c-8bfb-d0615913d33b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a23f1c3-dd2c-45a8-848e-79f868045c72", "sighting_of_ref": "indicator--35707ada-10f1-4acd-bd74-253ae6a9d0a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc93606-ac6c-489b-ad77-7c557e70d122", "sighting_of_ref": "indicator--35707ada-10f1-4acd-bd74-253ae6a9d0a1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe030bcc-946a-4a0b-b065-1617fb9434f0", "sighting_of_ref": "indicator--a7cfacb2-edbb-42e0-aa4d-b4ddb685af76", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7729aa-46b9-4e56-9ff1-fbd84cd9d205", "sighting_of_ref": "indicator--a7cfacb2-edbb-42e0-aa4d-b4ddb685af76", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a528b-920a-4708-8307-23fcb6ac2d31", "sighting_of_ref": "indicator--d70d9d50-3c93-4e60-adc0-311f86a4ee7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9040b6ff-2aa6-42ce-9ba3-daa1722d9ba2", "sighting_of_ref": "indicator--d70d9d50-3c93-4e60-adc0-311f86a4ee7d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2bb8c8-d534-4c20-be30-3375e52a1b2f", "sighting_of_ref": "indicator--de2b9aaa-12fc-41e7-954a-a3e2e6eee239", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b659d0bd-a3b9-4b5a-ac90-e5bfaf0bfa45", "sighting_of_ref": "indicator--de2b9aaa-12fc-41e7-954a-a3e2e6eee239", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c755f29-62c6-4c04-a1c2-4ac8bf034112", "sighting_of_ref": "indicator--4ad9ef04-cea2-4f5b-97d8-b85a0019cbbb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8e7aad-4945-4243-87b9-2fb0d08c310d", "sighting_of_ref": "indicator--4ad9ef04-cea2-4f5b-97d8-b85a0019cbbb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e8e584-5efc-4b20-8c22-15deb2c28c28", "sighting_of_ref": "indicator--4e5f0331-5313-42f1-8513-f7fa0566ff77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613cde27-2df2-4865-9dda-ef1a317ab260", "sighting_of_ref": "indicator--4e5f0331-5313-42f1-8513-f7fa0566ff77", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b6e7a0-9ed2-4d87-a3d8-211284477c9d", "sighting_of_ref": "indicator--80a6a37c-9c75-4bac-a24c-ec6f824b88d8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa468af-b14a-41aa-874b-dcae433e3bcc", "sighting_of_ref": "indicator--80a6a37c-9c75-4bac-a24c-ec6f824b88d8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8588a919-0d10-458f-b321-f17b3e3b07ac", "sighting_of_ref": "indicator--f9947810-1757-46ba-a1e9-4cbad4e07187", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af34ed1-e01e-4b7b-ac07-975edc7beb7b", "sighting_of_ref": "indicator--cf4a6cfc-16e1-431b-95b5-81f2911ffcca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8abf11-ba87-40a2-8ecb-fe9f115b30d5", "sighting_of_ref": "indicator--cf4a6cfc-16e1-431b-95b5-81f2911ffcca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495c022b-2c2b-4ba2-8c0b-52e2696b2cbb", "sighting_of_ref": "indicator--247284f1-0ae2-451c-9423-368d1db3b68d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aafbb67-2b45-4c6f-b791-759fe562f715", "sighting_of_ref": "indicator--247284f1-0ae2-451c-9423-368d1db3b68d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344d59fe-dc52-4973-9029-a924a283e370", "sighting_of_ref": "indicator--493ab959-fa73-4cc3-a51e-f819a8709cf3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9361067a-4784-4040-9a17-791242147c46", "sighting_of_ref": "indicator--493ab959-fa73-4cc3-a51e-f819a8709cf3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0f4f03-112f-4b6b-ba6a-2ce7ce750bb7", "sighting_of_ref": "indicator--c00c7312-297b-4907-a342-2a6757b3b25c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb24522-21df-4ca7-ac2d-fbff915576d5", "sighting_of_ref": "indicator--c00c7312-297b-4907-a342-2a6757b3b25c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1606eadb-0c52-4e75-9989-9641f951c4a4", "sighting_of_ref": "indicator--b4a40ee4-802b-4c3d-90e6-0056e2962ee4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93e0aaa-1f5b-4162-bb49-78bb1536ff6a", "sighting_of_ref": "indicator--b4a40ee4-802b-4c3d-90e6-0056e2962ee4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb4798f-5bd2-4574-ad08-a99bb1b73791", "sighting_of_ref": "indicator--0215e59e-30f5-4c49-a45e-d012b657592f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c5b72c-b338-4ba8-a5f6-7daf5b796c47", "sighting_of_ref": "indicator--0215e59e-30f5-4c49-a45e-d012b657592f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2228deed-8cba-4791-8258-95cdc7dfaa6d", "sighting_of_ref": "indicator--ce83caf4-a5b0-4a84-b903-5cacc299bca0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1e0506-8346-4184-971a-69407c33ab5c", "sighting_of_ref": "indicator--ce83caf4-a5b0-4a84-b903-5cacc299bca0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710a6710-5b85-4e0d-a16d-10363a73b6bc", "sighting_of_ref": "indicator--f5d12b01-e66e-445d-978b-841c6e191131", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d20c0ab-580f-4179-8438-121ff6f93d52", "sighting_of_ref": "indicator--f5d12b01-e66e-445d-978b-841c6e191131", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25fff3b-faca-4255-8b59-2b879d37dbd4", "sighting_of_ref": "indicator--26d56fd6-f4f2-43a8-a862-c0166ad214e0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb817db-3bc1-4567-a608-c81299583137", "sighting_of_ref": "indicator--26d56fd6-f4f2-43a8-a862-c0166ad214e0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a43021f-e9c1-4866-9bdc-98881cbe4c78", "sighting_of_ref": "indicator--285e4c45-3771-4544-8df7-49d2ce4294d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e29a4af-49d1-4841-9383-07e7a5ceb72e", "sighting_of_ref": "indicator--285e4c45-3771-4544-8df7-49d2ce4294d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3da530-ea6a-478e-994a-1728a7a8424f", "sighting_of_ref": "indicator--fd00bb38-e165-4fb9-b0a7-b65ae0299e8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93236a28-8053-4edf-ac15-cb98923c6f90", "sighting_of_ref": "indicator--fd00bb38-e165-4fb9-b0a7-b65ae0299e8e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a0d9e4-7f66-4f83-94c7-532230f82273", "sighting_of_ref": "indicator--beb8b9bd-11bf-4893-bd43-851d7bf80880", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f3ad86-17ef-4603-a571-23d6e499a858", "sighting_of_ref": "indicator--beb8b9bd-11bf-4893-bd43-851d7bf80880", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf7d23-0748-4139-99a6-04e16eb3f38d", "sighting_of_ref": "indicator--dfd6354e-206c-40f2-b474-c33f60b131b0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057d7f01-6f56-4c29-89c3-bba5b75ce941", "sighting_of_ref": "indicator--dfd6354e-206c-40f2-b474-c33f60b131b0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49af3717-364e-4fa7-abd9-03ae1ce2e44c", "sighting_of_ref": "indicator--9cd35522-8fbf-4d85-9afd-44c3a189868e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e11faba-d648-42c4-9e0d-4473520b178e", "sighting_of_ref": "indicator--9cd35522-8fbf-4d85-9afd-44c3a189868e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f78043-cb0c-4b33-b36e-061965bbe736", "sighting_of_ref": "indicator--5e0c8122-8a3b-47a1-b15d-8f85550f74e9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3248db-7d7f-4987-bcc2-00d2709be691", "sighting_of_ref": "indicator--5e0c8122-8a3b-47a1-b15d-8f85550f74e9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574875fd-0906-443d-ba61-dc2bb4056bfd", "sighting_of_ref": "indicator--e727f85b-5152-4348-8097-9b0db8a2a9d0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7bc7d9-6ef9-4663-b015-4bb51a956058", "sighting_of_ref": "indicator--e727f85b-5152-4348-8097-9b0db8a2a9d0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d989c5a1-c01a-4c7b-b09d-b4aca52074bf", "sighting_of_ref": "indicator--1b326c77-93f9-4f61-839d-6d60b3fe4c90", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdb1bcf-3cee-42af-9db4-b195bf825ed5", "sighting_of_ref": "indicator--1b326c77-93f9-4f61-839d-6d60b3fe4c90", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c5505a-d9fa-4119-bad0-8f86508b526f", "sighting_of_ref": "indicator--1cb65fb5-7a21-46f7-beba-9d47afc550e8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b65b6f-1318-4a6e-9528-852613927c69", "sighting_of_ref": "indicator--1cb65fb5-7a21-46f7-beba-9d47afc550e8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72918e7c-1e9e-441b-bb76-7344fbea2341", "sighting_of_ref": "indicator--417a28c8-0174-4694-ad04-14c5b8d6c592", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7752d55-2edf-4c36-9f00-4802bf348011", "sighting_of_ref": "indicator--417a28c8-0174-4694-ad04-14c5b8d6c592", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18862d8-cbca-4462-9244-a6424e445077", "sighting_of_ref": "indicator--8fd29989-63f5-4e72-aa37-40d51aaf12e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcddf154-2f85-40f3-b9b5-577e3ee1c6b4", "sighting_of_ref": "indicator--8fd29989-63f5-4e72-aa37-40d51aaf12e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c672ccd6-fb7c-442c-8b9e-3ce9da2b979a", "sighting_of_ref": "indicator--b3131981-cdec-4e97-ac9b-b1b63f11d706", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650518e2-8e75-4157-8ca4-0ae5ab981701", "sighting_of_ref": "indicator--b3131981-cdec-4e97-ac9b-b1b63f11d706", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df023cc7-1011-4a1c-983b-a38f3ed2d184", "sighting_of_ref": "indicator--aa0b9431-4244-4732-9a8e-9abaae6c93b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90037fca-2824-489a-939f-2dac215e7a7c", "sighting_of_ref": "indicator--aa0b9431-4244-4732-9a8e-9abaae6c93b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddef9247-65ae-4ef7-873f-2600c041037e", "sighting_of_ref": "indicator--997a710d-2381-4970-afe1-58b488b6c36f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bacfd4-93f2-42c3-8b14-73abcc779bb3", "sighting_of_ref": "indicator--997a710d-2381-4970-afe1-58b488b6c36f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e56dc9e-291e-438a-9b79-27dd9ee36999", "sighting_of_ref": "indicator--32e66897-211d-41b4-aac8-5d92d8928f92", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf964d0f-1a27-4799-b9ce-08cc92f2e3aa", "sighting_of_ref": "indicator--32e66897-211d-41b4-aac8-5d92d8928f92", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b0336d-b353-4a9c-a0a2-e254c517a235", "sighting_of_ref": "indicator--b65ca4cc-ab66-4145-ae34-a6be576a8fab", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0173f064-1ef7-4164-8799-1fd5836722e8", "sighting_of_ref": "indicator--b65ca4cc-ab66-4145-ae34-a6be576a8fab", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c392339-207a-4483-bd59-d09d278f8706", "sighting_of_ref": "indicator--23ebf837-cc02-4c67-9ceb-3b6dcc10da5a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db53266f-42b2-4200-a56d-afe4def290eb", "sighting_of_ref": "indicator--23ebf837-cc02-4c67-9ceb-3b6dcc10da5a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3875110c-c87e-4d28-b3b8-288a4009a5f1", "sighting_of_ref": "indicator--96146ce4-d967-4436-9702-6f0d75973ab1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b24a79b-de5a-4f51-8c03-004b7b0914a2", "sighting_of_ref": "indicator--96146ce4-d967-4436-9702-6f0d75973ab1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4102bf8-1860-4ff6-9755-4c1f9e2e13a7", "sighting_of_ref": "indicator--e58728ed-f239-40a9-9a26-1245a210f4cb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fd8bff-0642-4bf1-a687-07f71388e144", "sighting_of_ref": "indicator--e58728ed-f239-40a9-9a26-1245a210f4cb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797e228d-d840-435d-8dd2-d236d31eaf6d", "sighting_of_ref": "indicator--e8bb3a3d-a484-48fa-8543-b9b0a67ce1ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc54c515-ec4a-483d-9316-b64bba37c83c", "sighting_of_ref": "indicator--e8bb3a3d-a484-48fa-8543-b9b0a67ce1ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24818973-bd2c-4de7-ba98-8520ed3311c4", "sighting_of_ref": "indicator--300365c4-8608-47b7-bb44-37e8a272818f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0039e616-84d3-4583-8bb6-8191b8bc0f9c", "sighting_of_ref": "indicator--300365c4-8608-47b7-bb44-37e8a272818f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e5cb78-f708-4371-bcac-97b67916605c", "sighting_of_ref": "indicator--1d89edea-9d93-475a-ac1b-e32ca2dbfd2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e506518d-ab43-43e7-8c7c-2838d3d70946", "sighting_of_ref": "indicator--1d89edea-9d93-475a-ac1b-e32ca2dbfd2c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b376cf-45ac-4fd5-9dee-16824159a151", "sighting_of_ref": "indicator--85dd12fa-dca1-41e6-9d6f-45023a58268c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5e3058-b30b-4319-9dbb-4e078e37d72b", "sighting_of_ref": "indicator--85dd12fa-dca1-41e6-9d6f-45023a58268c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cc38a3-6767-4697-82ce-a08551fd0132", "sighting_of_ref": "indicator--66366617-42fc-4ac9-bb60-4c0fe67efb67", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205d3a66-6afa-41bc-840d-70cf842cc103", "sighting_of_ref": "indicator--66366617-42fc-4ac9-bb60-4c0fe67efb67", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b55db63-fcf7-41e0-832a-6952ec82529a", "sighting_of_ref": "indicator--ce89aac4-73fb-4027-a4d2-d71a92e9bd7d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2c65d0-8fb7-45f5-93a2-73472ce40c4f", "sighting_of_ref": "indicator--ce89aac4-73fb-4027-a4d2-d71a92e9bd7d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baf44e2-a3ab-4c19-bed1-17166be4db81", "sighting_of_ref": "indicator--cc31b4e4-bb2a-4689-8314-ab8b89f799c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95aae7a-9c58-4c13-a023-0b30e75d52cf", "sighting_of_ref": "indicator--cc31b4e4-bb2a-4689-8314-ab8b89f799c1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9f1f07-e5cf-4b32-ac18-168a5402763f", "sighting_of_ref": "indicator--c0c30452-41d9-475f-aab0-ab9ea76fad19", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58b5367-b64c-487b-9cab-a4fe29406665", "sighting_of_ref": "indicator--c0c30452-41d9-475f-aab0-ab9ea76fad19", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af065e3-6b85-4e36-be67-f364360b430f", "sighting_of_ref": "indicator--1510a0e4-2c12-482e-8733-451e5c92397e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8c669c-01f1-4780-bc8a-188b02c7d052", "sighting_of_ref": "indicator--1510a0e4-2c12-482e-8733-451e5c92397e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ddd025-8473-4403-87e4-51b430bf5a99", "sighting_of_ref": "indicator--b1fadb86-ca48-44c0-99c9-c103ebe78669", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a066c1df-32d8-40fd-a4a1-9cb9ce3dd1dd", "sighting_of_ref": "indicator--b1fadb86-ca48-44c0-99c9-c103ebe78669", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2765e5-8640-46d3-99c3-2fbfeb89a072", "sighting_of_ref": "indicator--255ddf79-5ca0-45c0-bce1-bb08bbfa9a35", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d507705-c5ca-46d6-8678-b3d610f29858", "sighting_of_ref": "indicator--255ddf79-5ca0-45c0-bce1-bb08bbfa9a35", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe2c9de-c52b-40de-b4c6-ade9dd6f673e", "sighting_of_ref": "indicator--3173df81-cf73-4a6b-b023-9ff1ed0e28b7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c2dd4e-e9fd-4ad7-a861-3e47a29f2674", "sighting_of_ref": "indicator--f79d2090-d1c6-4cac-ab28-42ad93424921", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d95bd7-9979-41e9-8777-0a57930c37a3", "sighting_of_ref": "indicator--c6c5f40e-6552-4657-bd29-dffa865fce5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ac42aa-26a4-404b-b090-0f8aa8265ba3", "sighting_of_ref": "indicator--749b860a-7400-4e63-82f3-8189284a3136", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0943454-bcdf-4180-b634-9243fccb357d", "sighting_of_ref": "indicator--aef2962b-58c7-417c-966f-56c8ef24c39e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c9a204-e54a-4113-a5bb-591264588ba4", "sighting_of_ref": "indicator--d58c77ac-0b6a-4963-9c67-e91d778f5d87", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea3120d-806b-4922-be55-426ed092329e", "sighting_of_ref": "indicator--e382a49e-c4fc-4fee-9f08-541de3e096a4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8480f52-816b-42e5-bc9f-3fba700d30b8", "sighting_of_ref": "indicator--ae6a42e6-cf18-4216-9574-3605537bcb0c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917b53e7-c4b3-41a7-9e68-73be36826b90", "sighting_of_ref": "indicator--63b0303c-5ca2-401a-aa9b-16d0d32a1750", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763cc1d-2fcb-4d5c-b837-44c2c137331a", "sighting_of_ref": "indicator--e784aa27-a7d8-4675-b338-854e43ecf866", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4196e1fc-845a-44fc-9ab8-ff54bda7c024", "sighting_of_ref": "indicator--4dfd63ec-35e8-4cb8-a50d-289412772ddb", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fa21c6-4b78-47bf-8937-653c5a98928a", "sighting_of_ref": "indicator--4dfd63ec-35e8-4cb8-a50d-289412772ddb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c1011c-ec55-4603-b56f-edb17dc9b55c", "sighting_of_ref": "indicator--3f7605fd-f926-4e5a-9900-65be78b7450a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d6f181-7c16-4868-b4d8-d004051ac6bb", "sighting_of_ref": "indicator--30031877-8165-4a91-a109-e4ff5b186f74", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f279d132-5931-4995-bdaf-134d920dca62", "sighting_of_ref": "indicator--1486c81b-c2ee-494b-bd21-86c7b9182b61", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d51834a-a978-4e20-8c90-c8acbdf27a47", "sighting_of_ref": "indicator--48498602-d690-41d8-b125-cf84f0c5bcf4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a127326d-c595-49b2-9d2c-9cb3b57e385a", "sighting_of_ref": "indicator--098a4cf9-22c3-4604-a558-e1f0596f3d8c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4187e8f-478f-47e2-be1c-7d3cfdafe998", "sighting_of_ref": "indicator--460093a1-2c52-4839-85c0-cb1c93e740e6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73b55d2-c2ac-42bc-88dc-0285de9714f5", "sighting_of_ref": "indicator--5ebe7c2b-09d6-4702-bd35-47d84f93552c", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba725fe0-8872-407c-a76f-78b8bfd9a496", "sighting_of_ref": "indicator--a474b0bd-b8b8-4ca0-9bc0-09691cff9e4a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e343de0b-e632-436e-8bfd-7e3c998a7d65", "sighting_of_ref": "indicator--87cf028d-3881-4e66-8fe7-b9f970465a99", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bc3c71-2be7-43fe-85bf-a8cdee7fa357", "sighting_of_ref": "indicator--87cf028d-3881-4e66-8fe7-b9f970465a99", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c218f9ce-2e0d-45a7-831c-d5f7000e1806", "sighting_of_ref": "indicator--3a8da964-3c92-4dc5-b76f-46016492f117", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f8037-24f3-4aa9-8e0e-e1b8074e38ca", "sighting_of_ref": "indicator--556ac46d-2cd0-48b0-a591-6a87c5d8271b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9b8b47-15ad-409b-b011-31581bbfed9e", "sighting_of_ref": "indicator--2462a0bf-3aaf-4a02-83a1-8cccd2915cb4", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d162fc6-18e1-4b73-95ea-d0fb933e9de0", "sighting_of_ref": "indicator--f6f6ddf5-f4ec-471a-aecc-e4ea41e8adc9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff03b73e-ab99-43f2-8701-bcf182568dc4", "sighting_of_ref": "indicator--ffc65225-3920-412d-a1e7-a2643552a60c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8807a1b5-2592-4880-9de7-17e7e1bd8b87", "sighting_of_ref": "indicator--7462773f-086a-4462-8f72-fb50f73755c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f70a9f9-e4ed-4b2b-a3d3-057f6aefa355", "sighting_of_ref": "indicator--3a33603f-a421-43b8-b9c9-c822ea6cc7ec", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb1efd8-6ab4-45e3-bb28-139f2257b367", "sighting_of_ref": "indicator--f992d1a3-1b66-4550-aab5-f3c140544e81", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f3c711-6fe0-460b-930d-d61d89199bf6", "sighting_of_ref": "indicator--c72009a1-14bc-415d-8bef-7b033b9d5b14", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828c8602-c163-4881-868f-9d8a148cc427", "sighting_of_ref": "indicator--85d8caf0-f99e-4f64-a651-f1e18fd1fb2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f75ecc-3734-4ab1-baac-07f637c55b8c", "sighting_of_ref": "indicator--4c6a2af0-9608-43fc-a110-494bdb097c74", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86ca5a8-fa5b-4813-ba2c-8b3aa9c32b7b", "sighting_of_ref": "indicator--05a2a39e-cebb-47e0-ab39-3f68a48f7fc5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb625d6-fda3-4b99-99b6-f4c5684eb384", "sighting_of_ref": "indicator--29173189-5691-42f1-a9df-f4f1bfcc75ae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27d1234-b0b6-401a-bbf0-fb07089b55f9", "sighting_of_ref": "indicator--dff03f51-244b-480a-ad1e-e21ba975e401", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8a9f19-6be0-4a6e-aabe-5349bcd476f1", "sighting_of_ref": "indicator--388305f9-3eec-48b7-aeb5-50fabde2dffb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f692bb-c5f7-4063-83d6-fc31c55843e7", "sighting_of_ref": "indicator--737d636b-e643-4604-8592-0f437974772e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c77bbec-e870-44d4-a97b-4f0db64c6c5f", "sighting_of_ref": "indicator--7aba00c4-5ff1-4222-b313-fc855b05838c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22d6d5e-54a0-4ed0-a608-d153f7de884d", "sighting_of_ref": "indicator--7aba00c4-5ff1-4222-b313-fc855b05838c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a801e-4423-4989-8564-dae4be14890c", "sighting_of_ref": "indicator--dc4ccf86-70f8-48e9-8d58-01993dd6b051", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827f7409-0e29-481f-b104-b9f2a65f1e6a", "sighting_of_ref": "indicator--dc4ccf86-70f8-48e9-8d58-01993dd6b051", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ae44a6-212c-4967-9401-b960d23ad6db", "sighting_of_ref": "indicator--57c1762d-94e2-4abd-904e-42e9db9bec6c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52256de0-1766-47ce-a7d7-16d1cce44af8", "sighting_of_ref": "indicator--c3107597-f302-4409-a887-b2c02853827a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ff1332-65ce-449b-83ac-8a76247f1293", "sighting_of_ref": "indicator--61e92ec0-b5ba-49a7-8d0c-c3e968ace7d5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512c00e0-c805-492b-8b05-62db78fff04b", "sighting_of_ref": "indicator--45420797-0005-45a7-bc2b-df561db63be6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7f2681-94e3-4101-8a39-6a6ddf321bee", "sighting_of_ref": "indicator--45420797-0005-45a7-bc2b-df561db63be6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671d6176-c18e-41c9-8e16-fbbad4a55e1e", "sighting_of_ref": "indicator--7c0b25f0-76be-4369-90b9-18b533e12a1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f05b23-c3de-4b11-8f6d-619be3bde8f1", "sighting_of_ref": "indicator--68261403-14f5-4330-8c90-71b5266e418d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed1ea8e-7795-4351-8476-2775f1be535c", "sighting_of_ref": "indicator--68261403-14f5-4330-8c90-71b5266e418d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2c8ba5-9c15-4003-8598-e93b081115da", "sighting_of_ref": "indicator--6d599193-6c36-4fd1-9649-4fe094644312", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc1abb1-4765-4046-89ad-2ce7a5ca3339", "sighting_of_ref": "indicator--6d599193-6c36-4fd1-9649-4fe094644312", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566f0c93-9996-467d-b157-ab3ab12d2a3f", "sighting_of_ref": "indicator--29d7b191-4684-4772-925f-accbd0be5b04", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67408e80-6009-476b-a91e-75d925b36bdc", "sighting_of_ref": "indicator--6219a561-26da-468d-9c4c-3eec0b6ae09c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84b7117-79da-43da-b719-59dda845cc04", "sighting_of_ref": "indicator--6219a561-26da-468d-9c4c-3eec0b6ae09c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e610fd-d8f0-40a3-8d37-a1759cdaf350", "sighting_of_ref": "indicator--40136b67-323d-4b25-89ab-d37389e16152", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b98a82c-0060-4fa8-bd74-39d02badc173", "sighting_of_ref": "indicator--40136b67-323d-4b25-89ab-d37389e16152", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4761e6-2486-479d-b003-615615e8c063", "sighting_of_ref": "indicator--b4634db3-b4b4-4123-ace7-ea8ca65697f1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080ba0dc-020b-4e78-b519-3fbf25434d5b", "sighting_of_ref": "indicator--b4634db3-b4b4-4123-ace7-ea8ca65697f1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7a532d-2352-41e6-85c6-582d87cf88d2", "sighting_of_ref": "indicator--bc8d5b3d-35f8-4791-a020-074177bd3bb4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500113d5-d6eb-4bbe-bc43-d80d7195cb24", "sighting_of_ref": "indicator--bc8d5b3d-35f8-4791-a020-074177bd3bb4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a78a326-9526-4254-8e9c-521afb6b623e", "sighting_of_ref": "indicator--e426a2cc-16c8-4cb6-a3af-b6375e225315", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1858cb65-0481-4586-9576-aea45cce3b35", "sighting_of_ref": "indicator--e426a2cc-16c8-4cb6-a3af-b6375e225315", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18575379-e45d-4692-8336-60070329c86f", "sighting_of_ref": "indicator--7af6012e-539e-4155-9f4a-a5451ddfd58c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696978a7-6a2b-4c61-96fd-d7b109dbe663", "sighting_of_ref": "indicator--7af6012e-539e-4155-9f4a-a5451ddfd58c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2c7cec-26c8-4065-a510-4788438dfa7e", "sighting_of_ref": "indicator--b523a8da-6775-4080-a2a9-f7ac608bff5f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147e8fb7-b043-4517-a10a-c11dbbfdaba7", "sighting_of_ref": "indicator--b523a8da-6775-4080-a2a9-f7ac608bff5f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70825ce-b23a-431b-8151-60c106b09990", "sighting_of_ref": "indicator--dc3157ab-db36-4768-8f34-d4c3a87456eb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdfba02-24b6-427f-b07b-3886a22871ee", "sighting_of_ref": "indicator--dc3157ab-db36-4768-8f34-d4c3a87456eb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4f7bfc-4dbb-4281-b102-a55b09e8015b", "sighting_of_ref": "indicator--2b32aa14-6b43-4f9b-b001-393458c12317", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7f66e-3c7f-49b6-ac5c-1dde2ad1f790", "sighting_of_ref": "indicator--2b32aa14-6b43-4f9b-b001-393458c12317", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688ae6ee-dab1-4809-a8d6-a90dd8d3588b", "sighting_of_ref": "indicator--32a4bcb4-e89b-4071-87b0-d142c4b1e62b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65456efa-d3ac-4ea2-ae8d-96e083c39cb3", "sighting_of_ref": "indicator--32a4bcb4-e89b-4071-87b0-d142c4b1e62b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799137c2-0a0c-48bc-83c4-d2cf15a137e0", "sighting_of_ref": "indicator--b2978632-5786-47c0-ace8-b4b785d1a022", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2148c8b1-f23d-412c-9b28-3b5eba777660", "sighting_of_ref": "indicator--b2978632-5786-47c0-ace8-b4b785d1a022", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2579bd97-b4c2-4ad3-b73a-3249c864dcfc", "sighting_of_ref": "indicator--b97675c7-267f-4623-8ae2-7b49a36fb55e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9cd7fd-9abf-44a0-81d1-a7157d58c8e6", "sighting_of_ref": "indicator--b97675c7-267f-4623-8ae2-7b49a36fb55e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cd5934-c7d0-4a8c-a127-ad769016ca6c", "sighting_of_ref": "indicator--447cafe1-09e8-488c-bab9-ae6e988f0130", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98253084-3ac7-4fd0-9134-529cff66221f", "sighting_of_ref": "indicator--6b4aff6d-ff2c-4d33-aa52-bae18dfa8ef5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3978e635-180d-4a43-83f8-ac5fa2fed105", "sighting_of_ref": "indicator--87acb628-acfa-4055-913c-bde792ef18cc", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffa8a69-1f67-49e7-81c2-2865897b3829", "sighting_of_ref": "indicator--754fd9d7-a70c-4eee-b679-5f55a818058d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2391a85-8585-49a1-a0a2-2257dc7e0900", "sighting_of_ref": "indicator--3f578aed-d022-4f14-ba0d-78d9891f9550", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cfc9df-8a69-49bb-b118-03f66a751f8b", "sighting_of_ref": "indicator--ca5384bc-eb41-411b-8d83-9640e862910f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b3986e-8f34-47b1-92c3-bd76d2fd7751", "sighting_of_ref": "indicator--5f9de56c-70f1-4dfa-8429-62b21c39e174", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40953d3f-48fb-4cd3-9d09-709928c48e5c", "sighting_of_ref": "indicator--fcb03f2c-ad89-4763-b459-f278a2917ed8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fad6ef-7165-41fc-93df-d088cbce471b", "sighting_of_ref": "indicator--fcb03f2c-ad89-4763-b459-f278a2917ed8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70328fc3-213a-41fb-aa64-0d3805cab9c1", "sighting_of_ref": "indicator--323d591e-11a5-42ad-83ce-c758527d7555", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa849071-c9ea-4b13-8532-23090a2c9e62", "sighting_of_ref": "indicator--323d591e-11a5-42ad-83ce-c758527d7555", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910b9003-dd9d-486a-bcb3-0c3a8ceafef4", "sighting_of_ref": "indicator--62535e45-d974-44ac-b063-a03eee65e5c2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac87ec6-97f4-40a9-b355-18c2fd615605", "sighting_of_ref": "indicator--62535e45-d974-44ac-b063-a03eee65e5c2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dea0a2-f2ea-4183-972e-22e084a3268b", "sighting_of_ref": "indicator--77844f37-01f2-454a-a17b-13f962d8e28e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bf612e-6ed2-4949-91d5-377c4dc791d7", "sighting_of_ref": "indicator--77844f37-01f2-454a-a17b-13f962d8e28e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34374b90-5b5e-4a38-bd34-eb05c5221271", "sighting_of_ref": "indicator--b3db98f7-786f-4452-b84f-c21883832638", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8969c12f-a895-4607-a3d5-15b11ab6c91b", "sighting_of_ref": "indicator--88e02ae8-431c-4a88-9d23-651cd3a55fa6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df6d8a5-35c2-4bed-a4f8-4e1072e2ad6a", "sighting_of_ref": "indicator--6623ab38-8797-4155-b821-9b23b17a37b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0aa4e9-c020-4df1-9de2-9b6085e9ba36", "sighting_of_ref": "indicator--9d8460d4-1c14-4032-9a99-325f8be9106e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8481386b-e9b0-4271-92bf-5e3608988e3d", "sighting_of_ref": "indicator--9d8460d4-1c14-4032-9a99-325f8be9106e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d206fa49-2e58-4907-a84d-f0f983e2ea01", "sighting_of_ref": "indicator--c6a40164-9510-4185-b269-1457ec739c34", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea807ce3-64f3-4537-840d-e597bedb3487", "sighting_of_ref": "indicator--c6a40164-9510-4185-b269-1457ec739c34", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c05dad4-1fa3-4af6-9d3b-a59295dcce5a", "sighting_of_ref": "indicator--7ef96288-19dc-4f4c-bc7e-ab5c6a45dc22", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1ba165-19a2-4bdf-85f6-85286c56c64c", "sighting_of_ref": "indicator--7ef96288-19dc-4f4c-bc7e-ab5c6a45dc22", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a14b2c8-26d4-448c-aece-6740c16f401f", "sighting_of_ref": "indicator--b059c3bd-cf6f-4e3a-886f-e4eb432d2a54", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161d59e2-bd1d-4b13-8b85-323f4209b3c4", "sighting_of_ref": "indicator--b059c3bd-cf6f-4e3a-886f-e4eb432d2a54", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb41b7d-bbf0-4b1d-9796-2f28b526e793", "sighting_of_ref": "indicator--ad9738cd-93f4-4184-b87e-4000e7ff3faa", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c95c4e-ffd9-4148-be2b-eb2bbae50c73", "sighting_of_ref": "indicator--ad9738cd-93f4-4184-b87e-4000e7ff3faa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b597a27-4682-4509-8e95-59a5a6d52c87", "sighting_of_ref": "indicator--ab07680e-0171-4d2e-a781-4b357a3e8acd", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c37885f-8920-4112-b325-facf5543414b", "sighting_of_ref": "indicator--478f13bb-7df6-4c67-ba28-00703f32b272", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a301f9-20eb-4c98-82bf-135597f8dc46", "sighting_of_ref": "indicator--097be3c3-69ce-43e9-8fce-dfeb811ee399", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66683d6b-e72f-4301-89fe-289bf8027494", "sighting_of_ref": "indicator--901570a7-4b67-4397-bd85-6d1391b8f674", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e0f44-7686-4acf-b69e-c708247b7c37", "sighting_of_ref": "indicator--41846318-18ea-4ab9-9876-a567de9ba059", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90475f34-e3f7-4d08-8146-0147ca333b0f", "sighting_of_ref": "indicator--c0c79512-43e0-4cd5-bd06-5040e17530fe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267fc34e-c1fa-473c-b1eb-fb549f1d67f1", "sighting_of_ref": "indicator--c0c79512-43e0-4cd5-bd06-5040e17530fe", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6db3576-411b-4e7c-a6e4-dcda3848b3de", "sighting_of_ref": "indicator--bfc50328-a694-466e-b664-ca9ccf02977a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95786a49-4a92-4a9e-98ba-a2379e0884a0", "sighting_of_ref": "indicator--bfc50328-a694-466e-b664-ca9ccf02977a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a1b8b1-f04f-42d0-a80b-4d6e7e1dfb53", "sighting_of_ref": "indicator--c2443427-09b4-4adf-a283-9869628f5ea0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec55158-c57e-4d64-a1b5-e9bc2155fd43", "sighting_of_ref": "indicator--c2443427-09b4-4adf-a283-9869628f5ea0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196f133-327e-48e9-98e3-fa5a1e23ee97", "sighting_of_ref": "indicator--00b00f5b-c442-4e15-82dd-92b0c72b31f8", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4fabcc-500a-412d-9fbe-2b7dd354a080", "sighting_of_ref": "indicator--00b00f5b-c442-4e15-82dd-92b0c72b31f8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0095f66-0a4a-471d-bbb8-b8b62fb392e9", "sighting_of_ref": "indicator--9ffc793a-17fb-4645-85af-0eb7f4af5a1d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9935331-78fa-485a-b054-5b68e724d070", "sighting_of_ref": "indicator--9ffc793a-17fb-4645-85af-0eb7f4af5a1d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ac4678-8d8e-49e5-893a-6d8cd6222241", "sighting_of_ref": "indicator--4186bdb3-dc70-4d09-b288-26f6aa020423", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47022c85-14df-4a4c-b3ce-b0c73405d41a", "sighting_of_ref": "indicator--4186bdb3-dc70-4d09-b288-26f6aa020423", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ad50e0-247d-4512-b845-ffa62d1ab99c", "sighting_of_ref": "indicator--41108f6a-63c0-4684-b2a2-0004a5be11a7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde6c635-cb2d-4caa-bc7d-a3d2b32bb291", "sighting_of_ref": "indicator--40ca9bcc-225d-42ce-9cea-a4e88a9d97e3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e23bdb9-1da8-4f97-bd71-5dd420054aec", "sighting_of_ref": "indicator--40ca9bcc-225d-42ce-9cea-a4e88a9d97e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c4bb38-0aee-4c58-946b-71706e297014", "sighting_of_ref": "indicator--3cae1118-6e08-4423-ad82-0de77e00eae7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eca2a9-7eef-4853-9dbc-aae97b8fbeda", "sighting_of_ref": "indicator--fa1e16b8-cc6e-4f58-a6aa-1a910a560f16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586567eb-1714-4010-bd1e-833b393e3801", "sighting_of_ref": "indicator--49a75177-70b3-422f-b263-868d59a12136", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f4ad75-888b-4ae0-95cb-ce3ba1642ce5", "sighting_of_ref": "indicator--49a75177-70b3-422f-b263-868d59a12136", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ba361b-7278-4291-81e3-f05e4f5af95b", "sighting_of_ref": "indicator--96081199-63df-4240-a770-c687f2715bde", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea89a93-9e0d-4bfc-b11f-f801c4369429", "sighting_of_ref": "indicator--96081199-63df-4240-a770-c687f2715bde", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3402e849-bc57-47c4-81d5-efaf1837ae76", "sighting_of_ref": "indicator--370cc9f2-c150-4679-8f79-193d82ca49fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92390cb5-503f-4a67-bb59-6322779bc197", "sighting_of_ref": "indicator--d50fae11-8ba8-4c63-9493-daeaf48d9b0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d69780d-8726-4b98-8c99-4413892330c6", "sighting_of_ref": "indicator--a3fe01e2-3205-472c-b266-d2e23d61144f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833391e4-ee59-49f4-8cb9-a759304f1ec7", "sighting_of_ref": "indicator--ad7e3577-8459-4d45-a8e0-d4e72372914f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29fad8e-bcf5-4624-9fa7-a697d37ea8ec", "sighting_of_ref": "indicator--ad7e3577-8459-4d45-a8e0-d4e72372914f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82784504-bc80-4369-8ca6-55259058ac9b", "sighting_of_ref": "indicator--60439f57-dd05-4f22-86e7-cad810473237", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db744ed-e5fa-4c17-8c40-c1d2f0ece826", "sighting_of_ref": "indicator--771aca70-9972-47fd-b444-aa471aba9862", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f125b00e-83f3-4879-89bb-9ff0553e5201", "sighting_of_ref": "indicator--ede3a6ff-b3d9-4a3e-ae0a-ab26de12c346", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d4e416-c1f4-42a3-a713-97ab2ab67913", "sighting_of_ref": "indicator--ede3a6ff-b3d9-4a3e-ae0a-ab26de12c346", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0ca074-1658-4a2a-a8dc-88f011641986", "sighting_of_ref": "indicator--5d5e4202-d9c4-41b1-9135-212298af2c16", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb072fd-7ceb-4e06-8f33-2fceee2c242a", "sighting_of_ref": "indicator--369e0aba-4b5c-4156-883e-e6e70759ddb0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd123621-931f-4815-b1f8-28ef1b3f59e4", "sighting_of_ref": "indicator--369e0aba-4b5c-4156-883e-e6e70759ddb0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537d61c9-c9f9-4452-acd6-5c166e753b67", "sighting_of_ref": "indicator--708f7762-c705-4edb-8967-939d7bf03d24", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cd0323-fbe3-41ff-8ab6-4e7e0798a808", "sighting_of_ref": "indicator--708f7762-c705-4edb-8967-939d7bf03d24", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d7cc0a-da5f-458f-bb64-26ba83d629e6", "sighting_of_ref": "indicator--c88e2299-8ac2-4812-b5eb-af385477fe7f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249dfc10-1403-452f-ab8c-00ff5f4b4d2c", "sighting_of_ref": "indicator--c88e2299-8ac2-4812-b5eb-af385477fe7f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df93433e-0d0d-46fe-b547-153a88be470e", "sighting_of_ref": "indicator--11625537-62d6-4936-8fed-5de71d9a0ec7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816e8a1b-9171-4494-b5f4-dc59a277825b", "sighting_of_ref": "indicator--708f8392-0d76-4aab-a9d8-e63b2a975dde", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e57991b-24ce-457f-82ae-ec0c57798d3f", "sighting_of_ref": "indicator--708f8392-0d76-4aab-a9d8-e63b2a975dde", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b97c38-0072-4cdf-8e40-a79799c4121a", "sighting_of_ref": "indicator--47df6390-8ca3-44a4-b6c8-98b24f706749", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d06b3b9-98af-4b70-b977-dbcd960cb631", "sighting_of_ref": "indicator--47df6390-8ca3-44a4-b6c8-98b24f706749", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec10c32-4bb5-4cb8-97a3-3f7a0976a6ee", "sighting_of_ref": "indicator--eca3c57c-6c9a-488f-ac6a-8b42e6f1250a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb1a715-2c04-4bab-9fe0-08d9868f96c3", "sighting_of_ref": "indicator--eca3c57c-6c9a-488f-ac6a-8b42e6f1250a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b18e75-3b00-4d74-9f14-67b2d7242a53", "sighting_of_ref": "indicator--ccbd7769-b7fc-4fef-8b8a-1d19ca1294e3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d053ed-28f5-4e09-91f0-a59cede619c0", "sighting_of_ref": "indicator--674f7d2a-3765-49de-98e5-94190a4a68a0", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0be08b5-19d3-4091-91df-5bd9bcb29a06", "sighting_of_ref": "indicator--b42f8aab-08b7-430e-ad84-a0cb934b8584", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d311f6c3-35af-45b1-aae1-b1e77b2c833c", "sighting_of_ref": "indicator--b42f8aab-08b7-430e-ad84-a0cb934b8584", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7960af2-548e-4023-9c6e-7d5417e2852b", "sighting_of_ref": "indicator--7e1afafc-a656-4f08-b54e-c04230735833", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79eed1b1-db06-4c70-ad2d-690c75994a19", "sighting_of_ref": "indicator--7e1afafc-a656-4f08-b54e-c04230735833", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d506392e-309f-4b7c-8164-ac7470104acc", "sighting_of_ref": "indicator--a857c033-a050-4bb9-9e5a-965a80f39556", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fb0457-4a0b-442c-89e2-1fe479468291", "sighting_of_ref": "indicator--a857c033-a050-4bb9-9e5a-965a80f39556", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b5e11-64b6-42d0-85b5-22ecbf9c7996", "sighting_of_ref": "indicator--56bbd2ff-a95d-4a4e-bc48-0610875dc3f4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbeb7a6b-bd2d-47d7-89cc-098139a2d815", "sighting_of_ref": "indicator--56bbd2ff-a95d-4a4e-bc48-0610875dc3f4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc70b2b-f838-406c-bc15-afc62f27f3ce", "sighting_of_ref": "indicator--091fe84d-54a1-48e3-ac26-cd4c59b04c13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7389979-1c55-440f-b2cc-bf6c9f5b1cde", "sighting_of_ref": "indicator--091fe84d-54a1-48e3-ac26-cd4c59b04c13", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17adfb5e-f0ca-4a4f-aa9f-af0c0d9b4e9d", "sighting_of_ref": "indicator--96f7d4c7-9158-4a28-bfea-f7ae11ac89f3", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec358358-8556-44a2-938d-506e99b269dc", "sighting_of_ref": "indicator--96f7d4c7-9158-4a28-bfea-f7ae11ac89f3", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc6028a-2060-4b75-9d85-772d80a8840f", "sighting_of_ref": "indicator--7bca3ee7-20bd-46e9-bafa-bbff320caf6d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dda05a9-f94e-493f-b074-aa8aaa6a1df1", "sighting_of_ref": "indicator--2f0c0fd5-36f2-4aa5-9c3c-fe9afc10cd44", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef45311-2664-466f-9603-8cb0ee328b29", "sighting_of_ref": "indicator--7310fac0-7762-4305-88c9-b619a8a40f6c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475c2297-aed4-4bb9-ac2c-8a6a39cb6d76", "sighting_of_ref": "indicator--9a94376a-7f13-4aef-8602-ad8a46ff9697", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a43f83b-2edd-424f-9672-609f6bde87b8", "sighting_of_ref": "indicator--85d5d053-1dcb-4172-b7bb-539f82e0ed13", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d457f56-039b-4f83-9ffa-4b59dbba4073", "sighting_of_ref": "indicator--57c0b607-d2a7-4e25-a64e-31f52375b662", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae741423-76c9-4331-a765-faf91756484d", "sighting_of_ref": "indicator--dc42d664-7ae1-4699-a2dc-46c9569d2706", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44d841a-ee67-4f24-be63-f3753e9f54fa", "sighting_of_ref": "indicator--1faae2c2-aed9-45ff-8793-76805ae4db5e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b573a5-5c5a-4641-980a-cbf0eab094bb", "sighting_of_ref": "indicator--1faae2c2-aed9-45ff-8793-76805ae4db5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ba09f8-f03b-4ddd-a4e1-fab8381d2e3b", "sighting_of_ref": "indicator--b6b915ce-7edc-4dde-98be-749f27cdb7aa", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ba4248-663c-413f-bd0f-32356facadee", "sighting_of_ref": "indicator--621da1a5-2d8b-4cb2-bee3-34687a1f71dc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b01317-3eb2-46a4-b05d-99b35a76b906", "sighting_of_ref": "indicator--8c30885b-bcc8-4dd3-8b25-bd8bd5f2478a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ad047-0bf2-4d55-86c5-6b29ad73f107", "sighting_of_ref": "indicator--8c30885b-bcc8-4dd3-8b25-bd8bd5f2478a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b685c3-9e30-449c-a7ac-8401602e5969", "sighting_of_ref": "indicator--26f07e95-ca67-4534-abf3-eb1ee4d89a79", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce137843-3948-4d9c-8ecf-0bd9496bf748", "sighting_of_ref": "indicator--e815eef2-d5e2-496a-8752-cfb37cceaa83", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a35d47-1c5b-49cb-8716-9e84888d1b72", "sighting_of_ref": "indicator--a7b01c1a-5eb1-448f-abdc-9156391e7b2c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7f4537-f298-4ea6-9791-df359113787a", "sighting_of_ref": "indicator--b3a10163-527a-4718-865c-1057065de17e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6622bbde-e445-4425-91b4-54f7e4dfc12b", "sighting_of_ref": "indicator--b3a10163-527a-4718-865c-1057065de17e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa658f7-3f83-469a-997d-8fa070434e41", "sighting_of_ref": "indicator--02f275ab-adea-45ca-9e68-529bf822059d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682071b9-4a97-4783-acd1-41fbdc5be6d2", "sighting_of_ref": "indicator--02f275ab-adea-45ca-9e68-529bf822059d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86b4ffa-309c-4d08-96f5-f5dc581705e9", "sighting_of_ref": "indicator--f1133710-ad50-4ada-b257-1bf76e4b9516", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6281a773-a73c-4647-a2ca-9e6b6dd2de91", "sighting_of_ref": "indicator--f1133710-ad50-4ada-b257-1bf76e4b9516", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2927c84b-697b-40c4-9b8e-e73f26a31e96", "sighting_of_ref": "indicator--635c3965-de1c-4dca-8bf6-dc0f86c460da", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4477655-6d12-4e70-ade1-407fada63a6f", "sighting_of_ref": "indicator--635c3965-de1c-4dca-8bf6-dc0f86c460da", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fbb47a-9e46-4db4-b7cf-8d72fd70eae3", "sighting_of_ref": "indicator--7f3c4ec4-ee21-4057-af1d-a1219ee2ebda", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f17d6-4787-4797-b9d1-213739e24dac", "sighting_of_ref": "indicator--7f3c4ec4-ee21-4057-af1d-a1219ee2ebda", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c121f0-13ae-4b4b-b073-36260559bbd5", "sighting_of_ref": "indicator--40b41ee9-7793-478c-b722-c0b8a32af0e4", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95613f65-0d97-45a3-9313-7298cd05a15b", "sighting_of_ref": "indicator--40b41ee9-7793-478c-b722-c0b8a32af0e4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdd8d8c-62fa-4514-8ba9-cbcf5af33fc2", "sighting_of_ref": "indicator--6c1f134f-2228-40b8-8574-4d599bd9cf3a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060ece5b-2ea1-469b-b2ae-c3d964e94cd8", "sighting_of_ref": "indicator--6c1f134f-2228-40b8-8574-4d599bd9cf3a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d128b07-7a43-4b69-8210-3fe335eab492", "sighting_of_ref": "indicator--5a09faa8-c29a-4afa-a879-32897a05c983", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77437f9c-cf8c-44c2-bba0-33aa04dd1801", "sighting_of_ref": "indicator--5a09faa8-c29a-4afa-a879-32897a05c983", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a7567c-545e-48da-8dd6-7be58b88c6dc", "sighting_of_ref": "indicator--0621fa9c-4b5f-4aba-baf5-4be3b2b92bcf", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baac3c1-7ecb-4d29-b528-a2da8a7c009c", "sighting_of_ref": "indicator--84ac7688-8400-41ca-8b92-51c2a3846aa9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4caf0bf9-42e4-4ecc-b953-038fd6a02dc6", "sighting_of_ref": "indicator--84ac7688-8400-41ca-8b92-51c2a3846aa9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a5dcbf-9114-463b-b9cc-d5cc7f927f9b", "sighting_of_ref": "indicator--b25eee85-9bf7-4587-914d-1382ef8913c1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c80a40c-c628-4160-acb4-6324a08259b4", "sighting_of_ref": "indicator--a68843d6-9e00-4d3b-8dd4-b10d6bcf5acb", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b9fe8-6c54-4631-b980-880c9403ee59", "sighting_of_ref": "indicator--a68843d6-9e00-4d3b-8dd4-b10d6bcf5acb", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43de4f4e-a332-45b0-aa49-3b45dfc5d092", "sighting_of_ref": "indicator--6bf271a3-12ca-48e0-beaf-a0bf14734e31", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a217bd1-4299-41f1-9f94-7bd47d72ee68", "sighting_of_ref": "indicator--6bf271a3-12ca-48e0-beaf-a0bf14734e31", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846c0427-4d10-4ef7-8ebd-14f1a33e6f09", "sighting_of_ref": "indicator--a24ae6f5-6560-4533-a851-7221bfcdd927", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a63cae-a711-4cfa-a830-8fcdeaef144d", "sighting_of_ref": "indicator--6838fd7f-40f3-4e9d-adf9-5ab30f72e222", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6687c87d-da30-4105-8bd7-3ddfd7e656e5", "sighting_of_ref": "indicator--47884ddb-42ac-42c1-8b55-db22e23af9ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868dd284-6790-4858-b960-89b8e15441c4", "sighting_of_ref": "indicator--47884ddb-42ac-42c1-8b55-db22e23af9ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8837ea8e-5a66-4a45-ada8-051b20b40645", "sighting_of_ref": "indicator--dd2d9189-83bc-486b-b0ba-7528ed0dbd0b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3fa221-5bb3-4693-be66-c3e0156dad44", "sighting_of_ref": "indicator--dd2d9189-83bc-486b-b0ba-7528ed0dbd0b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e89a33-a636-4683-8bc8-01f47ce3ed9c", "sighting_of_ref": "indicator--49ab6f01-c5a4-43ce-ba5e-3188c70546a2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b4bb82-5b41-4f30-b772-1981e66b588a", "sighting_of_ref": "indicator--7c9e3bd6-c238-48b4-8813-5bbf16fd0306", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d1c763-ccb0-4313-abe3-646ea6f65ec4", "sighting_of_ref": "indicator--7c9e3bd6-c238-48b4-8813-5bbf16fd0306", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7de3fc-8db1-434f-9fae-49940603423a", "sighting_of_ref": "indicator--e7589f8c-21fb-4862-8592-1771945c2261", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264ec0f-e11d-497e-869e-5a7464c3163d", "sighting_of_ref": "indicator--23968b67-1a17-4ae7-988f-d6539a1fb945", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a82f5c6-23b9-4d04-a319-ad9b8f0c47a0", "sighting_of_ref": "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4eaae1-8bdf-4ae9-aa2d-6ed34829e03f", "sighting_of_ref": "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e8f47-4913-4fe9-b96c-d47fddfd0837", "sighting_of_ref": "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a3de7a-84eb-4138-ab54-64339fbecac1", "sighting_of_ref": "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddc8a81-5418-43f4-93d2-490677fad6a8", "sighting_of_ref": "indicator--9b9eacf6-9aa0-4a58-bd18-85c2da1e0431", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd03436-0e4d-4ad5-8c0b-e9e4151cfb61", "sighting_of_ref": "indicator--9b9eacf6-9aa0-4a58-bd18-85c2da1e0431", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f80b7-27df-49bf-9f97-5fb49b81dd72", "sighting_of_ref": "indicator--9b9eacf6-9aa0-4a58-bd18-85c2da1e0431", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ce6598-e430-4f33-beb1-4cae6387c113", "sighting_of_ref": "indicator--63cc57f4-e31b-49b7-8640-dc84cac9d7d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1863b41c-7292-4385-8b51-83fab7828efe", "sighting_of_ref": "indicator--63cc57f4-e31b-49b7-8640-dc84cac9d7d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b7d9b-33a1-47a4-8904-2e010067ed1e", "sighting_of_ref": "indicator--63cc57f4-e31b-49b7-8640-dc84cac9d7d9", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189ca241-4058-49f4-a7d2-d0236c89bf23", "sighting_of_ref": "indicator--ac220dd5-10c1-4f90-8669-ff261fece2af", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cceefcc-b6be-4b65-b66e-0ca155b027a5", "sighting_of_ref": "indicator--ac220dd5-10c1-4f90-8669-ff261fece2af", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73828f85-d9ac-4365-abb5-8fac92305061", "sighting_of_ref": "indicator--ac220dd5-10c1-4f90-8669-ff261fece2af", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32be6b05-3cdc-4243-beab-6bb65b51d86e", "sighting_of_ref": "indicator--c15d8372-ab1c-4828-9cfa-7ce00390b1d9", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f78445-8fd6-42c6-a60a-cde62a9fa408", "sighting_of_ref": "indicator--c15d8372-ab1c-4828-9cfa-7ce00390b1d9", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942865e2-1a8e-45d5-bc23-2bb519ed387c", "sighting_of_ref": "indicator--c15d8372-ab1c-4828-9cfa-7ce00390b1d9", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2672b169-4470-48fe-816c-4ba846ddd52d", "sighting_of_ref": "indicator--dfb8efda-3422-4d38-a20d-9eaee6dc2240", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f28321-8631-4ef3-a55a-9ef645f16a71", "sighting_of_ref": "indicator--dfb8efda-3422-4d38-a20d-9eaee6dc2240", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f673c1a7-4a18-4462-ae0d-f439f3892b36", "sighting_of_ref": "indicator--dfb8efda-3422-4d38-a20d-9eaee6dc2240", "where_sighted_refs": ["location--b8bac290-78e1-439d-b2bd-c61e28d8e882"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ca5cc5-5002-421e-aa98-dbd3cb4c40e4", "sighting_of_ref": "indicator--56d7756a-ddd2-40d8-8160-19377b39c09a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818608a4-2b04-4950-b03d-a75ee3fc3f84", "sighting_of_ref": "indicator--3876994f-88c1-40f8-9870-c3b16ef8cb16", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2026c401-4232-4f78-8ca2-88b4a626258b", "sighting_of_ref": "indicator--d74fdd7a-ba81-4e3c-acef-17f978f195a1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11da47c-d71f-4853-8b5d-538138b46226", "sighting_of_ref": "indicator--f9d6428f-d711-4ae8-b2d7-e0f578f0dbce", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f180b01-405e-4ce2-ba9f-7f385fe54c47", "sighting_of_ref": "indicator--f9d6428f-d711-4ae8-b2d7-e0f578f0dbce", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8a1cec-b041-41b9-8b94-1c8c2e4003d0", "sighting_of_ref": "indicator--6686ab0b-0537-4068-81a8-030dbadab9d7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86047dfc-1122-44fa-ae4a-e59d093aa9fe", "sighting_of_ref": "indicator--6686ab0b-0537-4068-81a8-030dbadab9d7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d99a9d-4b3d-40ea-8aad-bfcd71c5aaf7", "sighting_of_ref": "indicator--034f8ad6-bfde-4cc8-90cb-d1c41c83f24f", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0e4495-60be-4320-85fa-453a0c649289", "sighting_of_ref": "indicator--034f8ad6-bfde-4cc8-90cb-d1c41c83f24f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ccdf88-8e59-44fb-9377-6760ba28f42f", "sighting_of_ref": "indicator--00b1d166-9b33-48b8-89ec-f026128626ed", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35879433-4f20-472b-a074-13370a5c73fb", "sighting_of_ref": "indicator--00b1d166-9b33-48b8-89ec-f026128626ed", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a42c44-0852-4066-99b2-b84aa5ed4c60", "sighting_of_ref": "indicator--3c22a425-fcda-4a4e-9fea-59ce212ab732", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a2184c-f7be-4ff9-b7c3-274e2f4d1de0", "sighting_of_ref": "indicator--3c22a425-fcda-4a4e-9fea-59ce212ab732", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6e40b5-a031-452b-8c39-242f6b23c4c7", "sighting_of_ref": "indicator--872a1af7-71df-45cd-8ce9-cf67e2c397b1", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e013396-7dd3-4d42-906f-d04de039dd32", "sighting_of_ref": "indicator--872a1af7-71df-45cd-8ce9-cf67e2c397b1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bac2ef-cff1-4597-9df4-dd1837df9558", "sighting_of_ref": "indicator--642483a3-1759-41ed-aa5d-9f60bd4a2f26", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2467883e-bdf5-4bdd-b1ef-e08ed97b877d", "sighting_of_ref": "indicator--7f00c812-aef6-42ab-af97-76a3a775a900", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0f820f-9a6e-4120-a527-91e9eba0844f", "sighting_of_ref": "indicator--15831968-059e-4828-967e-338ac2cf8e6e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16114b16-28bb-4af4-8996-2ae5831fa4aa", "sighting_of_ref": "indicator--45c4ce19-9bfe-4a2d-8111-1ae5d9fea8fd", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbfcc80-5b5d-491a-8851-b857fd0b84f7", "sighting_of_ref": "indicator--01dbf3f1-dbe1-4578-b5e7-94db15eb72c5", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd16845c-a5bb-440f-9f4a-2469ae1cb33d", "sighting_of_ref": "indicator--01dbf3f1-dbe1-4578-b5e7-94db15eb72c5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd29848d-8421-4cb5-b0bc-57708063f564", "sighting_of_ref": "indicator--f42f9604-757e-4cff-b4b8-fac0b233c459", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e5db02-d96a-4cd6-90ea-c06e21c24086", "sighting_of_ref": "indicator--30c4b721-13d6-4c95-8cee-c0a7c572375f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5565a4f7-f889-4aba-a5d9-128df023f17c", "sighting_of_ref": "indicator--7c3cd585-c2cb-4e33-88f1-b87c3fd90e5e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f1fb64-e4a7-4e06-933a-c0e5d7559afe", "sighting_of_ref": "indicator--9af70fdd-a9b8-4a2e-9d12-bf7077251d85", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e44a77a-c5e4-48ca-a5c7-ae577e6b7eee", "sighting_of_ref": "indicator--10e9a654-0e6d-47a6-932f-1c96780f6417", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40842784-3953-4c9c-b9ca-b1014469898f", "sighting_of_ref": "indicator--8659953f-692e-4a50-b023-9073237fab8b", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71189405-c2ae-4d61-a72d-d467d24062b3", "sighting_of_ref": "indicator--0efb4358-5784-4fc4-a38d-171149e944a5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ac1256-a6ef-42e0-81b6-fc8073d17078", "sighting_of_ref": "indicator--945c57f5-f262-4013-8f34-ce896b798437", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b607955d-7c3b-4be0-ba43-527ac5795706", "sighting_of_ref": "indicator--b29187de-a667-42c0-b683-91e3d457de9c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819005c9-553e-4ab9-889f-daa5e930f70d", "sighting_of_ref": "indicator--aec8482f-9499-4bf8-b958-c0bfca9e8414", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e09fb3-8948-467d-8594-f910aaead5de", "sighting_of_ref": "indicator--90355be9-55b8-4523-b2d7-243256a81ee1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44bc583-9368-45c3-9ecd-b6cbff32089d", "sighting_of_ref": "indicator--9debb46c-147c-4bbc-afc7-eaf59aa454fc", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3f5e2b-29bd-4f0a-996c-ee75e1fd464f", "sighting_of_ref": "indicator--808f8746-c74f-4067-991c-3382a8413833", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2db2083-fba5-4c89-b210-eb87c848deb6", "sighting_of_ref": "indicator--808f8746-c74f-4067-991c-3382a8413833", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02293025-1403-4124-adf8-550abaaf5422", "sighting_of_ref": "indicator--baf7db4c-1a23-4d14-93c3-7473bdd43229", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4da456-7b61-45b0-bef5-baa63c76cda0", "sighting_of_ref": "indicator--baf7db4c-1a23-4d14-93c3-7473bdd43229", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c3a12b-6da8-4398-91b2-c87ae66a3b60", "sighting_of_ref": "indicator--7c23d9e9-07c8-4d44-bb3e-dcc74aab7d15", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ef50fd-06cc-47df-b27a-c2ec51280763", "sighting_of_ref": "indicator--b3e3e898-4e15-4a1b-a2b4-0a4a24ff4045", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b09c67-1db6-45d5-83ac-c1db7d2e5689", "sighting_of_ref": "indicator--0f29d320-1c1e-4d21-a6c3-58578669c994", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169e128a-b803-47b9-9660-511312273b56", "sighting_of_ref": "indicator--0753582d-c6b0-42ad-932b-4a0f98adb3d2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa54367-c3fd-445a-8d3a-1bb109e0eac6", "sighting_of_ref": "indicator--0753582d-c6b0-42ad-932b-4a0f98adb3d2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba059b8e-5f5d-48c5-ba48-e3fa11b07392", "sighting_of_ref": "indicator--394243ca-2c14-4e40-8715-beeb7ae46285", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec4b7c5-508a-44d9-bbce-06666e962c4b", "sighting_of_ref": "indicator--394243ca-2c14-4e40-8715-beeb7ae46285", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4cb506-1ee4-4c6f-acde-dedd55f939bc", "sighting_of_ref": "indicator--dbaece80-130c-4e40-a600-ca370aece489", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7eb2e0-d5e8-4a0a-ab0c-05b32aa1044a", "sighting_of_ref": "indicator--5a49de61-45d5-4088-894d-cddd1d4c6583", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5f29dd-ea0d-46e2-a38a-887a34707070", "sighting_of_ref": "indicator--dd358099-e6e5-457c-9660-a50f4d31b679", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bef6dda-7e72-4623-93a1-f6b07caf9cb6", "sighting_of_ref": "indicator--dd358099-e6e5-457c-9660-a50f4d31b679", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cd86e7-8222-4252-9b1d-92db4f96a778", "sighting_of_ref": "indicator--7fd933e6-3e56-4f45-81b0-d1ca4fa87277", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb478849-841b-464d-ae96-a9fc6ee262c2", "sighting_of_ref": "indicator--2dde5aff-52a5-406b-a908-b79badb5bb57", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf97c0a-c1a6-435c-b5b9-f031b80fa2db", "sighting_of_ref": "indicator--2dde5aff-52a5-406b-a908-b79badb5bb57", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc0a405-e8f1-4123-b7a5-eea8d368c8ec", "sighting_of_ref": "indicator--75e3ac47-ea06-4723-874f-39c6e57eb07a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb063322-b467-4a8a-a4a8-9d9693097656", "sighting_of_ref": "indicator--fee409a4-1227-4141-8839-777fc019ff1a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5174c3d0-d76c-4e11-8567-8eff9d750b7b", "sighting_of_ref": "indicator--fee409a4-1227-4141-8839-777fc019ff1a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b64a0f9-312b-4521-b789-64dc544cfe2d", "sighting_of_ref": "indicator--efdf806c-ac6e-4eee-aa2d-3066864edc29", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32caa3d-8dd5-4fb9-bc9a-96cd003217d7", "sighting_of_ref": "indicator--3dca4096-78b5-4b40-891a-c524d54e9b41", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e89a2e-5038-43dd-854d-1febebcf73e4", "sighting_of_ref": "indicator--48afc73f-4baa-4518-b2ec-1bf1175f3afe", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58b15ff-5334-48d3-b79c-63eaeb177259", "sighting_of_ref": "indicator--b0ebb86d-3164-42dc-8364-b401853d55ae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36977932-adf6-4ade-a777-4aa1991cdcd4", "sighting_of_ref": "indicator--16f450e4-0521-446e-bd5d-1401386f0011", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7050fd-311c-4d86-bc68-f16f9ca44a5f", "sighting_of_ref": "indicator--aced865a-8301-4f32-8156-a67ef40e3976", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae93d7e5-9282-43b7-a6e3-c52c015b170d", "sighting_of_ref": "indicator--4c8a1aa7-2aaa-4ba4-8d0d-e5ac4da8f16a", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a696dd5a-2cf8-4fb5-addd-dba40d7e8818", "sighting_of_ref": "indicator--c783a970-8439-4dea-86d9-ddeb2faf44f7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bbca3f-a8a6-412b-84ae-2075ea025e41", "sighting_of_ref": "indicator--c783a970-8439-4dea-86d9-ddeb2faf44f7", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1062849-ed09-4af8-8098-58d7c2b33633", "sighting_of_ref": "indicator--494b0aa8-e63d-4fda-84e8-02f939126325", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c5745b-460c-4d08-bfa4-1f0d8e092b34", "sighting_of_ref": "indicator--c3762ec3-9159-4362-a043-2b9bbe68a192", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70a681d-3793-499a-9237-a3edd389be2a", "sighting_of_ref": "indicator--cac63dc2-aff3-4b90-85f5-2a4ee657ab04", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756ada1a-bc7b-4cca-8ce3-bb3cd264bcbe", "sighting_of_ref": "indicator--1d1a8873-8c7f-459d-8989-03dd533d33f2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea22fcd-823d-4d26-b50f-3389a7595c08", "sighting_of_ref": "indicator--68ae477a-889e-4700-9a2e-95554f37ad2a", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40d663-5d65-4411-b214-3dbfde006aa8", "sighting_of_ref": "indicator--68ae477a-889e-4700-9a2e-95554f37ad2a", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9290c7-183a-43cd-98af-65a4378430bd", "sighting_of_ref": "indicator--590ec17d-65b1-43a9-b4c1-c7a8450acae1", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff20ec4-3f21-4c2e-ba4d-2b6d117466b8", "sighting_of_ref": "indicator--bba27a01-5a80-4d9a-9ea7-2b25c6d4c78c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a37659-6c61-4335-b405-7f7c26701841", "sighting_of_ref": "indicator--bba27a01-5a80-4d9a-9ea7-2b25c6d4c78c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01994642-6d85-4a9c-8aaa-6c4c5d5d17b9", "sighting_of_ref": "indicator--144d6bab-69f5-4c3e-8845-a881401c5162", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07264a37-1ba6-4167-af0a-156509e1a376", "sighting_of_ref": "indicator--2a7c6a5b-7f1b-4558-b8c9-585738a6acae", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c753697e-06f8-4fc7-9140-5345801e0058", "sighting_of_ref": "indicator--2a7c6a5b-7f1b-4558-b8c9-585738a6acae", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e3aaa7-6666-4a20-a5f7-10895518ea9b", "sighting_of_ref": "indicator--0b4f5cb8-d25c-4f95-934b-2eecf754c95c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff152d56-ac9c-403e-a7bc-6d3e4cd38a8b", "sighting_of_ref": "indicator--f07b9cd6-8423-4fbd-a4a8-13d76319fdc5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c815fc1f-27a4-47b4-ae78-39615710b9b6", "sighting_of_ref": "indicator--7d3e5c49-91c3-4574-96fa-e7dddf305d21", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f59ad-a96d-40a3-a150-422673d35316", "sighting_of_ref": "indicator--6d15e94b-e629-4dea-9bab-17f6f1cb99e7", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9feb6d2-ef21-4a4f-b9ec-900fbe5b3c4b", "sighting_of_ref": "indicator--96796de9-1ca2-4d2d-a2c0-b5d33e93e3b5", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff84455c-961c-40b9-89fc-937fcd5ba50e", "sighting_of_ref": "indicator--43672c7e-28ed-463d-9b8f-3647b8899a98", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eb574d-f128-4cb9-8549-2323d1490775", "sighting_of_ref": "indicator--25e93e1a-2ab7-46e3-897d-cf86194432a0", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed8b03f-31e8-4dff-b432-28b58bf6b6eb", "sighting_of_ref": "indicator--5ccb32c4-3c12-446b-ba1a-31eb7f3425f2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb63825-458e-442f-9ba0-6f952ce5361e", "sighting_of_ref": "indicator--1fa43cda-3924-47e5-90a2-bed2f913c2a7", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd241d0c-19c3-4366-acde-51d070ff1b6e", "sighting_of_ref": "indicator--049dc8b1-cb6c-472c-acd0-9660a8368582", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debb9416-6cb6-4b3c-9299-d767facd10b0", "sighting_of_ref": "indicator--be62cac8-b7da-4f3d-a069-bfea1f55d45e", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ab0ec8-68a9-450a-8886-ea9ee3f242b2", "sighting_of_ref": "indicator--1006019f-12ed-43ae-af9f-5518ab84eb8e", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4cf6e6-2be1-4fd2-b9b4-80af7ed6a256", "sighting_of_ref": "indicator--9d7b6864-9cda-4add-b8cc-c80a341d347f", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746ab8e8-3639-4247-891f-25072a267e81", "sighting_of_ref": "indicator--92f746c8-3679-4461-bf40-a4352119dd85", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159c58ef-bf10-4525-bceb-d85fbcd60101", "sighting_of_ref": "indicator--6a2758fd-a745-4070-83db-13f977b2f129", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67a2353-b794-49e1-a61f-2682de035d5b", "sighting_of_ref": "indicator--6a2758fd-a745-4070-83db-13f977b2f129", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf5bc9-4fd9-4999-8325-f0ba6f65c37b", "sighting_of_ref": "indicator--76319c67-8299-4b23-bf23-5b53a741cb77", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede82351-bacc-4f70-8e84-88b1383e11b9", "sighting_of_ref": "indicator--e0a6ad37-320f-4f39-8261-dc70cbe6a0a2", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5462162b-03cf-476a-bde4-67d2b483ca56", "sighting_of_ref": "indicator--7fb93f8b-aba3-4fe7-bcd7-bb54e45b5a33", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c315045-9508-424a-bd76-abb369fcd831", "sighting_of_ref": "indicator--7fb93f8b-aba3-4fe7-bcd7-bb54e45b5a33", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1751dad8-934d-42f8-bf79-8c05f9b3c2f5", "sighting_of_ref": "indicator--8eb4794e-fe66-424f-bad9-bfdf030ab28b", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79705a10-e401-4c00-a0e1-b2bc7669e84f", "sighting_of_ref": "indicator--087ef718-fea3-4cf8-af09-5bbe980cbaca", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f659e7-e4e9-405f-96f1-908118506de7", "sighting_of_ref": "indicator--087ef718-fea3-4cf8-af09-5bbe980cbaca", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f4612-8851-49ba-ade3-a7dc21b3b6e8", "sighting_of_ref": "indicator--88e5959e-7f99-4dee-839c-6d64791c053e", "where_sighted_refs": ["location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0312fc76-0138-4974-93cf-d968268267bd", "sighting_of_ref": "indicator--6ac1b314-f380-483b-a2ea-5aded07bc53c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd018f69-896d-4710-9d55-d1b0761e242c", "sighting_of_ref": "indicator--faccab2f-322a-461a-8f3e-2a69fd1c4ef4", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9d2d6d-199f-44b1-bbb4-c32511da7592", "sighting_of_ref": "indicator--c81456a3-ec5d-4fb2-b38e-bbde2d36688d", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420198bc-afda-47bf-a960-b7e7b92a9ad1", "sighting_of_ref": "indicator--c2292507-c1f8-4041-841b-0bbe89359cd2", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97f6e19-7886-4cc9-b170-92db18c8094f", "sighting_of_ref": "indicator--dbdcc09f-afb3-47dd-a757-9d96d785822d", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ae030-475d-4811-a73e-a337e7c6cf83", "sighting_of_ref": "indicator--f87136a9-1787-4b8b-af4d-6b7e1938abe8", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc23585-c9d1-4850-ab5c-f95a399a2f2b", "sighting_of_ref": "indicator--a069ee22-ac26-4771-a0e2-348235c60f87", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16df01e5-4d52-4f81-aee2-89d7134c9b86", "sighting_of_ref": "indicator--a069ee22-ac26-4771-a0e2-348235c60f87", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df99cecf-4335-4b5b-9b75-f62d41da8c55", "sighting_of_ref": "indicator--af96ed2c-6e41-4d83-8efc-8757a0b80a3c", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b0f665-e7e4-479d-a2f6-2a4b66257cd7", "sighting_of_ref": "indicator--af96ed2c-6e41-4d83-8efc-8757a0b80a3c", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4036cb-b288-4014-a3e5-9ef7167b37c0", "sighting_of_ref": "indicator--317fbc55-d9cc-41aa-8dcf-39533a14e908", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a807c5d-efba-4dd0-a0a1-5e0c63a37b42", "sighting_of_ref": "indicator--f432322b-38ba-406e-bc21-7e66151e9264", "where_sighted_refs": ["location--8230af30-f84a-4b44-9116-448016c873ae"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e928bb0f-d4e8-44a1-9358-f4fdafaabd24", "sighting_of_ref": "indicator--f432322b-38ba-406e-bc21-7e66151e9264", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d729f5-617d-4e9b-ac13-71ebaa8b27d7", "sighting_of_ref": "indicator--ab081e88-91d8-4771-8536-6d5889571f76", "where_sighted_refs": ["location--f32c372f-1481-4759-b2eb-dff34544c148"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85300ae4-e5be-4de3-87d1-d7d0e1051347", "sighting_of_ref": "indicator--259df56b-6d3f-4239-8972-2ca40bff38c4", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d662934-a71f-4b80-bfeb-b30db6b2f24e", "sighting_of_ref": "indicator--2489b4b6-a8e7-4be1-94ee-8b9c81bc25d6", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05907aa1-dd5c-4507-ba55-4a08f8dbeb59", "sighting_of_ref": "indicator--853f74c7-275a-4214-a2ec-1620ed1f3931", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3fd37-efc7-4c26-930b-c9384fb10e5b", "sighting_of_ref": "indicator--3f48cfc2-46e9-4d10-9b40-3c007e7d6004", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309f0944-5cea-4f0f-bb23-926279a7ad53", "sighting_of_ref": "indicator--afb2588a-cde3-4c84-878a-429122ad79aa", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757c26ab-6610-40dc-9443-4d354dafb92a", "sighting_of_ref": "indicator--9ef57579-ab01-4937-a0cd-065b7dc2fb15", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce31306-dc3e-4263-ba0d-dfa0219a8a8d", "sighting_of_ref": "indicator--2bc73fcb-b25a-406f-a5f3-7c785d717405", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2448d7a8-3229-407c-96ef-35af086e8cf0", "sighting_of_ref": "indicator--77bebcce-3829-4a7e-8f1a-bf3891a5413e", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94159e24-3653-42c5-bf64-f77d9206212b", "sighting_of_ref": "indicator--c2677965-7d31-4d50-9ff8-af6f7179aefc", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ff216e-0e82-4bec-868b-385edb7502d4", "sighting_of_ref": "indicator--8c0d38ca-a1ae-4747-bd48-9692b3f4be77", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbb8a13-0025-41d7-8490-14820900e178", "sighting_of_ref": "indicator--39f11642-2e23-4ea9-b52a-41d90eba6573", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c040f03f-0b54-4172-8a92-c6ee64efe700", "sighting_of_ref": "indicator--446b73bd-04cf-410c-808b-8b08785c6361", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66015d64-89ce-4c49-a071-78b37ab91c0f", "sighting_of_ref": "indicator--6433b388-31e1-4d7d-aca3-7000f7b1d0db", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e29cc7a-22f4-4249-b5a3-269b752c046c", "sighting_of_ref": "indicator--81d48db0-f3c1-4387-aa0d-e496d8629bfa", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1570ddf-6542-426c-b29e-e5c35658c07f", "sighting_of_ref": "indicator--553bb461-d2c0-402a-afe8-9d4022f9a4c3", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23867e99-51e1-43f9-b8d6-172ad8daf290", "sighting_of_ref": "indicator--40919543-878a-4e66-86a6-e90fcbc86b11", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ef1d68-9f30-47d9-a076-ccf7e9d82e77", "sighting_of_ref": "indicator--cfa6a37f-0e8b-44f6-9976-97b3552ffb2c", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b49b5ed-27cb-4ad1-9821-103990062003", "sighting_of_ref": "indicator--5c187576-ddb4-4b20-b906-45fbf4340bb6", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a15f89-b234-4df1-9fc9-d01e34ba5da5", "sighting_of_ref": "indicator--0218ed3d-0c7e-4579-aac9-ee3aaba947c6", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7517a197-3804-4d68-9594-b686957270b7", "sighting_of_ref": "indicator--47882954-7e33-4bb4-82bc-29236d7f323d", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bced0e9-3f62-4756-92f9-c975ee38a6cd", "sighting_of_ref": "indicator--38f1ebef-281b-42d7-baab-525bec8f79b4", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a08577-56b4-4620-a2a5-4c28f9110efb", "sighting_of_ref": "indicator--dda4bf30-f9df-4fec-95c2-5df84e73442a", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180121e9-8760-4af4-bf5d-b9ab57757a47", "sighting_of_ref": "indicator--4e8c34da-1016-4198-abcb-b21ad23bd012", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c2183-0ab9-42f9-808d-539660fe094d", "sighting_of_ref": "indicator--8f6532f8-a648-4255-8517-e20556f7c949", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3433ab3d-52e9-40f5-a1ff-c7c9260826b9", "sighting_of_ref": "indicator--2b2633bf-67a8-405a-9d52-d93bf3282531", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03feefc2-c3e9-40c5-aa32-188d58dffdc0", "sighting_of_ref": "indicator--318b7f72-acaa-4d03-a90e-ad40b878df6c", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480d602b-1312-48f0-89ff-26e6cfa2b0d0", "sighting_of_ref": "indicator--888a829f-c813-43e0-808b-1e7e653fb3ea", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322c1ad6-87ae-44a7-87a1-70f3a1ba5256", "sighting_of_ref": "indicator--379423c7-0a4c-4a05-ac89-c90a1badf589", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35f3b51-fbfc-4a03-bbcc-e3d4a8a51e11", "sighting_of_ref": "indicator--989a5928-e501-4446-95c1-55ffafffec59", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5cbd5c-8dd9-494b-83d2-45c8f38d9c73", "sighting_of_ref": "indicator--1b90a4e3-4e30-4f3f-ace7-2f84c115bf99", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b527cc9-e8e6-400e-a745-accf9b2bed8e", "sighting_of_ref": "indicator--2968348f-71a9-4039-9f90-2aa06326ca6d", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ad883e-c34e-48ec-958a-9918b95cdd48", "sighting_of_ref": "indicator--a11f0038-d4e2-4727-8263-f388cfbc32f4", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7094266b-c4a4-4342-91cb-319b90731ce5", "sighting_of_ref": "indicator--9a264578-78f4-4e4e-8bfd-5e8da39ac567", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ee5cef-e840-4419-ab85-df62f74328c8", "sighting_of_ref": "indicator--6152720f-60a2-4527-b9ae-feba4707f055", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d1a4c4-cada-46e3-b698-aae36b60ccf1", "sighting_of_ref": "indicator--d1c2fb6a-775c-435a-a4ba-a2b6b820f2b3", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dd8f9e-5b76-4081-a717-2182b948f192", "sighting_of_ref": "indicator--4f8330d3-75ae-4625-b0b1-9b6f7ef1d510", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a4b2e5-9198-44ef-aeb9-06b812fb6418", "sighting_of_ref": "indicator--f345c156-c7a4-4c1f-8c98-1163b4e39269", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c765ce2-95e9-485c-8535-dba7284c0653", "sighting_of_ref": "indicator--7e0d0275-6dc5-4ba2-8c31-0a0cc06e10a5", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c0c204-dd75-4fc8-8ea6-31b4df9c7c2b", "sighting_of_ref": "indicator--8d868ecc-d1ed-4777-b523-b89032f42c2b", "where_sighted_refs": ["location--1d64d888-8408-41fa-89d7-f6b7f0a6d411"], "first_seen": "2026-05-10T00:00:00.000Z", "last_seen": "2026-05-10T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--53933a47-4ef3-4daf-84df-3c4e9726b1e5", "name": "Threat Report for 2026-05-10", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-05-11T11:00:01.976Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--1d64d888-8408-41fa-89d7-f6b7f0a6d411", "location--48d5ad30-5f8e-4003-9a4a-81da53ac0be4", "location--8230af30-f84a-4b44-9116-448016c873ae", "location--f32c372f-1481-4759-b2eb-dff34544c148", "location--b8bac290-78e1-439d-b2bd-c61e28d8e882", "infrastructure--643bd870-c682-4dca-ad98-c9063bce5d2a", "infrastructure--646306b4-30ed-405a-9037-7b6d4f18c118", "relationship--4564a4d3-f9b4-44ff-8309-aa06bc355de3", "infrastructure--c5a65727-ce7e-4c57-862b-36d6c472063e", "relationship--bdf5edc4-dac4-454b-a7e5-840391dc64de", "infrastructure--5274c3b0-0144-4411-a9e4-c128ef2dad04", "infrastructure--6054224b-62bd-4677-8f36-df54899fb218", "relationship--bd8905ba-3e9c-448d-ab27-39b6cf940d21", "infrastructure--783ffe15-3eff-4078-940f-691524d4ec3a", "relationship--121c6698-a13b-452c-b0d2-7196f385fe04", "infrastructure--3c3379ba-8968-496e-92f9-522372a24ec8", "relationship--76a0dbba-809d-49cf-bf2f-dc301d77954f", "vulnerability--0b494328-f818-4fe4-9b75-7cac94e5d52c", "vulnerability--1073ae66-c74a-4a55-8f70-62ce4159f1cd", "vulnerability--16be0500-8592-4e4b-b961-d895c98911bc", "indicator--21a69bb2-681c-43bd-b9f8-0cf2019b0d39", "indicator--c42ec558-62fe-4eb7-bf10-8efe9f21b6ea", "indicator--f25862df-8959-4500-b82b-1a576aa0cc76", "indicator--f146828a-6efe-44ef-9e2d-e75b922c5b44", "indicator--009f7ce5-67bc-445e-ad8f-43b9d01ffebf", "indicator--18458a7a-25f8-4d55-929d-a40da743b6b2", "indicator--62ae8b55-dd66-40f8-9e44-4ff748eea32a", "indicator--cff37653-8402-4b0e-bad4-ebd96a8d0cc0", "indicator--127b0c98-262b-485a-92b8-2bc6ff1dea02", "indicator--7735d806-02f5-4a7a-8650-dc015b8f8571", "indicator--e52f5629-98d9-4ece-a140-3ed950160fea", "indicator--83bcdf7b-460f-4f9f-b63a-3a40147e73ea", "indicator--80c2edde-b3dd-411b-bd12-78c4b6afadff", "indicator--37040528-e289-4b96-aaf5-325f2bd91453", "indicator--ee4881d5-f99f-4a97-9262-4194931263d6", "indicator--970a1281-428c-4286-a359-95f7d3e8a109", "indicator--bf792ace-fac8-4f7e-b6d6-8e5692470a6b", "indicator--270e2b26-bdb8-4d6f-8191-2604dc4ba394", "indicator--80575832-3e23-450f-81ab-79f391a75f4b", "indicator--2206ba88-b7b3-4eb8-88dd-aafeef1982bd", "indicator--95020ec7-f873-4bdb-abb7-1c66e42dfb6a", "indicator--128e8f06-f1c0-463d-a262-618ed4816443", "indicator--46c3aaa1-9de2-45b1-8322-028738c7e20f", "indicator--0bcc1f85-e8f9-48d7-9bbd-2393e8a28ad5", "indicator--620f5c35-861c-4104-a365-a95141cc7b8a", "indicator--d3b2348c-e7ef-4604-99df-c8e6ffba7c61", "indicator--ba70b536-ceb5-435b-b806-f26678bf9b5e", "indicator--c04ff51f-fab1-4902-9996-c20edca85c98", "indicator--97393947-0f1b-4247-8d6f-1ba4c0e09027", "indicator--dbe03cce-b1c3-483b-a040-2a14e3c46c4a", "indicator--c243bd0a-cbbc-49bc-bd6f-c178bd945b47", "indicator--50c218a8-09cc-4cde-9398-2717aae8a46f", "indicator--cfef2dc9-64d9-4f5e-a91a-9e26173d560d", "indicator--cefb1cde-881c-447f-b552-7ac1744c9d7e", "indicator--2f114e0f-1158-42ff-b08e-d68259c67cae", "indicator--1a43faea-e531-48d7-9cc9-6b1f0284631b", "indicator--333133fc-bbf1-462c-81e7-468d42b019b3", "indicator--69364c31-c06c-4070-bb92-c371b475a074", "indicator--0d757b69-3c1b-421d-b05a-8aa484b550a7", "indicator--22153d74-df42-49f8-8792-b514a811a7de", "indicator--262d6af0-d508-4f9b-ab2e-0923292c36b0", "indicator--be6c6e2e-bdcb-42cb-a23f-32687bfabbcb", "indicator--c4203aaf-5489-447a-b357-3ba7010ab7c7", "indicator--f9f6ac87-a703-4f99-9751-860082a61278", "indicator--a3acefda-4cf3-4852-abaa-75cdbafc1014", "indicator--41fda89c-eaa1-4e24-a286-5974692740df", "indicator--20fec6be-ce74-46aa-99d1-8736bcb8d93f", "indicator--b8a9d1ee-f363-437d-a6c7-fec5ca91850c", "indicator--a678f5ce-c4a1-4f9c-bf0c-7272b1cccc03", "indicator--eba63077-deec-463c-8c0d-baf34511db88", "indicator--cb1e3df7-3bdb-44d5-b453-58aee79471b0", "indicator--b41b68e4-7ef5-4190-827b-e26eb34faa44", "indicator--df3b5cf3-6843-440c-a49c-c4cb96ad6437", "indicator--3d5a76fb-4a67-4183-8b50-d4f60becc6dd", "indicator--27eba9d6-5fc5-4f3b-bd91-1fc5614017fb", "indicator--8980391d-cb16-42fc-8356-37bbf4f84d33", "indicator--74414113-5330-49f7-9f5a-0f77027ffd42", "indicator--955f90d4-e128-42ed-a737-bfa6592479d3", "indicator--b957a644-8e49-4ed7-9224-512b7887d4ce", "indicator--0f2d05de-6fb9-48d2-acbf-d8558378d29e", "indicator--3faefd97-81e8-40b3-9601-3474f9da8347", "indicator--9748eb00-462a-4e5e-9b4a-5f51c31b4be3", "indicator--846c226b-738e-4477-b123-a25655c47458", "indicator--3eb14d73-10cb-4723-9f7c-c7a222df8155", "indicator--0510d603-100f-4b6f-8be8-62ef0d3def7b", "indicator--4ad8d013-1657-491c-930d-726738f4dc97", "indicator--b76affde-a9d0-42ad-bea4-120318fe7074", "indicator--dba64bf2-67e2-4329-82ab-45710a78064d", "indicator--5b198408-0e0a-44e6-9ffc-37ad87f56ae5", "indicator--402d087b-134c-4096-8de5-9641d45679f6", "indicator--23cd27d0-abcb-42bb-9c9c-a78504ee0e45", "indicator--2d70f5d8-5dc2-408c-af90-fb4324be0aba", "indicator--ad5ad948-6542-4282-af3e-bc7eb52408df", "indicator--cf3265fb-cc11-4c32-8e31-1cf65a7d90bb", "indicator--90a40d1c-08da-4a5e-bdb9-ab25e03bbb3e", "indicator--f4673639-7867-4898-acc6-bdfb0ea45d33", "indicator--5936f5de-d9ff-4a15-8e81-d49b18851110", "indicator--9af13430-6fcc-4cca-8001-775bcd248989", "indicator--cdffad20-c48d-498d-87be-8c9b6d347a8b", "indicator--77bf19ae-b350-43de-8586-5d8db88d0b28", "indicator--8b9561a1-906b-4ff4-9bfa-2f49c34b2fcf", "indicator--94c81a2e-3d7b-452d-b8d1-de3a5de339fa", "indicator--82f07ade-d6af-4387-8969-9e0c685670ad", "indicator--8589d2ca-0963-4764-b079-72d37cd79dd1", "indicator--ed002b65-405e-47d2-9d32-f716f77d50f0", "indicator--cf724e2a-d1f1-4843-bd35-9b5efe81a5ac", "indicator--239ec9a5-bbee-42b9-88ff-5d9f917064d0", "indicator--52650233-7444-4f91-bc2e-cd89574ed98c", "indicator--3214a3d6-2575-4004-8002-5354d3193ec6", "indicator--467c5e6a-97d9-4afd-8498-aff6b7c11646", "indicator--b14b4a2f-0383-43a0-a114-aebc8ce7fc4a", "indicator--693328cb-1553-4cdc-a2ef-85de459fd1b1", "indicator--7c192ad6-c0d8-4b90-9043-79f89751a7b7", "indicator--71f4144f-5a14-4dba-9f6f-139dbfae8891", "indicator--5a97828e-067d-497f-9e10-0b29f0cac691", "indicator--2407dc3c-154a-445e-bed6-528851b71b55", "indicator--abf6423c-80f5-46f5-9e52-4b52c4b1b8a0", "indicator--08927b53-c3ca-4d81-a645-8c2394912049", "indicator--7b535193-7f0b-4c86-9273-087957fed3ac", "indicator--5dad0fd6-0382-402b-82d1-6e48b037ea1c", "indicator--45673f84-120c-470a-b7e0-f8a71d8b553f", "indicator--37551a63-72e8-48c4-853f-748b16617546", "indicator--5701f3e4-bd95-464a-a369-55d65631d53e", "indicator--f4642e2b-92c3-41fa-aa2e-44d0cb4a073e", "indicator--a9ff5ed0-c25c-469a-9159-5c99fbc69081", "indicator--dfd162fe-8f28-41c5-b618-c70ea602cc0f", "indicator--9a478ab4-81e8-4fe3-b667-2bd6b4625b7f", "indicator--fc8877d3-85b9-41bf-b402-917de32d71ca", "indicator--abca7fea-6b10-4b2b-bb43-be265acc9d25", "indicator--89d6c323-a763-4df1-b2b1-5a71af1be197", "indicator--1f60a6e6-f639-4005-b136-a0555218520c", "indicator--b36b4332-6ca9-4334-b864-b9c18054386a", "indicator--7add58ea-788a-41a3-a68a-9619f1c8b35d", "indicator--3ff82f82-bfbc-468b-80a8-6cb6f3274c03", "indicator--e484ea10-409b-4980-8f4e-f0efd17ba931", "indicator--60fe9f5c-dcf3-4fd3-bbec-d62ac19e2444", "indicator--56fe2d4b-b4c7-4f10-aa00-22b1cff61062", "indicator--5256a849-4573-4090-9519-41aa55209c62", "indicator--bbe3effb-a17f-47dc-9024-70062d861385", "indicator--ee05ee1d-af21-46b0-9d67-b99cc2a0719d", "indicator--fa217f49-0951-4d52-9c8c-96eecbd9ddc2", "indicator--3f864035-749d-47a2-8dd0-16a02ef9672e", "indicator--687c32aa-3fcd-45a1-a4d1-172c237d53da", "indicator--2d11eea7-8364-427a-8087-bd1a91426d55", "indicator--605ecbed-e4fb-4360-9b4a-90f958300498", "indicator--1f38af7c-6aee-480b-805e-779cec3a1b2a", "indicator--b802e98c-9f0e-4322-960c-c35424bf2ea5", "indicator--68faf4f0-2a3b-4c2b-82e8-0d5253702e6b", "indicator--eedb954b-5808-4653-88f0-0dd13e85c1ba", "indicator--9ded384f-834d-4427-aeb4-52f7634e222c", "indicator--bf3bac5c-9e44-45d8-bfb8-251fd65f4f35", "indicator--19b10293-0c04-461d-82af-039052c1e736", "indicator--688250b7-2aed-47f5-90e9-621a73e769f7", "relationship--bcdcce1c-6cc3-496e-b50e-69e27176b4c5", "relationship--907bf418-569b-4939-a713-ef943a76106b", "indicator--fcebae04-5a5f-4251-aaa9-651545c168fd", "indicator--3eb76a4d-2e46-4a42-972b-271a92e2218c", "indicator--e919884c-91ff-40b9-bef5-010a120db69d", "indicator--1532bcd9-08b0-4ee5-acbb-7ee95223e4bd", "indicator--5d2aa3be-9262-446b-9a49-7dd2780959c2", "indicator--a2f20906-ebf6-4dc5-9fef-b310a5bc7d2f", "indicator--23e5e77b-9bc8-4006-a3ae-27b8f3a076c1", "indicator--b843e3fe-af20-47a5-ab8c-f89609ce63f5", "indicator--acd631b1-9e76-4461-be82-287dfa46199c", "indicator--7963c967-baba-4406-bbb4-f7cd7a053d7c", "indicator--5af3182a-0923-46ee-811a-2fc218249ce5", "indicator--a6582a46-0ea8-4b18-82d5-867f7beb70ba", "indicator--9068f67f-9066-4eb2-af9a-7b79f19691e4", "indicator--b47ab53c-7a64-4657-a5d2-c37e4c11cd07", "indicator--5204f33a-0b71-462b-ae63-ad32adf50ca1", "indicator--232220a6-1e01-43f4-9d1d-041727c5141a", "indicator--ade95768-8d11-4a83-84a2-8465b651bbcc", "indicator--a6dfce03-7ca5-4f6d-acca-26b295e14802", "indicator--56abe4a3-9e0a-431b-b9b7-4eb2b078a3e8", "indicator--3e650c4d-0616-4532-82c9-a366d5ed48dd", "indicator--6084b94e-a9b6-487b-b7ef-31151b8f8f70", "indicator--a44daa11-6a75-43f4-be0d-1addc4f24567", "indicator--49d8f745-a571-47ff-9be2-80e184df280e", "indicator--bad2b138-478c-45c1-8eca-ed7faa270eb6", "indicator--791a77df-a7fc-4ffa-bcdc-a794011ac3d2", "indicator--1473d46c-9094-4e53-9fb5-51842f5222f4", "indicator--437b4746-ac2f-4074-9b18-186db7a9d996", "indicator--59dd9f96-e970-4390-b58f-439032a866f0", "indicator--4d3be0a7-4efa-4bd4-8549-4f920099aaae", "indicator--ffde97bd-9e7d-4618-a54f-f040611cafce", "indicator--1c49f1ef-6807-4d9b-b038-0355f284483c", "indicator--6325a5f3-92f3-4da4-b1e3-f3332230d1a6", "indicator--4f0b266a-3e72-460d-8147-fc13592c164a", "indicator--5b9b0bd7-2c30-490e-b0a0-ba7be0efcecd", "indicator--97d9746a-3817-4518-8026-9f905dca3783", "indicator--018fd1fe-285f-43de-a6c5-11b32a0dce64", "indicator--3dd9ad9f-bf38-41c0-90ce-f023776564bb", "indicator--554b1f86-1935-4014-856e-608d10d2c928", "indicator--2cb146dc-d82a-4e43-b9c9-b698e85ebffa", "indicator--8907131a-38f5-40f5-895e-5fa82565f977", "indicator--745a0c43-050d-42cd-804f-4bee34cf59ad", "indicator--2dece0aa-820b-418c-8273-ba1e564ba6c5", "indicator--7e50af8e-f466-4d89-a49a-ff0ee824bcc5", "indicator--d132f111-5955-4992-971e-bb3280d7b5b5", "indicator--c6704646-f252-4fad-9978-b18fb993aea4", "indicator--c3f133cf-4a5b-485e-8077-777db8641391", "indicator--ef53eddc-499b-4952-b5cf-d9a7a05b365e", "indicator--66f2cb50-d5ab-472c-ac32-666102a7692a", "indicator--ef65fcf1-86d8-4494-b477-372c82346dec", "indicator--59c742ba-2782-4069-8871-89705f9ae4c3", "indicator--9721e7cf-dfe5-4c97-a921-f148c2b168cf", "indicator--f71b67fc-d29e-4a77-abb9-968be0197376", "indicator--e875e278-562d-4b8a-815f-3110b425c726", "indicator--ca91b07c-c3d0-473e-a009-96ff0cd7d4a5", "indicator--6ae4fd63-0480-47e5-ac0d-249677c506ab", "indicator--fc2b0401-1a3a-4cae-82c8-70fe74b59e99", "indicator--f7c48345-d941-4e09-8508-008db4e35bbe", "indicator--9b8130f5-2913-43bf-9aa3-611ad9ddf4b4", "indicator--742e1fa6-05e6-4064-8385-be89f4ba6e29", "indicator--fba04e4c-c7df-469f-b572-d3bbc6158494", "indicator--7486f277-f819-47c9-ae3f-0ba1fd3c6ade", "indicator--46ad37d7-3f00-4cbd-8992-dac5e1535521", "indicator--f29077ac-5993-4d6c-b804-a1ea30d67692", "indicator--a0513ad6-65bc-40e8-b5a5-7175210d73c7", "indicator--f9569eeb-0d4f-4735-bf6c-2777b4532d7e", "indicator--b69c891f-6649-4446-ae61-29edaf844aac", "indicator--fd315e49-f652-490b-bd46-430a4fdd8bdb", "indicator--9deb7c93-9238-4e48-b951-908694fb8e3d", "indicator--90fbbdcc-ac66-46fc-a8bc-e7756afb5794", "indicator--ce6b68e9-01c6-4c5d-bb44-1269846afba3", "indicator--cb02e91c-59b5-41b8-b0c5-6536ce139355", "indicator--7f5793cc-6623-47f5-b390-660ab2df72d4", "indicator--5bc7a4e8-1f22-4165-a82b-5ccf100dd54a", "indicator--ca2c0d79-f68f-4c50-a1dd-2a483a63fbcc", "indicator--8a1c8341-cf33-4767-8020-6d11b10e43b5", "indicator--01b69dcf-67af-4810-bb82-fa67e4d224d2", "indicator--20662a99-8ff0-4f58-ab6c-b4e15161324e", "indicator--de1d532b-741b-425f-8d11-7384ffea2206", "indicator--e039a78a-c9fb-473b-b9f3-e169b27e134b", "indicator--9e91c2d6-bcca-4c29-9e02-8495c4e40314", "indicator--a8b78fcc-b051-4aac-89f4-73bda201dbe7", "indicator--b9e4eb02-ffdd-4e16-92b3-ebc773974dd8", "indicator--0a9ab300-08f3-4011-a007-706efcb7ce2d", "indicator--6d9e4f87-663a-460c-92cf-6b3f96b1c481", "indicator--5244d599-2368-4afa-a51d-cb12a3071ae8", "indicator--c749252c-179d-4d75-8973-08d4677e8fd8", "indicator--0edfd85b-aafd-4bf1-8998-de1adba288d1", "indicator--2883cce6-016c-429c-bc01-55bc6479b4df", "indicator--c64f15ef-3cde-4720-9a05-caf9ba6641ec", "indicator--670711b8-4f37-419e-acb3-fc009a26d0de", "indicator--b29a52b1-0709-490d-bfc9-656a12e04e9f", "indicator--ce45e418-cb7c-4179-8267-39e8d2b705a0", "indicator--2dd9c2a2-f255-4473-80ff-01e4b45d17cd", "indicator--61cef907-0003-44f8-a49d-7d694cdbf2c3", "indicator--efeba8b0-7e87-48a6-ab10-1bbe3becfa8a", "indicator--c54a5377-48c4-4cee-82c5-3707e56fa34e", "indicator--8f6b134a-8507-49e5-99a4-40e9800feaab", "indicator--36bde910-5728-46e5-8285-b894d346192b", "indicator--cfc1ebda-2d30-4cc2-8687-e586043454c2", "indicator--de8ba7d1-c46f-4d31-a732-433b62f76c8a", "indicator--d11a5ad0-169a-4773-9980-6c360b75a2a3", "indicator--9854e1cd-8d99-416e-883d-313905725429", "indicator--8eacb61a-1c5f-4edd-933d-3ea84f06e498", "indicator--1a70149f-4569-4f69-9782-3157e721d1ab", "indicator--861b748d-217a-4850-a1bd-a5a53b688365", "indicator--eedfaea5-f71c-460a-a90a-a095ba694afe", "indicator--24ec2fa2-8bed-4f32-b158-2f72874dc49c", "indicator--d8c3f3ab-4897-4de7-843f-5fc34d8235e1", "indicator--98db4262-4f78-4fc4-9f4b-1073e365e4a8", "indicator--7a2642a8-ddb6-47c1-a3f2-300a183085eb", "indicator--d7c9db17-da0c-470d-9b42-7a2a01c88fb0", "indicator--5929113e-e9e2-4ce3-a3c2-ed2384e00b68", "indicator--ce235bce-6654-41c9-ac59-48a66dad44c4", "indicator--779731c5-d965-4d22-b204-a431684e7227", "indicator--3c15021f-6afc-465a-937d-953295d743fd", "indicator--4f9f439b-9b79-4344-81f5-dd3af05a263f", "indicator--d8cd902e-c652-4882-b065-3764cf063697", "indicator--76c00e2b-0125-41a7-8b83-9262fe71552c", "indicator--0a339534-ee6b-4cb8-8597-1131090fd73c", "indicator--f05e17aa-7bc8-4aaf-b616-8bad790e4ff1", "indicator--da17707b-777c-49d9-9bf0-582e168883c4", "indicator--28043e10-c1b0-4394-b54f-4c2ec1bf454b", "indicator--74bb888c-0634-420c-85e7-f32ac578ff2d", "indicator--b43f70b2-a165-4d1f-b3f0-2aadf5423344", "indicator--70ad2a3b-d5a2-45ae-a5bb-17ea41fe4859", "indicator--0476787a-0a65-472d-9436-97db413054da", "indicator--2515ee0e-2b10-4903-bd98-3816fdddeaa9", "indicator--4097a6c5-e3ad-4f0d-b000-9a18899ba819", "indicator--f637d9cf-ff96-4bd4-b4e0-8d8ee50da49c", "indicator--82b5cc8c-8d78-4983-afaa-0c458843ede8", "indicator--32ed412f-52fb-45f0-835d-65317d443ef0", "indicator--a1cc0b7a-cf7f-402a-a234-19e927a8e5f4", "indicator--0c0266dc-16fc-4507-a484-380b5fa45f09", "indicator--528979ea-1fd9-41fe-87e2-d8606b7b6ce2", "indicator--522c91fb-420c-4599-9c0e-20c42f2e2671", "indicator--1c29a693-0c1a-427a-8b26-424847493ad6", "indicator--eb026bbc-e32c-4c4a-b713-1da22474072d", "indicator--dfbc14c5-2178-4161-a21e-a91e6df6934a", "indicator--daceaae9-8aba-4921-9702-beb0a287ea2d", "indicator--0109fc53-b646-44dc-82e8-b0f6c17fb7de", "indicator--03b21a2b-89ba-43db-83ec-0bdb3707530a", "indicator--a0546161-2cd7-459a-b992-94a7b6816fb1", "indicator--55a1331f-f457-42ab-bf64-90736b28444d", "indicator--2caadc02-7b88-4715-869c-75735f9f8885", "indicator--d6d91ee1-3c6a-4af5-864e-80831e8a65c6", "indicator--0d86bd29-e185-43bc-b964-96842e1eeecd", "indicator--15887823-2f15-44b5-bf37-7cc48a9f3490", "indicator--2f377c18-da89-4535-a0d1-8f3b84c5afeb", "indicator--a390c364-bd7b-4964-a913-ed61aa7374f3", "indicator--41308fb2-8d31-415f-bc2e-2e3f9feb9485", "indicator--1435c0fd-c5eb-4751-8e94-18588c6fb361", "indicator--13909554-297f-4fd7-b611-e571be968299", "indicator--7bbc1a4c-6f4b-47fd-8b9a-bde125145f45", "indicator--34e09af5-a66e-4d51-acc8-a93c93bed10a", "indicator--779ed000-530d-42c4-b122-ec7cbc76a3a7", "indicator--05f61ee4-db98-41f8-9fcf-195118992bd1", "indicator--f172e6b0-6623-4519-ad47-656c7196f4ad", "indicator--93894271-5eed-435b-9149-836747ae7219", "indicator--03334faa-3625-433c-8af0-ce71e07d8ae8", "indicator--87cf9586-c0fd-45c0-9f0d-148be82b0639", "indicator--988adcf8-c33f-4313-b1b5-ee9b95c568af", "indicator--2ff68656-00be-4362-9f30-301b019b4407", "indicator--35529cce-29f2-44ee-a1db-7ea78eaca6b8", "indicator--88631143-7264-42c0-8be8-9dc683906d94", "indicator--04848a77-e740-40c0-9dcd-b3ddd748cef0", "indicator--1ca072c4-ee5d-404d-bd1c-f2e6959f1988", "indicator--874a94da-49f3-409a-ab6c-c18ed8c97cb8", "indicator--53134598-ddac-47b9-bcf5-8dfcd5328959", "indicator--8f735017-cf34-438b-bd25-ccc9412c3ff7", "indicator--57cd7b13-a79c-4cff-ab5e-8f13364ae0f9", "indicator--51b2ed62-0014-4a0c-823e-c646f7cd36af", "indicator--e1a62cc4-7576-4db1-a5e8-72aabfbee0b6", "indicator--1778ee24-88dd-41cd-83dd-d9b0306d6f53", "indicator--7ce13f1d-851a-4bd7-bb3f-0c976c53bf17", "indicator--52099bcb-16b9-4681-9476-5f4227db5388", "indicator--7fc11208-1e05-493d-a613-8359dc46e428", "indicator--a23f3b64-eb38-44dc-bd1c-a0b185594d1b", "indicator--5767eb6b-4e2b-4d54-9e4a-85907079571b", "indicator--93b46934-ff31-45aa-977d-9691ae096357", "indicator--af765f0a-84d6-44cf-9351-079278ff4b08", "indicator--3af98de6-7837-4ac3-94ab-407dba9627ac", "indicator--7967d14c-9ac1-41e5-8b0e-bed30ed845b8", "indicator--9a05632f-6936-4476-ac2b-a3465f2a16d0", "indicator--4af9689d-3033-42ae-a9ae-c8912a21cb2e", "indicator--34c31b73-7c36-4697-9888-88381ccf526d", "indicator--df5544ec-d77c-447a-b8f2-d15b3e79ac94", "indicator--4d973459-f9d6-4e5e-858e-1827254958dd", "indicator--65c326b9-589d-4a23-ae05-dd49a6a922a0", "indicator--0a21a92b-6f44-48e4-be05-1f8ee3c72abe", "indicator--18c5bbf6-5b16-4009-bf60-5c7088538ca3", "indicator--98e01b50-fcda-42ab-befb-ca0824e20cf7", "indicator--dd2ed449-3b03-4429-bfb7-49bca105a734", "indicator--5ceca090-595d-4f9f-93b2-fa180be0cab5", "indicator--1cf0b717-af58-4310-af73-6a49346faa04", "indicator--0abd3ef0-7274-402c-94e7-ca7c9ea757ec", "indicator--67d6f4d7-c9a4-472f-a1c9-31371e557603", "indicator--31f8dab9-93cf-4795-b14b-e251c5280682", "indicator--38675f2b-3f66-486a-9c65-f035f9d2c743", "indicator--d1ff7c2f-c6ca-48bd-84d0-e9633c83fd06", "indicator--2a9de701-1139-406c-9665-5a69c56a179b", "indicator--e2e291de-7185-4387-8ce7-8cd80293349c", "indicator--f4c7ef8d-8d4b-4c0b-86f4-0df7b3a71905", "indicator--5c6ff3b2-38e5-4f04-b075-f2681b7463b2", "indicator--8536c9be-b5aa-4580-97c3-02be9b619ecd", "indicator--cf2858ed-2f8d-4375-9181-da81e1c09104", "indicator--8935d025-adce-4fc3-ad5b-cfa0bd23df75", "indicator--db610065-f0c4-4040-be45-a69a45729660", "indicator--91be11c4-6032-4585-854c-e61ef3273a6a", "indicator--cce1e43b-dd7f-417f-9f29-37ad6b2bf165", "indicator--e691436c-11c9-4345-9877-595ce7c704d1", "indicator--a677b496-49c1-4ebc-a6bb-af0527ed7132", "indicator--a5d16663-911a-47f6-80c6-36e2dcd4954a", "indicator--1ce61f41-9be3-49a9-9c14-bbc28afbd76e", "indicator--6be15842-f29a-4d98-9786-1533c2af33f1", "indicator--30bc8ab6-4ac8-4998-b721-ef3e5f83395b", "indicator--356114b6-9e2a-4453-b85d-cb2bb71fd1f0", "indicator--d2f2bb39-048a-4c2f-8683-730a14c5c713", "indicator--bc57b0f7-f45b-4271-b54d-abb2e7fbc427", "indicator--df36964d-9d4f-420f-8300-f8cb2fbb5e82", "indicator--5d4488c2-f926-45f9-bf51-18bd7da114dc", "indicator--3e49c60d-450b-41e5-8ca3-ac4c60d03b6a", "indicator--fd75353c-bc89-4773-84fb-fc0ac6b057b3", "indicator--9537ddfb-fcaa-471a-a7e8-74cd70444386", "indicator--19d77de6-9bbd-4972-aca3-2424ab08de55", "indicator--052d08dd-2edc-46a1-afd4-555ba51d269c", "indicator--6dafc19c-5210-4ecf-bdd6-9b1323959b40", "indicator--9cd28b36-8e68-4775-8e2c-739012d06f11", "indicator--73897ccc-6f69-48aa-a778-be7e78815e89", "indicator--42d32704-6772-4da9-9360-e084b5964ee0", "indicator--9d94de76-190a-4edf-b01c-e38917920707", "indicator--f5003aa1-ae3b-4c01-b5d2-a6a67b572f05", "indicator--3949ab3a-6365-4017-b13a-f8f1f829b3d8", "indicator--c22edc40-490e-4392-8e8a-727e76d3dbeb", "indicator--6b6176ad-b9d2-40f8-b0d4-8350b071a22d", "indicator--268840e6-8589-402e-9cac-0f55cccd2b94", "indicator--b0945194-6826-4b26-aa95-0759a76c905c", "indicator--3212027e-f634-4f40-a59c-1c631e7887c6", "indicator--1c69f13f-70de-48ee-b9c3-b6014f0adf24", "indicator--1d133934-392b-47f6-a44a-dd7a9243b95d", "indicator--1e144f7a-1a4e-40c5-90ed-3c087f66ec9b", "indicator--d2406b9d-b155-491c-9d5a-36dd18ce3fd6", "indicator--67ca9715-0dfd-4e41-ae76-55a7d45fb570", "indicator--70ba290f-e6f9-40a3-a091-aaf2bedbcfb3", "indicator--4c42f997-8686-422b-8aa1-ffc6e3e0a075", "indicator--d5238cb3-20d7-46b9-a08a-f7891a81944c", "indicator--57a82646-6b7b-42ae-b33c-2a9f62fa04cc", "indicator--d5151ac9-d1e6-4baf-856f-dea6dd124985", "indicator--332080a4-9b7f-404e-b3cc-267bd87fa0cf", "indicator--930f291d-0161-4846-b18b-3c94277af2d5", "indicator--323bd645-4dfb-48e1-9074-21b9a57652c9", "indicator--c6bedd16-2132-45ab-9b37-f0f84880e94b", "indicator--0c3028b8-dd9a-4442-9ae5-9cd4770d3172", "indicator--db241dfe-d2f8-4e3c-8fb9-232e42e9516d", "indicator--b0db3b63-a537-4a70-8684-bbe1271bc5d7", "indicator--9b99211d-5aac-46f5-9d33-fceb56f3f9b4", "indicator--a06805d2-8c13-4f60-bb5c-23444eee41fa", "indicator--5bf9e92a-aeb6-4e3b-93f6-89ebf50d7ff6", "indicator--bb7033f1-f230-4e0e-8bd0-ea55320f3b40", "indicator--34a91653-1164-42ef-9fe4-ac6a7c616f47", "indicator--caf938f6-c393-4801-b820-990544fc2fe0", "indicator--c8563f42-ba40-4a4a-8535-6fefc129371a", "indicator--7af11340-0c8c-4e33-9da5-e795c71e0d46", "indicator--90ea5270-f73a-4087-acc2-85a8da2bc8d1", "indicator--0b1d03aa-64ce-40e9-bb91-fe60ee47addd", "indicator--22b058bc-fbb6-48c8-ac4b-b42658263a19", "indicator--c854ffc7-f285-4dda-848c-1c5423b54496", "indicator--c38b227d-a2df-4ca9-ae83-ee223039329f", "indicator--4a81158f-4894-4abe-a131-879d692abdff", "indicator--691ddad0-c8c3-4071-ab26-5961d317adda", "indicator--789626c5-9305-4afb-8ca2-7f6c7fe055e7", "indicator--20c13c0a-2153-4453-8d1c-14de49b2fbf7", "indicator--b2b5df86-3910-479a-bf8a-b41b029ca17f", "indicator--dbd814f3-591c-4358-97ef-3cc513b183af", "indicator--a297e824-8d5c-4f77-9e42-87e128c6e0ef", "indicator--fe9e6234-18e3-45ba-991f-3545ec61f3b5", "indicator--7df6f609-97ab-452b-bf3b-52499fe79b13", "indicator--2f8ed297-f5e2-4dac-acdf-56ceacd60bd9", "indicator--090010ec-5977-4a80-81f8-2f10121a2563", "indicator--0db96382-1534-4db8-ae6b-1ea6dd222281", "indicator--4836856e-7358-42ae-8ac2-d5b8cac2137f", "indicator--8a966169-1a0b-4f53-99f1-279f35028405", "indicator--d3e8e947-5f68-4ca4-9092-72b0cb38bb78", "indicator--fd2085b6-bf80-4cbb-8d6d-c06390559c5b", "indicator--1dd899f9-d4e2-4de0-a9dd-9c1f2f74a6b5", "indicator--0289be94-9e1e-4cfb-b99a-f08257beb83b", "indicator--a52a22ad-e8a7-4eb3-abc3-ee168367ece1", "indicator--f02c763b-0ff0-4dd8-b421-1b867b6eee70", "indicator--f4092493-5dcf-4911-b130-d870cc1eb3fb", "indicator--759e7fc6-5741-4274-a774-e673e9f5d3ea", "indicator--32e98313-252e-4d5c-8ca1-e13c537c39e1", "indicator--35a75e01-75a2-4eac-b7f9-f641e0ca3e3b", "indicator--386e733d-35e4-4326-88b4-2d7fdaa13a58", "indicator--55fb348b-0561-44af-a37d-4e8436ed3b8a", "indicator--bb2115e1-0e6b-4d49-b748-905c560f4555", "indicator--119b888e-f64e-4f81-8689-55a9c7674b7c", "indicator--f148e86f-1eab-4f7a-822d-cadf621f4fea", "indicator--e076f44a-deea-476d-9362-d37b986f3785", "indicator--02b72fef-621d-444b-9ac3-8ccfa67142db", "indicator--80d8632a-a633-4355-8060-99aa12b32fec", "indicator--b572b27f-05db-452e-bdc4-67cc34746c16", "indicator--4e25998a-c6ac-43cd-9f7e-0cdefb6b5300", "indicator--4540a612-bc0e-4c82-9fa3-d176b53767bc", "indicator--fbe052b0-70ca-4d05-a95c-ad5eebecbeb6", "indicator--1c5a94ee-44ca-455b-b6d0-7bcf13445307", "indicator--673989ef-af70-4447-a5d8-81ff3850bb5c", "indicator--5d6b14a0-6753-4e2a-a0d0-97b0b0ec3411", "indicator--c4d0f6c3-203a-4463-8297-c384acae1073", "indicator--dbf73a31-8a52-44d7-a82d-f1c748594b1d", "indicator--d2f96807-f5a5-4372-aee0-855efceb32ba", "indicator--798ccf45-713d-4757-85d8-c7dbd8b8ded3", "indicator--20332bae-78ea-4cbe-8fee-3760f3c3c409", "indicator--e9bb714f-88ba-4f84-877d-5f0b7a3e7b58", "indicator--baf44b23-e344-4ef2-a7f1-708672714217", "indicator--1a8f68ba-73ff-445b-ac3d-22b29115b77e", "indicator--abccec29-72c2-4938-b519-9d463301a615", "indicator--cd876628-b0f9-46cb-8c71-d5a6535200d0", "indicator--dd87e6ce-5f19-4968-a734-c02f4bc65d6b", "indicator--bde7d12e-6514-48c8-a3f9-82001a4f0abe", "indicator--690de7c9-0aba-4d7a-a116-c7fd58d28794", "indicator--2429378f-3627-4f9c-bae4-71cec77245fd", "indicator--50f67c78-b0ab-4958-ac1e-b8027fec6521", "indicator--84690ada-a98d-46cb-b9e9-ca3bd56e2263", "indicator--37aa2907-6b2a-4a5e-8148-44da2e894876", "indicator--f4d74f64-a1ec-4eea-a60e-3e63a049e67e", "indicator--3b5a9258-d5eb-417b-b42a-c1881421d3b8", "indicator--f9e316ac-9847-4523-b4b7-be8559d858a5", "indicator--e9df1d67-7aea-4db2-a4e8-9de8f7072992", "indicator--f4ae9318-6e37-40f7-b13b-cf1053fca6a9", "indicator--21ea9a5b-c925-401c-a26c-51c2a73285de", "indicator--e104d4a2-8eec-441b-a2b9-8c7aa8cb0f40", "indicator--a56de627-4191-4193-8bed-0237b433ad36", "indicator--845974c1-9442-4b3f-b18e-9067252d7613", "indicator--2480d305-fe7b-418a-a9bb-4dc6e6aa2fa0", "indicator--9515129f-b40d-44e0-9c8e-3100eecd2718", "indicator--eaa1eca8-1f08-4f7a-bd53-c4e0ce44b6ae", "indicator--8f75434a-dcc8-4a61-8d27-939983ee8dcf", "indicator--f062bd0a-0f02-4cbe-88b6-1a68d3c2701e", "indicator--f20fc198-5f50-4de7-ac8b-169ac63f7970", "indicator--0b481da3-b6df-442a-9dc0-31f60c0a1a08", "indicator--34310793-7898-43b8-9c4b-01ea4eddda7d", "indicator--4f5f969a-5309-4ef4-9e80-8003a09add00", "indicator--c246cf84-b389-4b98-882e-9038183b3953", "indicator--5138a69e-b925-432e-81e2-831ec0f0bc4b", "indicator--d6ef0a23-7fe7-4a48-a2a1-f678fb026511", "indicator--7b81cdd9-43fc-467b-bbf5-89e486bbce3c", "indicator--62a9247d-8765-4193-9993-a060569d5406", "indicator--6c2d06ce-70be-45a9-bd84-ec6d2ed7509e", "indicator--29a2c3b0-e66f-4194-859c-35484ac1c0c2", "indicator--baaf6117-f7dc-4fb6-bf42-a45cd6f331ab", "indicator--95f49c87-e74a-4424-b222-900d8ca3c374", "indicator--a9aa2e64-b55c-49a1-9be2-3040697624f1", "indicator--cfe8c9e7-87fa-4248-b494-85b94915fd80", "indicator--02c313f0-f475-42f4-9e39-69ba30591fba", "indicator--a7f69351-2a42-4276-8390-ec4cf5597d4a", "indicator--ee0c1853-6111-4bbd-915e-e55d1ca30b49", "indicator--2cca5a7a-f03e-4961-b04c-30d36e06aa3a", "indicator--e984fc5f-d8a9-445c-8cbe-3f39eeb1cc7d", "indicator--3e46e9d7-8797-4195-a97c-fc725f1a2d56", "indicator--fc2ce4a8-d29f-4d0b-b01b-2988ddb8f5fc", "indicator--ce6986c3-d798-4011-9b61-d673e70d63d9", "indicator--a5a10d2c-d6ba-4a37-9ebe-051ca6d5bc73", "indicator--e5c73e3d-b714-4c5e-9992-34bd7c50e58b", "indicator--842743d5-7066-4b76-bfde-376a463812a9", "indicator--dbc3e2e2-5f4a-4bb8-a72d-efffd0133246", "indicator--a422ca00-8c45-4b24-b00f-12f0304f3cfa", "indicator--4261cac0-9ece-4f81-8ac1-f20b47913408", "indicator--992f6849-513f-415b-81ac-e40a831a0cbc", "indicator--f626b36c-81fd-4ee3-84b1-b048da2e2ecf", "indicator--ba25e564-3c41-445f-95c2-c9192344029d", "indicator--6318daeb-9a87-4163-ac5e-0563aec1d73e", "indicator--46f27445-233e-4db2-bf9a-2b605660d615", "indicator--c780c434-d13a-49e7-b420-640737783271", "indicator--c9cb0617-a119-4d1f-854e-0d87748d9998", "indicator--fb567c44-9040-4511-beeb-99b606903b6a", "indicator--0132f5ec-92ef-4621-8ad0-a8d6c99148aa", "indicator--a304333e-4534-4a25-aee7-872e41891165", "indicator--f39cf63e-b279-4a89-b779-96f4d7640b1d", "indicator--25c604ca-901e-437a-a1dd-445fb980c363", "indicator--d2a07030-2ff8-4b07-88e9-03be2a77c36e", "indicator--2d786a66-5399-4c37-9b22-abb81f2c7681", "indicator--32ee2a09-f4ee-4495-b629-2db95c87df26", "indicator--ac3fed2b-9491-482f-be8d-ad47fa4f2f35", "indicator--79716792-ab02-41a9-8c2a-825fadb62dc3", "indicator--c0472b3c-746c-4e6c-a2ac-eceab44aeed0", "indicator--a62d5d5b-8915-47ad-b3c2-2d0d30f86d5a", "indicator--d4a09dd6-3b58-424b-930d-f6ffb699ff9f", "indicator--94bd0d83-8fec-471e-886e-19324e55f36c", "indicator--439535e9-9c7b-4b94-a71a-decdcc743149", "indicator--086e69bc-2f93-494d-a48b-c8ec726c39be", "indicator--a9f4723f-2090-4516-88c3-4c1de9ab9165", "indicator--4467d58f-4ca3-4870-afe4-3d96e04e33b5", "indicator--aaf15da9-b1d4-4815-871c-6b2e386400ed", "indicator--cbcfc5ba-3620-4eb2-b565-469ae4dd5f46", "indicator--f31a03c1-de50-4c70-bcd9-3e246c1fa628", "indicator--4e52092b-15cf-4bfd-9093-432d8a6c4091", "indicator--fc68d2e9-814f-4bb6-9fd9-500947a21952", "indicator--f805a93e-30e4-4bcd-acb3-6ef115f328cb", "indicator--b7b7d7a4-18a6-4a7d-9c46-9ed2150324a1", "indicator--7a0ea9a1-b8ab-4010-8055-765ee393c2f1", "indicator--6946b574-3d14-49af-9986-700f10f61b94", "indicator--b335c672-05e6-463e-8014-a36b6f5e50d4", "indicator--3741830a-3793-429c-b6c1-1157b2990731", "indicator--1e932476-f9da-40f6-89c9-83079417de35", "indicator--68a84f4a-94a2-40d6-b3d6-72b75ca5c123", "indicator--ae59faf7-8b30-4fb8-9949-f27f7c602b02", "indicator--995b8be6-dc5d-4634-a264-1cfba894ce69", "indicator--2b158447-dfbb-48d7-869c-0a42b44a4f1c", "indicator--7b335f6b-c0ee-4a59-a07f-feb55c934bee", "indicator--7bff9557-cea4-4e7a-87df-c1044c491e3d", "indicator--1f8895a8-1ba5-40eb-8f48-782d1e131908", "indicator--b9083521-03f4-430e-a442-8f0c5d78861d", "indicator--8f668818-5bbd-4156-95bc-066740951e5a", "indicator--4fed5fef-e47d-4534-a8bf-9fdffe068a77", "indicator--42fe3dd0-b129-4d41-84b3-9ddcf0233ff4", "indicator--7f14e3a9-d2be-4453-949e-7c95853c9483", "indicator--c6cdbfcf-a655-48e7-a907-d321a323c955", "indicator--c6f1f515-090a-44dd-8ecc-25ccd8694934", "indicator--d5879301-c564-4c19-8ba5-75db28de7925", "indicator--07e54d73-cd8a-49e4-9a4f-9fcd66e6a13f", "indicator--3ab089c6-2119-4fea-b21e-4c952a0b422a", "indicator--e2f76635-aff7-4a27-9798-99825517d71b", "indicator--59ea7697-60e8-42e6-bd41-d44a195da531", "indicator--115a8991-05f7-4552-91a2-7661de92a473", "indicator--093741db-1fc3-4e9f-8ff5-75844e1b55a1", "indicator--1184332b-c44f-4625-acd9-4dde85dc73d0", "indicator--020cec10-983d-4df3-a4a6-39f72be31afd", "indicator--eaf90c3f-8992-4fa4-9990-297d6e6898be", "indicator--4730c4ac-5e0c-4c65-9e17-481ff95a304a", "indicator--3f2c96d3-b883-4a66-a407-695f13abd237", "indicator--5c8d0ff3-f3c7-40ca-98e0-e7db5eb73cac", "indicator--22d88d46-81e4-4c2a-b657-05b5a42853bc", "indicator--4578f9c4-6534-483e-a41a-d2be6e5637d1", "indicator--2568480f-c733-41e4-b15f-94334f2a64dc", "indicator--6779590e-af77-4908-82ad-9f694ead2a71", "indicator--12c56029-448a-48aa-8be0-d9e90654617e", "indicator--f4e17909-522d-4067-8b22-4c4c5ca25c76", "indicator--cb2e4acc-e36f-4a82-89cb-670699ff70b7", "indicator--787d97e8-5d80-489e-a85b-c81221184ded", "indicator--3c23dda0-e16a-4032-9ff9-1d4d519166e2", "indicator--b13db2fc-f0b3-4b4f-883a-2825e10e1cc7", "indicator--bb3a55ba-048d-4a0e-85ad-472fda212a0a", "indicator--fe0fa01e-e4fc-4e25-87cd-690236263902", "indicator--685664cc-bc4c-4bc3-bd49-660e43c98736", "indicator--33f5809d-3c05-4e54-b9c7-1daf081af1f6", "indicator--05aa03ab-bf98-402c-b6bb-ad8f10440161", "indicator--d4124983-2a66-4578-aee9-65589a9b82ba", "indicator--6591b765-eac2-4e96-8d95-63f6d0e26243", "indicator--2216df1c-4b98-4af4-8b86-3fdab140fb74", "indicator--b9696ad4-47ab-4ada-a709-e6c4889e4e91", "indicator--a73d0be9-46cf-4424-a8e6-b07e789de03c", "indicator--ce95e9ea-47d0-4cd4-904c-a73f3e0f41d7", "indicator--33e77358-778f-4ecb-895f-27f7e0546a2b", "indicator--e0467e98-5b11-4dda-b44d-8a37c911242f", "indicator--bf2c699f-6554-4f1d-acaa-41a5ea8423df", "indicator--cfc0bf3b-2aad-4098-ae57-d272990a344c", "indicator--9ba5edac-70a3-433e-be51-bbd9458bbedc", "indicator--03dd2558-fc19-4cc1-bff2-7c3208faab9c", "indicator--55cf5df1-de99-4cf7-a756-0059aa8fa6c8", "indicator--a7a23e95-f421-4910-8ef5-e938f773581f", "indicator--a674036d-2a76-4b7d-973e-ffe1358ff738", "indicator--ce37e585-2699-4342-b299-489e59e36f1e", "indicator--a56417b2-060f-4a17-adb4-becaa2df8e0a", "indicator--aa7202ea-3204-4214-8a3a-cdae97a6c7aa", "indicator--2f3c5319-1f3a-45fb-ad70-2c72c3f8ec32", "indicator--0160ef5e-bafa-4f89-8739-7cbd0460a99f", "indicator--4237cfca-06f8-42a7-b21f-a043fa3cd9d6", "indicator--902c6a0b-6606-4315-bae6-d83c12c7a63f", "indicator--0f20b2bd-6b88-4735-9bc9-ed2a7d730ff6", "indicator--cea47f74-0343-4b82-b762-2097d8eca96a", "indicator--0d2f89ea-c53f-429a-9d9e-ad97932a1a16", "indicator--874c9684-11fe-47cc-8c14-d91060cc2d2e", "indicator--c2b1175d-22aa-424b-9a92-b45625a26ae1", "indicator--d07cc09f-9fe3-401f-b1bf-55d578875cf4", "indicator--94e54c35-3de8-4315-8221-4e59762966bd", "indicator--f17b5516-7522-41d6-8c52-d1536287713c", "indicator--a0cfde20-5e28-4ad0-984f-8da5bf32e21e", "indicator--b7c596df-b586-4c63-8c9c-5783fec4155f", "indicator--7ac754bb-c374-4af3-8630-5c07ebbfde75", "indicator--e3b86e8d-d924-4b15-a54d-a1e4a749c21a", "indicator--c0ef239f-5f08-41d2-8bb5-228958c0edda", "indicator--fb186790-0400-4aa5-a2a6-967827c46077", "indicator--402e1105-c4b7-4682-bdb7-7ea4a7ad6be7", "indicator--dd7f1c05-0190-45a4-b6fe-ee060035e6c5", "indicator--e2f8c581-cbf4-4974-bef0-5947265280da", "indicator--cab96f45-ae72-4f4c-ae0a-26507326d408", "indicator--7f055681-3267-4c95-9c4e-962e9b87e145", "indicator--3d3cf54b-a6cc-487d-91d6-6ca9dabafc4f", "indicator--eefc14f3-2e33-4337-9f19-218265dd54d3", "indicator--aeb45c11-ba24-4850-bbf3-60f32b9e1ee6", "indicator--393a8808-12bf-4690-8e8b-3e4057bf7a3e", "indicator--6be2a829-986b-4431-8c77-2aba2ee60c56", "indicator--77a602ac-4152-4d06-adc5-d71545ad6b35", "indicator--ee0f2446-f435-4d19-9420-64bc5649f87d", "indicator--527edaa2-760e-43ec-bffb-2251fa8e19a2", "indicator--858965c8-8b14-49b3-8f1a-c93773cf86f7", "indicator--7774d90f-1440-404e-9b02-d3252bcfee51", "indicator--ecff1f38-5459-4c63-845b-2aea668729cd", "indicator--0a2d561e-b18f-4174-8a9e-0e2cd9289198", "indicator--0434bf06-821a-49a7-bbb5-3313a9604462", "indicator--60202981-f0ab-4d3f-87a7-077e121f6c9d", "indicator--1b6bb20c-769b-4ea3-8659-e2000e09a006", "indicator--da0d0f57-119b-4886-b279-013221dcc9fa", "indicator--ffba58f6-d7b8-42a0-aaa3-d4db578dbf9f", "indicator--ff196f3b-42ef-4324-aac8-b40e135f27ff", "indicator--121f0c86-945a-4851-8d9f-e0d67fdd1b0e", "indicator--6b189092-fd92-4362-a966-aa8b185803c2", "indicator--aa722275-41d3-4de9-ad9a-684dec401f97", "indicator--3a7d7cb1-28f6-4e76-af59-f66397645086", "indicator--b00857be-1710-4423-aa66-9bbd749062dc", "indicator--fd77b274-f1ca-4056-a669-8c866d670e88", "indicator--aa62792b-df4b-457e-bbaa-c813b1ae0d97", "indicator--cd9d3c64-a285-414b-a0aa-6356b25214f9", "indicator--507b2881-a1c9-4fe4-88ab-c6c2bc17af68", "indicator--d749740d-3d40-4388-8b9a-3257e600954f", "indicator--d3812cde-8ef9-4b10-b707-63f48d326763", "indicator--8b5bb261-133d-4d88-a0a3-16f118dc730c", "indicator--4dc00615-11d8-4021-9b37-65f144b5cbb0", "indicator--ab998471-4859-40fe-bc02-e22d8b98a883", "indicator--2160fd3d-e812-400e-92fe-c7c0cf12cf87", "indicator--d5f999c8-5445-41f8-bf28-aa384a70ddb0", "indicator--3efffd01-f052-4c05-87eb-86eb473905a1", "indicator--1fe4359f-d1f0-4d8d-a75a-9c8723938cac", "indicator--50265173-6686-4b44-b724-52037bcf7bc1", "indicator--e6f7eab4-f21e-4060-9a14-974b8c5b1b70", "indicator--b00b5a63-4fe4-4cb0-ab6c-3ef5b1c6ae21", "indicator--a676d587-3726-40fe-bd08-7e1256308b66", "indicator--7f223f5d-a98c-4a64-a682-fd5867407802", "indicator--0f80e622-8da4-4984-8b1b-bafeb64a42f1", "indicator--c1d67cac-5509-4893-88f5-eb74f1cc7b80", "indicator--19765321-cfd1-48a7-8d1e-8c951bd40da6", "indicator--dc3fded1-cd9d-49f7-bd51-518b01e81501", "indicator--43d76c19-ef6e-41c2-96db-58d5d4aad941", "indicator--1b70605f-421a-4e91-a4e4-33676f69ea61", "indicator--7e652580-e0ad-46d3-9ff4-a820c64af3ab", "indicator--07235ba5-24ae-4483-8c53-25605bcea959", "indicator--03740b1b-7a68-4518-a71b-c30f19e7883b", "indicator--b42b5371-1f83-46a8-9331-a2b3e8d0723a", "indicator--9f113d38-8ed8-4c08-b219-945352bddc02", "indicator--3b07c933-4b7b-4ce4-9061-6e9a72c451cb", "indicator--520fd358-2867-438d-8fee-6e23c021d187", "indicator--f0887f10-e702-4ceb-953a-79bc4a76217b", "indicator--78230b2f-7d5a-4a80-a7bd-8570c29da27f", "indicator--48d79261-4882-4da9-b124-0a853cc514bb", "indicator--9ff387a1-a0b0-49d1-810b-89fe0ebbc8fc", "indicator--f075def0-c296-4e68-bc20-5717f2e264e3", "indicator--7170de3d-4c33-44aa-8b6e-47c58fd61f00", "indicator--dc226375-cb87-42c2-9053-ebaffeb1e4d0", "indicator--e4fcac7f-22ab-4731-867f-b6ed95cddd73", "indicator--a14db64f-3c27-402b-ad85-189a5c045258", "indicator--6982418b-3075-4673-9ad2-bacb3df58d9c", "indicator--e7187214-b927-479e-aba4-3cd834b029af", "indicator--eeb8574e-aab3-4b71-9b34-50e51e2bc224", "indicator--34bd26c4-f3dd-4375-9c42-7e9cf415ec19", "indicator--a684b256-850a-47a9-9d02-284fabf98438", "indicator--0314f02f-40d0-4561-8314-3abd27f710d7", "indicator--2dd2bfb9-d799-420d-8c1a-55ef72ec6940", "indicator--03429c5b-5924-4f12-a0b7-bea2d0bb81c6", "indicator--0e3d7287-64d7-4f48-85ef-cb0b0722ae79", "indicator--7909f65f-84cd-47d2-a713-1c2bda53738c", "indicator--b295ae4c-501b-48ef-85ab-2c2b2758781a", "indicator--a6dc0017-45e1-4f7f-9e2d-742b5639e1f4", "indicator--9e09d77a-2eda-418c-a762-a4950a93c7bf", "indicator--27867645-7db5-462c-831e-d530e996a1c9", "indicator--acf46e0a-ac79-4fbc-a51e-a10e5998f7f2", "indicator--cca5997b-8f05-44a7-94a1-8f7f5568ea00", "indicator--571e99e5-933c-4a3d-aba8-940f6576b1aa", "indicator--879ab24e-a0de-478f-90e5-8d9bb9f40456", "indicator--34264dff-ae7b-44e4-acc1-4331eb22b132", "indicator--90fed253-ad8a-43cf-90ad-f3534e9e8785", "indicator--a8e35f6b-cb5f-4b63-a887-551c83f807bf", "indicator--258d2434-f21b-4b27-9f3a-77d5eb0d1592", "indicator--e8f7f27d-7ee0-48f9-a161-f9c2782c6947", "indicator--3aa5d031-4b5d-40c6-9f31-95917b382044", "indicator--1baf10b2-aa3a-471a-8d4c-d4077a2c4c46", "indicator--aaf27b4d-c390-4376-bac4-beadaa6ea936", "indicator--9ab9c7a3-c48c-4860-a377-0d20d0bef057", "indicator--6dc08a8e-ce39-4f5e-8516-06a44d430150", "indicator--d85babcc-a5ed-4b7a-994a-4a4f3bb6c27e", "indicator--48feb1bc-282f-4b19-acb4-c5f1b11580ce", "indicator--1b37f6e5-7a75-4bc7-8580-4238be09e023", "indicator--32929a1f-6f3a-4d07-92b8-276eb79b05e5", "indicator--2d334226-6fa4-45bf-8547-de15f981827c", "indicator--f07b6c71-fa00-48f1-b6f8-cd95ed500d84", "indicator--6b14dd44-45c0-439c-b944-2a29cd9bbe0a", "indicator--0b45aa9b-7f09-4ff5-8752-d08e0f2a1f8d", "indicator--2fb9507e-5e74-49e4-b4c1-aca3c7cc76b4", "indicator--47fa6647-b0ca-46aa-b88c-1ebe857579c1", "indicator--7776ded6-ff48-4a74-80e1-8d5c01997585", "indicator--4d120bcc-0f57-481c-9087-e1dad928ceb0", "indicator--ccb8d8f6-3468-4c56-87da-9efa48bfc733", "indicator--3e8803cc-5cd6-4871-8434-8970f4cbc5b3", "indicator--691189d6-4430-4f5f-942d-2489b31f3a77", "indicator--2300cf13-3153-4d9a-a07a-dde4892b322c", "indicator--33e3a75a-82ed-4681-aa21-028eee31587d", "indicator--edece51a-ab50-431c-a91b-2c4b4257f6be", "indicator--49fe757c-6f09-40f7-bac9-f072203df957", "indicator--b47d818c-e45a-4ae3-be7c-abfe65d142ec", "indicator--b2c3f0f1-fb23-4ba6-89f8-e98bdf74327a", "indicator--170c9928-8f41-40d5-9b1c-258f4ef3393d", "indicator--f625f89f-84af-4357-af04-6137ccce59b7", "indicator--f2b537ce-e592-47ef-ac34-50fcb84d4e6c", "indicator--1e936ca7-1b22-47c5-8c74-7dabd28953a7", "indicator--759bca5a-3111-4eca-b4c7-dbea9cd5b73f", "indicator--96144982-302f-4003-a8f0-5001f9314d62", "indicator--b3382fd4-59c9-4225-87dd-49e155d2b7ef", "indicator--2d7983d7-b4ab-4ebf-b413-3a53bcf79d9f", "indicator--2965ea15-2642-4e2a-8025-f296f96bb22a", "indicator--8b1014cc-eb55-4b34-9632-713c91ddb296", "indicator--b372f8bd-bd7d-4b0d-9dc7-db638e3c1fa9", "indicator--f75888a7-5121-4b8d-a975-2d328569719b", "indicator--4b64ad15-6b3c-4145-bed3-8d6e335d6b50", "indicator--96ab6bc3-1d7a-402c-991e-4e726245a860", "indicator--ac8879a2-855f-4899-856b-52a40b9f9217", "indicator--1485fef4-7a36-45f5-b1ed-0c9d99ea0900", "indicator--2559e586-159e-46ba-8ebe-ebf866bd3e4b", "indicator--74cef0f1-bc8f-444e-8d1c-70046f5650a0", "indicator--b7d9080a-d273-4e73-ace0-145a9554ec14", "indicator--0bc51473-2e01-49d8-9377-bf4ecd75ff5e", "indicator--823a88e5-cd6d-436f-8f89-0930c753060a", "indicator--807e79a3-9205-4dff-b3f7-9e8dc192e035", "indicator--af41f96f-d2aa-4931-909e-0d797d2b9018", "indicator--e2ac3b1b-0979-418e-98b8-390617c63fa1", "indicator--ec1f4eb6-3927-4544-b172-bea75656d895", "indicator--c9666a31-a149-43e2-bbac-afa8130f662e", "indicator--622e1b60-56d3-4f19-baaa-1e3b1df171c0", "indicator--594cd1c9-bd17-4d58-94e9-16bda73f660d", "indicator--7971b558-21e5-4620-81bb-36944d76b5e6", "indicator--04ec1772-431f-4af7-86d8-d32deab75830", "indicator--52dac6cb-171d-4a4c-8938-542f09fe0f79", "indicator--f5b4810b-06dd-42f1-ae01-bfed3f2766b9", "indicator--62acf8f2-1ea5-4205-a49b-967e0113bdf9", "indicator--e792f35e-f435-4300-bf63-4c61418e03f3", "indicator--232225ac-6994-4344-86c7-0b9129e28f48", "indicator--61d901ae-022e-4b04-baff-e45e04d3c099", "indicator--820666e8-97a4-4828-8788-88a48610412d", "indicator--214f2e03-5930-4f65-a559-72794411fa4b", "indicator--6e7e021a-7b32-49a0-9c58-bc9d2ccd0005", "indicator--5012378c-31e0-4a50-85f4-2c9dcc3a2bbc", "indicator--9c7a7d0f-02d4-4a2a-9a2c-faf7e80dc312", "indicator--8fae26bf-c104-45aa-b144-5a9ce37a4389", "indicator--5e5b6ea4-8090-49a2-9fb5-6c808c068ab8", "indicator--6fe99435-6e5a-468f-aca9-5125380eaf57", "indicator--e1e7367a-5c63-44de-8fd4-f6153799518f", "indicator--f5133c38-7aaf-4c3c-904d-1ceb898576d8", "indicator--6e2208be-9243-45dc-9d4a-b27a4733b202", "indicator--2fd2c166-541b-4af2-bdb0-59f2b46a2719", "indicator--3655270c-38a5-4b9b-acda-f3051e1eb35f", "indicator--53cefa05-9154-45e7-b6b9-d67991c036f6", "indicator--c966fd32-5768-4275-9b84-9a8b2f13c3c3", "indicator--feb6bec2-d482-4b5c-8448-c9bfa6e5759e", "indicator--8bf0e241-09e3-4072-9d09-f67e5ee7cda5", "indicator--e0ed2fe1-5d98-49cc-b0bb-40c5506a94ab", "indicator--50cbedfa-a669-452a-bea5-b50a52d65afd", "indicator--427da4ae-3dd2-45b3-8b60-7f48a3738bec", "indicator--8a975881-b273-454d-b68c-e8f1e853fcac", "indicator--2f86bf48-1e44-458e-8e00-6f9730c84ecf", "indicator--fd49fbb8-77b6-4aae-a53a-dd82a45a9c6b", "indicator--97e8a60d-a81f-4caa-aa52-8ec163054789", "indicator--7373c5b1-0509-4c26-8691-6840368edf77", "indicator--24b2ddcb-707e-49af-8bac-f30fbf114040", "indicator--d61214a0-e071-416a-a8d2-410687782730", "indicator--9d2b269f-6f39-4198-b116-f9129b231f8e", "indicator--1df36e2b-1c1b-4a2d-b138-a2fbeb9c74b1", "indicator--9208b1c2-f6e0-45e7-8022-c607c62fa315", "indicator--5511abe4-f957-49cd-90a0-67c799901f00", "indicator--fcd3fcf4-ff13-4223-ad05-92fa4bc09b53", "indicator--135db24b-ba5c-403d-92b4-ab519e3ba368", "indicator--561070ae-f711-427a-b356-e9a84e600105", "indicator--1b5584d1-85ee-4e05-898c-187d0cb02f4c", "indicator--a5f25667-d7a7-4194-8a24-cfd78f12512a", "indicator--06737225-72b7-470c-b4c8-8608c1d08eb7", "indicator--f1b61646-7429-4b94-b002-9c106dc0bdba", "indicator--414c0ead-8391-4c72-a66a-741a9d0fc261", "indicator--f34ec801-c671-4e00-ae46-8c7fad4fe144", "indicator--b61e250b-eb52-4a48-b761-3714ce95f43a", "indicator--1a32c9cc-4402-4059-a366-0acc56f59970", "indicator--58a186e9-dad7-4d80-87bd-e4da54179b14", "indicator--7163ed0c-6dd2-4ad7-bba5-963a1ab29f04", "indicator--61c6399f-a9fd-4ff9-90ce-a7fadb92786e", "indicator--2b7f9cb7-4b73-4b4d-8433-972c5adb7c81", "indicator--a5bf3ec4-4aba-4ff9-8058-c2e2d9f842d6", "indicator--1ae37d21-eac5-4fb3-aee3-bf790d34a34f", "indicator--66670aa7-0697-44e5-850a-95a826032841", "indicator--300a50d5-916c-41e7-a5e4-cd95dd38a178", "indicator--ff5eab67-5f29-4d1a-9559-4c0690a18c51", "indicator--1653bf45-005e-4924-bde8-3302e5d17545", "indicator--43daf459-e8fc-44a6-997d-08f75f4ea4b8", "indicator--8086c5c1-63db-4dc3-b3e3-64a7d8d7fd8c", "indicator--aa4bed2e-c053-4ec6-8efe-cb2bf8d7242c", "indicator--f2315857-1466-4061-ba82-f5aabb861190", "indicator--053264e3-6ee4-44c3-88f3-4a7491029c4c", "indicator--feebbfa1-d4e1-44ba-b87e-852e5539faac", "indicator--973c5824-aaec-4c05-b9ee-2d7cf08d8034", "indicator--7b37c704-2312-45b7-9f9f-8f252f8cabfb", "indicator--34bbf9b8-9fe6-477c-bdce-3380919c2104", "indicator--809833b4-4128-4e1c-9bfd-6957422ea7ab", "indicator--9cdbd1f5-f955-4b24-898f-e06621f26a06", "indicator--f5b71c69-4751-4227-9948-38822a828c0f", "indicator--84d7d2ae-cfb1-4314-ac40-154f8cc1e976", "indicator--d83ccbb0-134a-486e-b1ad-8ed6069bd067", "indicator--a65e4293-fec6-47df-8a3a-388050bd847b", "indicator--0af92793-4445-4b74-996e-730f747c5755", "indicator--3293e969-b91e-40cd-b738-37b24703a1dd", "indicator--818921b8-71bd-427d-acec-de3b4462e8ba", "indicator--a05a3e5f-65d1-4f2d-8c7d-00725072034d", "indicator--eeab1651-e561-4e9a-b788-b8f1d0cd0806", "indicator--f528c53c-2431-40ef-9f0b-b72353faa6c1", "indicator--4115ce00-65e7-463d-81fd-bb7d9f5e221d", "indicator--b42b4168-39fd-4c2a-a5ff-83ed7d522f1c", "indicator--c840c45c-9979-4f2f-a929-ecb4da38c145", "indicator--4f07d4b5-85b1-42bb-806d-7ae3eff55725", "indicator--e24370ef-ebc4-406a-a86d-397434fe148a", "indicator--88282adc-b21a-48be-9c08-6b20c4700d18", "indicator--730d49d1-44f6-4fd4-bbfc-ff942521ee82", "indicator--411d6e4b-66c5-4c44-b8df-9e9eb19c0b45", "indicator--a66f14b5-eb4e-426f-bf4c-4ee594011cf2", "indicator--2287fb3f-4bfb-47bb-baae-cf51cfaee02b", "indicator--3b4f8f26-b8d2-4ca6-a678-c8e164f6d44b", "indicator--7a2f7f40-f478-4148-bb19-7b572d3ba5d3", "indicator--f8f3f6f3-511b-4e32-90f9-4b77d3631e21", "indicator--ad732311-beff-43a4-be70-a5afb10cf902", "indicator--5a82e8be-874e-49a2-982d-2a595722da7d", "indicator--e814e3dd-99dc-46e9-9815-94ddd9627bb9", "indicator--d96b2924-7f8c-4d15-8966-153818990200", "indicator--08f0e72a-38da-4d96-b651-a4f9e479bfcf", "indicator--fda22222-59a9-4358-af84-cb9d74a16d5a", "indicator--a9873a29-8a3a-446d-bf7b-46142ee179d8", "indicator--15fea315-fedf-4a9f-be86-fe11df4b728a", "indicator--4ab299b3-7f72-464a-bfd8-faf1f31ea826", "indicator--8dc415f4-a7aa-4a18-93f0-6cec49796039", "indicator--fcc95c03-3b99-4fed-a022-30ec19ed70f2", "indicator--1fe4f806-9aa6-46a7-b2f6-221902d91cbc", "indicator--a83513b1-73e7-42c3-bf08-f4065424791c", "indicator--3ef56824-6e55-46cc-9355-c88ca8c2634e", "indicator--b57d3724-c058-4c3f-b22c-c181662a199a", "indicator--08c1fd57-1277-4082-b7c0-bd40a051d05d", "indicator--8a701255-dec5-471e-b20c-215947f9b61f", "indicator--e57668e8-3eb6-43dc-8c43-72025699cf2e", "indicator--be3d175b-2c17-45d9-938e-add52852ec97", "indicator--c83a6b3e-e567-4a0a-af84-ade78a646f29", "indicator--e7760b62-9866-4d21-8dc1-91affc71052b", "indicator--add6aa94-4d69-4945-9f54-2ac745bf1a5d", "indicator--bf656e05-d375-4e33-8d6c-775a3288df8b", "indicator--87da8445-fa19-4908-8fc3-930e1eeb041b", "indicator--626e909f-958b-4735-9d5b-526623c98d11", "indicator--de63abb9-1135-4d2d-aba1-40c2048086ee", "indicator--9eff5c01-a298-492e-a13a-6bd9e4db8543", "indicator--b6d08fe0-536b-4063-b98c-0c47aae997a8", "indicator--2501e9a7-7409-46ab-b586-d385c02c856e", "indicator--7983e8d3-7116-4271-8be4-724659e70e62", "indicator--9ad01679-851a-4328-99e6-eaa5eb999bcd", "indicator--042f5e70-38bb-45a5-a911-5aed36e37701", "indicator--2ed176f4-8730-42f1-965d-4f73fe363426", "indicator--790a6c78-8063-4767-a99c-51e7ff019e79", "indicator--fd3c88f1-eb1b-47a3-b4f9-3139b1bbdba7", "indicator--eda34f49-4f67-4a21-b109-4b70f26e719f", "indicator--abbd832c-bc9a-43d4-a522-a1129c48119c", "indicator--fedbea7d-0275-4597-a29d-4d84134c1ad7", "indicator--f107f7bc-55ff-4376-8045-b81d7c7bf0bd", "indicator--c83a7d7d-fad4-4d28-ac3a-bf0753166d0d", "indicator--946890de-b1c5-46f5-ba4b-00f68c6c6217", "indicator--dc7304f6-82c1-4d35-aeed-4b59981bceef", "indicator--ea20525c-0b30-49a6-8e58-7dd90e449853", "indicator--b5ee4b12-cfcd-4bee-b846-08f13df68fe7", "indicator--3b19a198-de2d-40bf-a41a-63f53f97608c", "indicator--e293d810-3586-40ca-8c8d-299b378a1057", "indicator--b215196e-8efc-4328-a8a2-9f7c4929499d", "indicator--10c2523f-498b-4a0b-a012-b78ccd4226c6", "indicator--6bb45120-38ac-40c4-ad5a-d8a7ada92df9", "indicator--3cb7098d-8b69-439c-a14c-96d9dbe05857", "indicator--49c2b44a-11b0-457e-972e-71437e9c1cd4", "indicator--af38341b-125d-4e7f-9015-72c623ebab8f", "indicator--ff18bc09-82f1-45f9-95d9-ce4d9722d659", "indicator--d8d6e82a-dfca-404a-8545-564f306d0241", "indicator--543b6e7d-e716-474e-9bce-dc66d89e4fa8", "indicator--9982d92e-2d84-493a-9ff4-4f252ae99837", "indicator--ccae1696-0073-4638-a32e-1eb1e1c93d91", "indicator--bac9a595-c2a8-4449-a977-1d4fc66e4ef9", "indicator--a7110650-6978-4b8e-9881-47df2932deb2", "indicator--b34f40ff-a0d6-4c3e-b1b0-d339dc6a70ee", "indicator--ffb76d31-da90-46e3-978f-5faf518985a8", "indicator--29f8ee6e-c567-43ca-9a2f-2dd4b367083d", "indicator--e7c87934-d6b7-4099-9e6a-5692dee9c12d", "indicator--6312d874-9a4d-4398-9e4a-fe8c09806e14", "indicator--e7924685-bacf-4254-bbbe-4e23a971d593", "indicator--86c99051-f77a-4d5e-9ed0-ab702fecca97", "indicator--e5d24561-5d29-4045-963b-c889c491481a", "indicator--fad8e451-64de-4bca-b5ad-b8571e0fbe94", "indicator--6854541f-c9c3-47d3-b69b-0bbdbacb5eef", "indicator--0fac17f8-1cb5-45fa-9e22-472567f2f213", "indicator--87282b97-a53b-41eb-8f3e-0d45c02e24a0", "indicator--01e12e53-bc26-4216-9076-9fffd4531317", "indicator--28f57352-e838-4d2e-87f5-2d6f787bfc47", "indicator--df076e67-a5b3-41f8-8367-3d7cb800077e", "indicator--35fdc3e1-1472-46bd-8857-e46178d000c1", "indicator--5f047a7d-fae3-418c-bd2a-67f6c3e5802f", "indicator--d51e54e5-f203-4f99-9c79-9da483ef1a0d", "indicator--46339502-f9a8-4d4e-8648-0567798f538a", "indicator--505ab9a7-134c-49aa-b7db-850a6c50f3e2", "indicator--45d7e7a5-b500-47a8-ba8c-2c1a24256e3b", "indicator--5df77a24-1d39-4e87-9d6b-1975b87ecdb0", "indicator--9b35cb4f-4081-4a4e-afe2-f832b9ec1cac", "indicator--3ac5d012-8d90-4c23-8115-a501a9497760", "indicator--a6312297-8693-4cd2-a4cd-b4009060d4b8", "indicator--060f139a-eee8-4146-97a0-808efe815988", "indicator--6e30de16-6b3f-44d5-96d8-07e4995fecd0", "indicator--7047be92-b2be-4a2c-acde-a3dd6e974c16", "indicator--ee2752a2-830d-40ff-ad2e-2ffa012b571d", "indicator--8ce71557-ff92-493c-bb6f-07f4e70c07aa", "indicator--6a9ab64d-61ab-4220-bfa5-8d751c5c5457", "indicator--4b57293d-1724-40fe-ad57-4f2e037bf1f1", "indicator--b6ce14ad-6bbb-4104-b443-7e05e0e0b8cc", "indicator--ba2d3493-9592-48bc-add6-db8c8f396201", "indicator--d7c44dc7-eb16-43c9-87d4-d23ddb933b48", "indicator--045ec539-2dd9-4c92-bbfb-e3f32f153a47", "indicator--9eda573d-928d-409f-8d69-d70014f956fd", "indicator--44cd447a-2ff1-40f5-bdc1-eff565be80c7", "indicator--3df1bf9e-78ea-42d0-aa20-70d7c2a811b8", "indicator--4d9a919d-1b76-475e-a3d3-ba003828e93c", "indicator--c6508866-9424-4d27-a371-ed3671d3cb7f", "indicator--90ff3827-e936-4eaf-8412-7782b3dd4216", "indicator--c5dda0af-c6c4-4dfa-9565-24444683daa2", "indicator--148cc1e0-a882-4073-867c-6f148c79cd4c", "indicator--8f863447-d5c6-4ac8-b496-d181b300e2db", "indicator--4a5688bc-a4ac-4260-a153-6c72b85396ef", "indicator--a43c71ca-b5e4-430e-82b5-6c359c775798", "indicator--e2d3b0db-39c0-44f4-82b2-39fb5a7f1b05", "indicator--5a20e19f-b675-40f9-a0cf-a9f51eb54cb1", "indicator--a93a2742-ffe5-456e-8dc3-76d78105e114", "indicator--79829927-f412-42b9-bc24-ee0fdcecdd02", "indicator--cee25be7-a75f-47f5-a149-3bb7df5e7ec6", "indicator--e738f82b-badd-404f-82b8-178bf5e9e1c5", "indicator--781fd19c-d0c8-4fa2-86e2-4a6f438a773f", "indicator--ed45f47a-c6b9-408c-b039-ae9e9c561d89", "indicator--a2e827ad-26ed-4188-bb02-ed3927d10057", "indicator--6b2c603d-0403-4173-903d-d6086de47a38", "indicator--63916472-3af2-4541-9941-233ac0488582", "indicator--56182eb9-f182-4d05-a5bd-cbe3d695762a", "indicator--5284970f-5b98-4c78-858d-90123519fb8c", "indicator--76d05e51-0171-4b95-9081-cbf051f15917", "indicator--7768195f-1d5c-4df3-a05e-3c6fa6fb324b", "indicator--3d47a99a-163e-42da-b8be-7e8295429fab", "indicator--7dba8814-15f9-48b3-8a50-d24f67262408", "indicator--742cfe02-d8ea-415f-ac00-28f8a4eaf764", "indicator--4666d3a5-fff6-4545-b4f1-91ef07fd4885", "indicator--9a9d60d3-cf8b-45d0-8e26-ff0d63f23ddc", "indicator--04f550b4-5ece-4e7e-afa8-0a01a0ed7176", "indicator--b029e52c-d86a-4f4c-92d7-788a742ebb8d", "indicator--9de811f1-2d55-490a-be83-d594b3cedbcb", "indicator--47d7ae5c-7533-4a7c-b88c-6a390466039e", "indicator--6d9fbf0a-208e-4b09-b4af-0182a2a78437", "indicator--da660b9f-6dfd-456d-a739-e117bf4d3fb6", "indicator--c54d8d21-9985-4579-a79f-0238a0a032d0", "indicator--e09f51a8-ede9-4551-83d7-1d0f1f81d322", "indicator--8b5023e4-383d-457a-b320-8dbad95034a6", "indicator--117a4b94-a210-45f3-ade1-df3f5441f1ab", "indicator--1fe7b1c6-8c2c-457e-8566-036ff7c82a02", "indicator--362e87a1-3797-4541-98a0-fa5ad1c16abe", "indicator--712a133f-0be9-47d1-a36a-64739ddde611", "indicator--f35f1f94-bc1c-4dfc-b174-2dc8bd04ad0a", "indicator--8eea53fa-a244-4faa-a2d4-96f58815c11c", "indicator--df6d91a7-6720-4b9c-a79f-4ad35bf97829", "indicator--8c0b0e52-ea59-4a32-98f9-ba6360ba365f", "indicator--31e0f598-a04f-4fa9-988b-6a108479afa8", "indicator--9cb73fdc-9122-4f14-b5d9-46e5b3ccd326", "indicator--ebaec2aa-039c-4c4d-9b6a-a64731a2ee65", "indicator--f2e58122-f334-489b-b9fe-b332a4d79e34", "indicator--ab0470fd-c617-4e36-9dd3-45a1a782fdd5", "indicator--3cdcf0e2-f271-421b-bb86-6853a97aae85", "indicator--5a522f69-112a-4a53-8704-e0a7ca466a29", "indicator--a12f01f6-c5c9-4717-bcaf-4df2df67c0cb", "indicator--9b73ceec-18b8-43ff-beb7-3d9d8252c099", "indicator--9bab65fc-53a1-4373-ac9d-bfc696e4f58a", "indicator--c4175bfe-8a27-413c-b52b-1fbd1a87e977", "indicator--74062507-c4a0-40a1-89a1-92215d3786e5", "indicator--ca3b9cd4-559f-4e92-ab96-635a1512c116", "indicator--c81ea9d7-c9cf-40eb-982d-dc0d4e7c3f73", "indicator--c58edc05-b30e-46f7-90dd-8d137c15a817", "indicator--edf46300-a18f-4e14-a104-bba1076fff88", "indicator--48072d2b-d3c6-439f-976d-c529b493dff2", "indicator--8c2c0022-4b4c-433d-b4fd-337c94692a73", "indicator--f842fca1-2603-4371-bbc3-56916ace890b", "indicator--eabfa553-50fc-45bc-9c95-8e05c5917c57", "indicator--c36e30da-ef30-4627-a34d-4ff6254f7868", "indicator--cdfc5b1b-97bd-4aa5-9df1-7e1f66cd23f6", "indicator--a2ef7759-5634-40c2-a2de-eb22542b105c", "indicator--0329c794-bbb1-47bc-bb7b-273a186e070d", "indicator--b12387f5-eb34-4290-b7d2-4b731d16e961", "indicator--d7260a52-0144-49a8-a04f-347593b32747", "indicator--70f78c5f-2d2e-4bbe-8d74-31975797a8b7", "indicator--24862cde-dd87-4717-9bb4-eb109ae295bc", "indicator--aed947ea-390d-4f78-a501-4a637cf429d3", "indicator--7ec117fb-92ba-47de-a7bd-f4e108887272", "indicator--4a610bdc-6866-4d8b-b48c-530ae8754fb3", "indicator--3855ae9b-9e1c-4086-ab03-c35d9e036f33", "indicator--936c7bda-b7a4-4acc-8e93-d6f04377791c", "indicator--843d1584-a196-486c-9d4f-287637b72c86", "indicator--954a29ac-5a5b-487f-8534-77236b2620f5", "indicator--fa081613-2a8e-49c9-a180-db6bcb4e6aa4", "indicator--ac346872-f503-433e-8a48-180bf7cc7a55", "indicator--5ba3cc38-9b64-48c7-9343-e30ef3b66380", "indicator--22881281-ffb5-4ef4-947d-8dc7e2e19da4", "indicator--330350ff-393d-43fa-834d-694065453059", "indicator--2fc0b30c-073d-45fc-926b-9633dd307162", "indicator--75c5cf82-0cfa-4cf0-b0e3-494024d0f9c0", "indicator--bac8d626-15e6-407c-a2da-de1b34ed8748", "indicator--04747ada-df8c-4c7c-8f9e-697343ca2b43", "indicator--0b622377-6a40-42e9-acab-81fd3c16a18e", "indicator--26dea9e3-8795-4b71-816b-45127f97bd4b", "indicator--794202af-f8f9-444d-acea-798f1c1aded8", "indicator--047e9fe7-7611-4f64-920c-926dec7be19c", "indicator--d22de0aa-ce92-4c08-a0cc-67b4e0232377", "indicator--ebf0ec84-346d-4622-adda-87c926980038", "indicator--7a7a69b4-57ee-4284-bfc6-c86eacb6fc3c", "indicator--6ad9d4c2-f029-4141-9cac-3f87d8d19886", "indicator--81948afc-232d-4ce5-ab63-bfe6517c2c16", "indicator--56882337-d2b4-49b8-a001-85ada36673e6", "indicator--d67efe72-4afb-45ea-9214-b5213a7246a8", "indicator--86051834-41c5-41df-a442-cc79edfc1de1", "indicator--a7f6f7cb-93be-4ec8-8f51-b75128839f45", "indicator--31ed8985-bfa6-496b-9bcc-8f5bcd989b86", "indicator--252055e1-0d0d-4e50-9385-9d3e8391d2e7", "indicator--0ee36be3-7a3a-4c99-a555-b2c8a8ec30f4", "indicator--dac4c2ca-93a1-45cb-8906-b17f5e6caf33", "indicator--b04b86dd-e355-496f-be26-ce0901cadf6c", "indicator--9228c74e-c4b8-41ba-8ad5-a89abc43fed3", "indicator--7119c089-9ad8-4374-b1bf-a07de6eb3bce", "indicator--f4f52b72-8a8d-4168-848a-547bfadc6544", "indicator--0d7dc2e9-9774-460d-80b2-66eeda3640ab", "indicator--8d49de95-7e61-4085-842d-c5d8d9589df0", "indicator--47938799-8460-471c-a8e3-5b5a3b60d82c", "indicator--cccd3e93-d071-4eb9-9d12-81455181f8c8", "indicator--d607abff-c100-408f-9c27-e09113928d2d", "indicator--9a27fab3-939c-449c-8341-29f4d3528bc9", "indicator--911c5047-c838-45e1-a690-35e185fe4e09", "indicator--86753c28-2307-4580-9d8b-6eeda01ae0b0", "indicator--3e41fa1a-7d75-4275-8f6f-db22071d5eef", "indicator--3f9fda68-036d-4d0f-a3ae-7c4e000e6385", "indicator--5c746d66-7cc5-415c-835e-86b8d0537378", "indicator--b4682235-067c-4ad1-bdc4-10f499a415dc", "indicator--6a2ef0a3-14bc-4489-9029-d435de7bf0d5", "indicator--370b858e-24ff-4ae5-b2d8-0a20ac544635", "indicator--dbd1e9b4-3c12-41ac-872c-44d0c1c77add", "indicator--3a7d67ab-ed39-4b5f-921e-bcb9f00795c2", "indicator--7fe79f80-67a6-496d-a549-a4ea40b32ec3", "indicator--b1de1420-41ad-464a-b326-8b3af897a89a", "indicator--cbf5b6ea-eb22-4f51-805d-fda0082d737e", "indicator--2cbd1f45-ef13-4748-b768-cd89b5656a5a", "indicator--d23dc936-bbf8-4793-a6df-8c9670ac66be", "indicator--8f62ffc2-c19c-4bd6-b4cf-c2cbf9ca0407", "indicator--d3063794-5ee7-42da-a49f-a13ff6639ead", "indicator--1046fe02-42f7-49b3-9f56-486e91e30ff2", "indicator--8ccb6542-c22b-474a-9758-e514ef361d9f", "indicator--3919b25e-d96e-4e62-aafb-ec9dee4f0d29", "indicator--fa0096a2-f52f-474a-8bc3-5ad7016df319", "indicator--0f6444fd-fc30-4440-94a9-7c9befb8f1b0", "indicator--5799070e-76b9-4370-97bf-99a7327348ed", "indicator--ee0e982c-b2d0-4e08-ac1f-0cfc797e9729", "indicator--214415b5-8b53-4ec3-a597-ddd489e7092a", "indicator--5782f3e5-e64e-4366-9072-91b1ac07fc13", "indicator--d3f4827a-5291-44c1-b1c4-7a18cd8b6324", "indicator--c979b8f7-d245-4747-9440-3b0acfde2bc1", "indicator--b17dc58e-3039-4f4d-a862-81e340d220a2", "indicator--d840ef80-c561-4569-8343-0cfa1119a6e5", "indicator--db119d24-2b48-4ca3-ad9a-3e182a5e735f", "indicator--c80b8837-952b-4ea6-aa14-9791872b93fe", "indicator--79b7d683-2993-4c66-9a95-e463de83ea08", "indicator--4c7939ab-38a3-448e-82bf-bedb58385571", "indicator--a7a2114d-661a-4be1-a2a0-e36130380fa7", "indicator--b773366d-2fc8-4b9a-8073-d4b012279831", "indicator--177eacac-338f-4262-b11a-342c89839c89", "indicator--e8b03f86-7567-4491-b155-ff4e928dc974", "indicator--f385fbd4-d7ed-4b8c-b5b3-3ce4933b850f", "indicator--8ad6ec7c-137c-4f0b-80e1-8db2ffc037d2", "indicator--23b92879-7e59-46fa-a5c3-fb0b5b199ecb", "indicator--b2d34deb-f689-4c91-8ade-a99c84c4d8c3", "indicator--0bcc5c80-747e-4968-8e3e-92cf6c2b80f0", "indicator--5c948716-0276-4fd2-a129-3f8c041cc91f", "indicator--51521862-88f8-4b62-9160-cec9d7a9ca21", "indicator--3c321930-d6a8-4956-ac99-b44cf2e11232", "indicator--eda32853-81cc-4403-b94c-e9af4a275d41", "indicator--822aba3b-e9d5-404e-90ee-121d5f43a543", "indicator--54c1982f-e929-44f1-8035-7dabbb027926", "indicator--d79ccde1-d326-4e00-ac35-69db0ae3d7ba", "indicator--71d58fee-7526-41f5-871f-2b31bdae7326", "indicator--566c2975-cedd-4977-9c5f-7020620f0d3d", "indicator--6cd53fe1-a122-4752-a3dc-644fba1d8237", "indicator--7ed6009e-f752-4acf-a481-9d0aaf1e4d90", "indicator--150d755f-146d-4563-889f-08be240ae54a", "indicator--becba0a1-03cb-4d7f-ae66-c9fb3f67f426", "indicator--d6f5fa49-e86d-4127-ab18-d3af0e079d9c", "indicator--811fa10e-9eac-48d3-9dc9-4de126591d49", "indicator--2ff0105a-7f75-462d-b4e2-bb7898e6b0b3", "indicator--f1fbb2b6-f283-4c7a-9bbd-0d9e124b9d12", "indicator--8c716627-0b69-4798-a40e-79215e8121ca", "indicator--7bd946c5-d617-4315-b815-c3890aeff23b", "indicator--fc50ac89-2170-4e13-9a1b-376cd00559e8", "indicator--fda38cb4-cd7d-4f0b-b02b-f5d4c2fa7859", "indicator--c5dab467-e21b-433f-9bcd-429bc3152e1a", "indicator--0c94c186-1d98-4094-b359-bac7e57b8d67", "indicator--b2686a9d-b2cf-4bc2-bb65-607e53c75569", "indicator--8e49e581-837d-4d69-b7da-1721cf7c6108", "indicator--2f8ca14f-3b53-4327-8e8e-d9fe9849fd7a", "indicator--141b7c69-b963-4401-b959-0c0a4df69b3a", "indicator--392d2f9c-537c-4e41-a681-add01ab120bb", "indicator--efb6639d-89ec-496e-b603-95e5b7712810", "indicator--117512cc-0882-4604-9205-e86cde4e57f9", "indicator--5f687025-8ea9-487f-92c1-b96a34461ade", "indicator--17769b61-0ede-49d5-82fb-c37adfac8f30", "indicator--2a2a1fe4-36ab-4d1e-8f3f-fd6bf2ccbdae", "indicator--2053733b-6d25-4981-af7c-be7a2c5388d6", "indicator--df1e2638-6c2d-46e9-968c-ac86f7dee917", "indicator--94a7b77f-587a-41dd-bd14-18d2f2c58553", "indicator--94d5d0bc-7ed3-4969-bca5-b4ff03863764", "indicator--e501bdb8-4bfd-4b7f-a6cb-18056eca1245", "indicator--e6a05f5c-4ecb-4832-b4a7-aee97d0e3c42", "indicator--7d70217a-0218-4237-97c8-b062e6461a0f", "indicator--7a846711-ecb1-4511-ac3c-6177df381f03", "indicator--2517fe8c-ddbc-4618-86bc-1d0073a9281a", "indicator--6b57a27e-3aad-45b8-bf1b-378837780326", "indicator--a7af83ff-95ed-4f65-ac13-e8b4ad6d20ce", "indicator--e9b4883d-de20-4d72-bddc-19d7e664a162", "indicator--6a432b6a-7344-4e03-813e-739458e2027d", "indicator--54c751be-6d38-4b4f-bd1c-cd10012f21d9", "indicator--e6fd7118-8fe1-4875-8f95-21f8bd04cbae", "indicator--06bb6327-bce0-4c55-9705-d46c852a6f93", "indicator--5e3ffed0-f372-46f7-988b-44f57d4839db", "indicator--b732d2d6-13eb-4526-8828-52e2505356a1", "indicator--ba67c026-b8db-460f-bb4f-4770e7c579bc", "indicator--1fddebfe-61cf-4604-94f9-16b91506a827", "indicator--7eb7a87a-5b66-4c9c-81eb-b8b1357eda1d", "indicator--1eec58d9-53c0-4e1a-bae6-b18cde8e5127", "indicator--8fed5cb8-fa74-4dd8-9292-c17acdbb0425", "indicator--22b0e5c6-0bbf-4887-b196-675aeb64f466", "indicator--24f019d3-74f5-4e97-90ff-242f2a406116", "indicator--8a01afb9-189d-425d-b144-ecab9785c587", "indicator--2520bf6c-fa13-4714-b42c-1a565ec14ee7", "indicator--8331e2bc-ad53-46c4-8634-c08734ad92ce", "indicator--8498bfa9-0cc7-4789-868b-dfb74ba02c5f", "indicator--8594ad7e-161d-4c14-b6d1-53f8a999b285", "indicator--95ec9f23-8131-4e23-8045-99c1f26af661", "indicator--2b6683b5-2ae6-4e15-b22f-9e0037e89b09", "indicator--d0e05870-62a4-41db-9879-e1255d88e131", "indicator--74470a26-593f-44fd-87e1-3635ae115a34", "indicator--e4701b11-9aa4-43a8-b986-ad1d9067e54f", "indicator--2467e2b0-a1b9-447e-abd6-14c0f38bada4", "indicator--a85c1e12-646a-46bd-bed4-bb1ce3f5adff", "indicator--9610dd7d-f40d-4179-ad71-72cf86b3be82", "indicator--0b80afa6-96f0-4100-85c9-9e14e23a92de", "indicator--7ad0e165-b6f0-4115-89c0-dc7caa399ed2", "indicator--d288fb11-7a28-4bf5-be89-6171a7ffbbc5", "indicator--26d6e4c5-cc93-4768-85c5-9c2ab600a7e4", "indicator--fb402d7d-7406-478d-bb76-2482fd475840", "indicator--9dd2806f-2591-4d14-9db7-a61df061d9a6", "indicator--cc1dd1a6-53fd-4845-8860-9259983d5284", "indicator--c9855efe-4086-4fa7-ba02-800207002f0e", "indicator--e6f4f872-dba8-4583-96b4-305ea45d60ab", "indicator--7c2d6907-7efb-49d8-8b7e-dca22f4f5690", "indicator--56a6285a-68e9-48dd-99df-6f8d293ea35b", "indicator--2a2e5272-ce17-449e-80bb-dc8785dd55a9", "indicator--69e6ecf8-6b42-4539-b90c-4cbc4b64816b", "indicator--72d06a13-785d-43a7-980a-29893cd74c28", "indicator--66c07c0a-3204-48aa-8d02-09cc5d7e01f0", "indicator--8434b8f3-67b8-4de0-bb52-96d36df90cff", "indicator--a6e4d04e-9f2f-4716-8011-90e9a65487a2", "indicator--afad117b-a4e1-4ece-82fa-86a5b56a8c77", "indicator--2397d1be-3335-412f-b45d-70b2ebb2bf5a", "indicator--d8f88d6c-1d04-461b-8f55-99aaa120110e", "indicator--75730e69-eeb7-4f20-838f-26ccdf986d1b", "indicator--9aead2a3-c01b-451d-b603-7a7a671a3307", "indicator--4112936d-f534-4310-ae1c-43a0915f6135", "indicator--c251ef2d-a55b-4a08-949a-87ea55f5bdc6", "indicator--2c7ed63d-ba6a-4d09-ae85-808458b7cae7", "indicator--124253d1-8fb6-47fe-a5fc-bedccd5bedd2", "indicator--1825caa4-a23b-4cf2-8d70-adeaedec2a2d", "indicator--6b3a0162-7f86-4374-b3b5-c340bd8b7a62", "indicator--3ee36978-7fe5-4f0f-ba60-f34f5351690a", "indicator--d4f2d9dc-25aa-4693-b2d0-8e3877d3a2ea", "indicator--df76111b-e349-492c-a788-0410e790e18d", "indicator--cdf1da36-2c31-4da9-b426-d5850680cba4", "indicator--47c4dc4d-27f4-45a9-810b-2edbf2f98b30", "indicator--36365bbc-d0f4-4902-b422-771d290162f2", "indicator--dd284be9-d013-48ba-8dbf-94e9963eb03d", "indicator--7b1c3c29-d37b-40b6-8e17-df2f11c19b80", "indicator--9c5b83fc-0ed8-4951-a1dc-9ddfa8c44493", "indicator--76cebf8c-094f-4b50-9615-ae174cef4c2d", "indicator--8f76c69f-ca22-4584-b309-ebff14c854ab", "indicator--a1033566-d70e-4f8a-afea-270ff5e2d873", "indicator--7dd5a161-4e84-4fdd-a75b-f5b6de69af94", "indicator--2fe3a4d5-42a6-4ec2-b515-7cc6100e49dc", "indicator--84064005-8530-4365-81ca-bae8d88189fa", "indicator--3953e50e-74a7-4674-b970-abea1de4a694", "indicator--7f7eff92-78b9-45b5-b196-59c1c5cd9df3", "indicator--13cccd82-2d03-4710-bfd1-294e0db94485", "indicator--c18090a0-5662-47a8-b559-3cb575c10b6d", "indicator--2d848028-c120-4394-bdea-55c0984aa1a2", "indicator--4cc1fb3c-1850-4f50-b647-49484b566874", "indicator--93bab83d-50fc-4135-bf76-49f465010a25", "indicator--1f39dfb2-68ea-4386-94b8-9050b68f8222", "indicator--6284c410-a901-4a95-bf1a-eda8bc2cf1b4", "indicator--e4af8a79-4c15-4936-b5d8-3bfe5b1986de", "indicator--7eff33fb-4fbf-44bc-8d10-8c0799f0805c", "indicator--42c2e66d-1981-48fc-ae9e-fe2dd23d0fda", "indicator--8bf42386-8992-42c1-955d-f9345904a433", "indicator--312aa03d-8edc-4dc8-aa51-454fd1ca26bf", "indicator--c8d72044-758a-40b7-85d1-13d6e9cfb20e", "indicator--375872be-511a-4a3d-884e-5437014e7261", "indicator--1aefd0f6-8188-4339-aa9b-8f5735e86557", "indicator--5cb70309-e1ba-45f7-b5e1-454f9e32c8a2", "indicator--bf5fcc9a-b87c-4eb8-8e3e-67ed717a0d36", "indicator--4635dbf2-c774-4180-81c9-3c0418246130", "indicator--aa6e3e2c-45ba-4dcc-9dd0-c3d2f32c5d85", "indicator--56a57af1-9f6e-4d95-b838-8d7c7f74b11f", "indicator--7a65baf0-5d86-4841-b5db-103b4552c7e3", "indicator--8a6adb63-99cb-40fa-9516-c83434ef833a", "indicator--eb5ba9fa-ecb3-4036-b084-60837c2ed4b0", "indicator--8d1f68e0-6cf4-4d9c-bea7-ca38805dcb09", "indicator--3a8c3d4e-f414-469e-8e84-e1308b889c77", "indicator--ce6303d9-1d71-448a-9cea-b5cfb0b205af", "indicator--113a6363-e7d7-4dd3-b94f-ab5cbbffbb16", "indicator--e190371f-1ae9-4b76-a983-7d6cb89ae62d", "indicator--828664f5-f2bc-41e6-80d4-e40573878950", "indicator--34eea0e4-7e56-4eb6-8271-9e7d8c46043e", "indicator--24660d87-6d79-4c21-9ecf-a7814bfdabb9", "indicator--117ab55b-d939-4681-8052-02ea6f3bab22", "indicator--48bcd94e-7c1d-4b8d-9e0a-ec9ca72c7eb5", "indicator--b8f21e21-a5e9-42a1-ace9-64469b4e5a2f", "indicator--5e2f014f-9890-4a6b-8951-1bfa84149b57", "indicator--b7f9fba6-4d2a-4f88-ac85-703688ab1049", "indicator--528d6458-1ce8-46a3-aa5d-e2a9b07b41c8", "indicator--7a699731-af0c-420d-bc72-6d47c4f3ccc0", "indicator--ca784953-5112-4440-bdd7-e52f97465a5a", "indicator--b32574d7-69ed-48ec-a259-6a9acf46ebb1", "indicator--8e2e38c6-1bac-417a-95a0-908ed27cb77a", "indicator--fc167463-b8b4-4bee-9b9c-21d84e94fc06", "indicator--7a02bd93-0e27-4fb3-b3d1-024762a08392", "indicator--d6f6fa33-9439-42f4-b91f-2c6875daf967", "indicator--dcf48dac-99fd-43f5-911a-7d5dbafddb68", "indicator--d40d05ff-40e0-4520-97d8-751bb49eec67", "indicator--10a6ce9f-a09a-48bf-ba4d-dd9bf130e62a", "indicator--1f702833-56c7-4188-a689-5f97d78e17e9", "indicator--7f385e77-b1e5-4c41-b83b-5f91f9813088", "indicator--01d9ebfd-e9d5-4eb7-9fe6-c2e7b9d73146", "indicator--cd894c2d-ccdb-4c3e-b269-a47c1e296636", "indicator--3adc0118-f0ad-4f67-aed9-65cad9cac213", "indicator--8926ee6a-65e1-4b99-be22-4757fb4314c7", "indicator--83d37fea-1dc7-448c-8db6-329ee714af60", "indicator--d91ea928-8c37-4d57-bfbf-c70d62d4c840", "indicator--3de73919-12c9-48e5-95e4-c3fdbf524d54", "indicator--66fdf6c5-9e9a-4520-af8c-c10c3d5e4fac", "indicator--aa90d0e6-cd26-44bc-bac4-5de2f348569c", "indicator--482375b5-3a1a-4abf-8ce4-15c158fbc829", "indicator--eedac2c3-c9cc-4732-a75e-43a093a6d826", "indicator--7241a11c-ee06-44c4-9a04-50aefc0438be", "indicator--065039e8-fe12-48cd-b035-2f33bd16f982", "indicator--0a6a8301-26fa-42f4-982f-00776e734086", "indicator--4f8d9843-5fc0-4990-a5ce-7517c6bd3ac2", "indicator--0ccf8356-93f3-49e4-a1d1-8b7045c24f71", "indicator--5771c47f-0edb-41e2-ab55-258ce5c68e41", "indicator--33427c60-2946-4b16-a1ed-3b1317838e86", "indicator--a0605af0-cd79-4a86-be7a-ac9f372fcfc8", "indicator--73953642-5b28-4c9a-a3d7-6319a612fe8e", "indicator--054f1d61-34be-48d3-906d-ec9daabb46e5", "indicator--06422dc6-1d6a-46fc-aecb-49c76111e1d2", "indicator--80f96da1-2033-400e-80dc-5fcbf0755989", "indicator--9a2b3e27-38a7-4552-a457-4cf6289c25ce", "indicator--8bc1ad91-11dc-4802-97b3-055ee2011f58", "indicator--846bf7ba-17b8-4986-bf59-c3d8d2e24f3f", "indicator--fd72db7a-7b25-454c-b593-b25781f8c11b", "indicator--6cd2b256-f945-4693-88c4-3f801efbfba4", "indicator--868dd07b-005d-46d4-832a-e961acf2323e", "indicator--51a069a5-56a0-4974-8917-353fe3079026", "indicator--1bc863dd-035c-429c-a747-33fb7c9169a0", "indicator--d3b851eb-5ffb-42bf-9b05-83f6d636b55c", "indicator--0a0fdb2e-cfda-4ba0-b593-e8cf58083168", "indicator--a262e6d9-507d-486f-a6ab-f545b7727791", "indicator--4be855ff-4c9a-4f05-9848-7b50368a02f9", "indicator--496a7f7b-cc90-4064-a4e8-c8f39d66fee7", "indicator--ac3f36f4-c73a-47a0-8a2a-93394b3acdd3", "indicator--26e1dac2-f0bd-4a39-a1e3-623f5b29ef72", "indicator--203032ea-73e8-4590-8666-e628fd241e19", "indicator--20055651-a3b5-4325-b2e2-cdb47d6a7e3a", "indicator--9bdd6171-130e-40a4-9946-e7e99f67b9d9", "indicator--2b4fcf78-e95f-4e1e-875b-200b90ea5787", "indicator--d5e2d8f4-f587-4575-80e8-874966b34b11", "indicator--a2bf9cb7-cbfd-4e9f-aaa6-0dc23ea825c1", "indicator--08215dc3-1758-46a2-bd9c-f8399530a9e7", "indicator--bd930de7-ea16-4514-bda4-7b992085d715", "indicator--95b3d5f5-2dbb-46f6-a350-ca3cf0b60185", "indicator--45d2a9ca-9b60-499f-a335-4ae534c2c5cc", "indicator--68a88218-796c-4764-b17d-5d9b1c33b655", "indicator--75181f9f-8325-4fc6-ae45-46f9e518cb2e", "indicator--65ba82d9-084c-446a-ac2f-89eb39c7f4a1", "indicator--7a86fe70-e457-4731-89c5-e7c3ea47864c", "indicator--8559686c-baca-44cb-bf64-8b0e6987b4e2", "indicator--a17bec84-3f60-4d18-bb10-5716143cc561", "indicator--a475592f-7bfd-4aee-a061-7a48206b9660", "indicator--7f1965a4-9d2f-43f9-b43f-67d74ecc288e", "indicator--b535f7a3-9285-481a-8f44-ed011d1f4649", "indicator--a3740765-9e4a-44d4-a148-093c581eb401", "indicator--f5505ed0-72b7-4b1f-b2ce-af19d9e89270", "indicator--ca63c0c1-cf5e-4a40-9298-05bed5da56cf", "indicator--c5ddb19f-f693-4551-a8ac-90f08f91b7d5", "indicator--07fc7268-4da9-4309-9408-aecd98f42641", "indicator--5f3a9a43-1f71-4d1c-a38f-b79324a9c9f6", "indicator--24d96259-f124-4fab-a4ac-f5eff10613ef", "indicator--a2bb270d-c249-4522-806b-74ffa42a0995", "indicator--2f2d1246-177d-4cff-94fb-773fd1ed9919", "indicator--c47b23a8-2903-4169-bda8-00132afc672a", "indicator--5cc117ff-0190-4975-be00-a18c2c780b2e", "indicator--98bd9b17-c938-4197-a6a8-380470d309b1", "indicator--08d205cf-fb9c-4358-acea-11049fa3e08b", "indicator--1f5f1051-c2a1-4bdc-84f6-f8127d8fcb9c", "indicator--5034c74c-05c7-41a0-8a82-c0a206532c4c", "indicator--5a983579-c96e-4d38-98ad-d33e9175122e", "indicator--f5fe1513-d869-4f91-b487-dfe687805535", "indicator--5dbab25f-383a-4ab8-988f-f8e0f0a3a488", "indicator--e8d79e1b-eef1-41ac-b524-141a6c330370", "indicator--03d6046b-739d-4c34-91c1-94e757df9062", "indicator--875a4de6-931a-4c42-9e59-df2f51053385", "indicator--173550c2-6d89-414f-b538-99b2de767c4a", "indicator--46132441-9e37-42fe-a777-5e8f367a2056", "indicator--3c997827-e8d1-44f8-be52-6d9015c5a44b", "indicator--2bb8ba42-8bf3-40a5-a4c3-ac09670d8150", "indicator--ab3534cc-bbe7-4adc-ac19-da5bd49cc76f", "indicator--1cd25e47-83ab-4523-b5bf-cd9dfd329c07", "indicator--0e62989f-eaf3-4593-adf5-dd11f669f30d", "indicator--fac53f52-6e8f-4ed4-a550-efb889db265b", "indicator--43936c53-7c2f-433b-a59c-75f42b5ebea5", "indicator--757a2f7e-ffec-4550-8cf5-4455cb78b10e", "indicator--10ef02fd-5aaf-4136-b657-6c937d93d14d", "indicator--20e2232f-929c-4d7b-8edc-d9ab65014fd5", "indicator--4103e542-e6cb-4fd8-8479-f143ca9f1d9c", "indicator--4312eb3d-58a2-4d2d-98a7-118382bf7c5e", "indicator--42e56805-e0f9-47c8-aca6-0b5ad9c36137", "indicator--6bb2a635-3602-48ca-9c06-395db3872049", "indicator--8248bf0e-49ef-4126-9647-cdfc17251ffb", "indicator--ce6efc75-3272-4db0-9982-14033ef3cbf5", "indicator--e912584f-15e0-4d7b-9c45-535a25030d81", "indicator--85e172d1-a215-4ef7-b5a8-d132a559434d", "indicator--2eda2ad1-8f15-4c9d-b0cb-4d9b725f0128", "indicator--533c2626-0c42-4afe-8d2e-c52136d1282f", "indicator--34dd1762-b7a2-4273-90c6-f1b5bb382916", "indicator--26b95e20-8d66-4087-877e-27f8d899ea7b", "indicator--393fb3fc-da4b-4343-8de3-721915e57289", "indicator--42bccc3c-3df8-48e1-a495-9427512c20d1", "indicator--7424bdb9-1c21-4889-b807-5426b1cde74c", "indicator--16d6d9ee-0116-4960-bf3b-3c782130b93d", "indicator--2e27ee82-6af4-4e22-a96b-87dc9c1a0586", "indicator--663ce563-6e2b-4bde-95b1-d05001821456", "indicator--e8f2681b-4a23-4f69-8e73-b571b10eaced", "indicator--4178e45b-7ad7-4333-8f03-66fcd3f81dfd", "indicator--2a26142c-98db-4f75-9060-77ffa2d4cb85", "indicator--d5ba7289-c84f-490a-a411-3bf59d43421e", "indicator--444a2078-6571-45b0-9716-91af2a62ad9b", "indicator--677569a5-6dab-4a6b-b387-e9fd153c2979", "indicator--da2b3747-add3-41e9-999a-bcb73d49cac9", "indicator--acc53bc7-98f8-47e7-bde7-1e98727ac88a", "indicator--3c29c55e-4ca8-42bf-9a10-ec6b876ff124", "indicator--4114dfcf-f052-4461-94eb-552e929371c5", "indicator--8f9b2f41-cb54-4d04-a081-53631ee319ba", "indicator--90d493b8-f6d0-4d9f-93e0-830a6589c391", "indicator--80fb41ca-8a13-4bfd-b74c-fff5a0dabfc7", "indicator--5adb4c9e-2da9-4656-b49e-c68c0322233a", "indicator--e90ee846-86e7-4eb1-a21a-45c6014b7e97", "indicator--4cea3fc3-c7ff-4076-8c77-5584a8080e84", "indicator--4d0a8dd1-b125-47c6-8d8a-9bfca06044cb", "indicator--0ca31834-e8ab-496a-931f-aff57953f1b4", "indicator--6fba325f-f120-45c0-b8ca-7eb38504ee50", "indicator--3d7b4748-7996-452c-b327-3c703dfec505", "indicator--b3a69817-f9a5-44b6-bd9d-ceefb83dfa6d", "indicator--e8276d5a-8345-4d4c-8cb8-9092a3cf515c", "indicator--51d1aef5-50f2-49a2-8a32-62b7d9c40267", "indicator--f921a9f3-728b-41f2-931d-93029368a5dd", "indicator--a1fe002f-dbc9-4fe3-8b5e-55e6edf0a5a7", "indicator--0619634f-dd93-480a-950e-00e84f42d4e1", "indicator--1dc9d34b-aa82-4082-a696-281452d85178", "indicator--c1b63afe-c489-4b2b-82cf-3a2fc25b515e", "indicator--da768de1-1ee6-46c1-b28a-0dc31ef61827", "indicator--76520c37-533e-49c7-835c-6e47fc4f3ab4", "indicator--631e7d2e-c284-4c21-ada7-fe68bab02cea", "indicator--9ea86441-12ea-4dc7-994c-ad131aab29a9", "indicator--0356036d-5848-4d34-9561-e9e30dc26164", "indicator--bc18a2a4-20b6-40ff-aa3d-f47429bd0225", "indicator--eab9fea4-bd7f-444f-923b-deac6e15fae3", "indicator--003f809a-2134-4c51-adb8-8e930e998327", "indicator--ad8aa4b5-b0a8-41ae-8695-b94b04ff7a86", "indicator--5cee8864-7482-4aef-a9f1-a4ea6eeabe90", "indicator--b97f5b36-089c-4230-afe2-50b3eee0abb0", "indicator--2f90289c-db18-4e4f-9be1-325aba9e5eb8", "indicator--b1bf9266-3359-45b2-b3cc-7724f5be45ee", "indicator--58927a3c-0909-4249-befd-12cec7f878d6", "indicator--14c54f33-6767-44a2-a369-0ca1a9f283a1", "indicator--9e391207-1a98-4c8f-bbfe-644b76fb536e", "indicator--78c6d998-eec1-419f-929c-ae927c7dba01", "indicator--2adc513a-d78d-4b00-8319-3ad2053f8303", "indicator--9eb9b3b7-6cee-40ec-b939-6eed51449656", "indicator--1e3c075c-7c7a-4cb3-85b7-3e968303c66a", "indicator--3dea17f8-cb7e-4604-980d-8f42183f7a99", "indicator--312ad6b2-ec66-41fd-af13-077fdc179639", "indicator--06519d50-670c-47a8-91a0-89a699bc2036", "indicator--f0a210ba-7d41-4b36-9774-5c35a668f056", "indicator--d421f644-e3d8-4111-b855-2b33ea75645f", "indicator--89d907fd-b7ff-45b3-a75a-bf03f9b8c794", "indicator--7e9b6f82-f698-4909-8847-192ccc5be867", "indicator--8c1ef3f8-26b0-4336-b6ee-d471319bd62c", "indicator--774cab7b-dfce-4424-b83f-3daae3e5d092", "indicator--685236c2-210d-4ef6-bb29-ffe4289b3d3b", "indicator--87f91fb7-12a5-4a8d-bad0-b57a358f1dd0", "indicator--042a1e5e-4d9b-45e5-9190-87f89ffca454", "indicator--7ccf1a88-c894-4498-a90a-3cc6291ef3b7", "indicator--1c6ba86a-d370-43dd-846f-236dcde4fa08", "indicator--05f2cc46-da0a-4191-a998-df018f153a71", "indicator--ab9e5abb-158b-4e1f-b311-6bce138deab5", "indicator--beeb36de-f1c2-4dd7-9073-98dd1c34986c", "indicator--10555d94-0003-4ece-83dd-9374cdb44233", "indicator--10dc2a68-cfdf-4d21-b63c-2bbe086e1dc7", "indicator--6ab58963-a125-4466-8b9c-8b3493529602", "indicator--47a198e0-6395-48d3-abc6-51f0af83ff63", "indicator--412d2dc4-b5b9-4164-9acc-27a9dc6f4833", "indicator--f293ff69-69ad-4bd9-9bbf-910cee4b62c3", "indicator--14c63a07-f6af-412b-85bd-70e2a9b62ddb", "indicator--60c5aa97-f664-4c56-aa3e-dae2120a52c2", "indicator--d27edacc-0101-413c-ac6e-a1371537cd29", "indicator--1f17df55-87e0-478f-8eda-2637fbd01beb", "indicator--f1f272d4-09cc-4655-a9fc-b9a08cdc8aa4", "indicator--d7ed97b6-57dc-4eb9-a0b3-915d8633eb43", "indicator--3c92e756-0e75-4f3a-91df-533a42e7d8fc", "indicator--e4b5511c-dd0a-4379-a389-d6614ed5125e", "indicator--ccc083a1-2d0d-4223-b186-1adcc486c07f", "indicator--5c64b3b1-1a0c-472d-8db9-8e250fb2a96b", "indicator--9e24c449-c3c7-4e0a-b463-93ebdbc485ca", "indicator--bc4aebe3-e9d6-42fb-82b0-2e79d3dcdf58", "indicator--95a7b7b1-d121-481c-b121-487c238c4b67", "indicator--7d791ebd-95e5-407e-9b35-0b38d40cb7c2", "indicator--37e92c32-e6a6-40f9-a8b5-12aaca72b1a2", "indicator--f3cfdeaf-1980-4235-8af2-4e932052fd8e", "indicator--638c6d62-4532-4437-9f12-efb7efc12426", "indicator--db8d44d1-277c-4340-9ac2-087e3c0656d8", "indicator--3b586eeb-55f5-4db4-b553-e9d4f217ecfa", "indicator--9f65da0a-963d-4832-bd29-c38eeb9e6a87", "indicator--5f40d639-f84e-41b3-b375-043126b6fa94", "indicator--e0384209-9479-46de-987d-0629cb5c1b35", "indicator--b337a2a0-9cf9-47f0-94db-cf283344a853", "indicator--f04adc24-a367-4bbc-9b24-8af76ae56b98", "indicator--dfb02628-fdce-4904-b7eb-a730a226fb43", "indicator--ec4b432c-b040-4ff8-b947-26b37bf0ad97", "indicator--d3f32b8d-9faf-4008-859d-f3a196f01407", "indicator--c986338c-f5dd-4864-a930-6608aa6459e3", "indicator--bfacadc1-05fc-4b27-9cf8-39fdf8d09b01", "indicator--83c586b6-04c1-49cd-bb4e-a6f62ed8da76", "indicator--648658e4-8602-4918-8e3f-65d54a837e7a", "indicator--c9cd82e7-c955-418a-81d5-3c6fdb687915", "indicator--fc8fd627-77cf-43db-b145-5cf5811f2676", "indicator--7be65112-786b-405f-b1fb-8c3d48918d8a", "indicator--004cd640-1c94-4a8f-bc84-2297fb91cdc3", "indicator--baff430d-8439-45ab-8456-9509721f5d67", "indicator--b7d90a6b-2fdf-4acf-a094-5854762e24f5", "indicator--da186b5f-1969-4549-99ef-b20338327d34", "indicator--d6e64428-973b-48c5-896c-98891626df25", "indicator--3b75a524-ed6f-4809-983e-4cbef79e95cb", "indicator--7f9d8811-7357-4986-b717-57798863917d", "indicator--cf5414c6-8a99-44a9-8158-82ce48c1f476", "indicator--b3e26e6a-5710-4864-8369-bbabd8b51611", "indicator--d651b688-dac2-4496-8a9a-ecd6f14a635b", "indicator--c90e6f4d-cd62-40ca-90e8-aae536c1e21a", "indicator--5b7814d3-0906-4805-afab-2a22b97b62bd", "indicator--fed31042-81be-46b1-9f6f-613aeec94e5f", "indicator--b879326c-0974-4153-bf69-1f1c6ecffee6", "indicator--c573ee16-ee8f-4c0a-b9c0-a05c0c33e9cc", "indicator--6de36277-4492-4074-ba23-d73c9994486c", "indicator--780f6ab8-1603-466f-8a9c-69e62cc31eac", "indicator--8e626fb4-cf90-4486-86c1-aee837c02ad8", "indicator--d1ac9d4d-42ed-47c3-9cfe-6e385df00bca", "indicator--bb584787-adf2-4b55-80ae-cbe9b607ee38", "indicator--a7dbddf6-84ea-4ad4-939e-e904e243096d", "indicator--1a37a03e-996b-4057-ac3a-398ad9a56f81", "indicator--70085545-64c0-4c10-925f-a7a762cb90bf", "indicator--f83e27f2-bebd-43f9-a5b3-15b30a377dd4", "indicator--b950127d-7b1d-439f-bddc-a971b8f6ec0a", "indicator--0fe7740c-f8ae-4188-a6e7-6b7f81f09f7f", "indicator--6e99187e-4fb2-4cc3-b6fd-b2c59ad1f1a3", "indicator--327437f6-1664-4299-a10d-f4d9d80d86ed", "indicator--84dd4741-d9c2-4c52-a4b7-bc027ff87d4a", "indicator--d47c97de-2b03-4cb3-b192-69335a9f4510", "indicator--644bf7f6-a2d7-4bef-a768-cdcc2393e266", "indicator--6b092212-7bb3-4fbc-b55b-2e19d2392d82", "indicator--cec277d5-dea4-4962-8936-d79cf72f69dd", "indicator--6be2af5c-b9f2-4651-a3ef-3027649de0f5", "indicator--3b239a9f-0240-43ff-acd5-5ad82573f040", "indicator--30f9034d-2ae4-4dc1-b0db-50ac0b8d2e3c", "indicator--8c7b647d-e5a1-4c0b-84e8-632ef242fb24", "indicator--df3ebb1c-1940-4e51-bcce-ed9a5a98da56", "indicator--92b535c1-7687-481c-b772-63ff3f4bdcfa", "indicator--5ce2f9e7-7c46-4eee-83f0-c757d4db7939", "indicator--39143f21-765d-46bc-b5f5-af32c2a50848", "indicator--0893784f-5a21-48a0-b96a-2588daa29b90", "indicator--b04dbe48-b651-4bce-92c6-1e46b08adf98", "indicator--c82e952c-9e80-4a3a-9bc4-d168bd1eec8b", "indicator--a7df77bc-ce0c-451d-ab30-fabecab145e7", "indicator--36495068-3a88-4082-9b48-e007d6fa7d47", "indicator--c5453b13-bc53-4f51-bd5b-7f07b3b5e3ec", "indicator--4960b77c-0e21-4244-8c90-3f9426b927f5", "indicator--04de12ac-7925-4d95-a3a3-d986765c4814", "indicator--8265938b-25d1-4841-b5a0-2d13dbc16f8b", "indicator--5f2fe960-f9a3-4768-a2ba-cbf650ff9604", "indicator--fe96e4cd-868a-4115-a94f-54a482e64330", "indicator--10298e23-bfd4-44c9-9803-7edf315cee30", "indicator--3630b15e-8fd9-449d-84b2-6d9dea94f81c", "indicator--52febfeb-914a-404e-acd6-98b80f339826", "indicator--0f842a34-b093-4af9-81ca-dc01e7201257", "indicator--add4075f-4573-40a3-afbe-ecebb055bf6d", "indicator--70629f38-12e2-433f-b22f-58406c5d3c4f", "indicator--dc2d4077-1bd3-418a-af8c-2b5c5489909e", "indicator--cc1e71bd-2532-4de6-9bc1-06d24e47a96e", "indicator--20d72890-643a-4b90-837f-1185a1fa4304", "indicator--8afe529a-c085-405c-aeb9-4d61ef0a1ab9", "indicator--72ae217c-f9c2-4993-af80-aab38a9e98bb", "indicator--4385fbbf-0ccd-4d14-80b1-27dbb56ddf67", "indicator--9ba7a6da-ea5d-4b0f-ad37-d33817440c35", "indicator--b75f1fb8-c56c-4dfd-b716-c2d65bc4998f", "indicator--eaaefa6f-4535-4dba-9546-7d27ba4c250f", "indicator--8d3d31ff-dbf1-485b-9c15-7c425c464ba6", "indicator--1887a698-67c3-4630-8d3b-6d4c8549d3a1", "indicator--99e70dbf-6d96-4a89-b000-1f145836ce3f", "indicator--7e3e92e8-d61b-4a9e-b1e0-39904b68fea9", "indicator--3d6cdca8-e5e8-4e7f-8502-4c446cd86d75", "indicator--c798de12-35dd-4c63-88b4-1567bc573501", "indicator--d80fe810-36e1-43cd-a4c2-95bd0dfb3c8e", "indicator--0c4beffd-d0e3-42bd-af09-eef0239c82d6", "indicator--877e0787-c45e-414a-a5ab-897d80983999", "indicator--972413a4-6f9c-4092-9594-aa594e1b0996", "indicator--7e4a4495-5a06-4aee-b025-17ae1efe11a1", "indicator--4abbc764-a4d0-4424-80a6-021da7b17e04", "indicator--ca62907e-d1ee-4cf3-bcda-df8eab23329e", "indicator--64ddd291-3b18-4db7-ada0-f1c34ce14f02", "indicator--f80ecb31-3bf5-4ba9-b7f7-0764fb31adfc", "indicator--bccc27e1-6372-47f9-ba6d-cf172c603160", "indicator--cf3eff6d-0afe-4880-a88d-3ff00da62e2c", "indicator--afae8a99-d8c4-4134-8d35-ac0859d920a9", "indicator--1e9e33f9-b9d3-4fe2-b8b0-578d478faf7b", "indicator--d262db82-e1ae-4f99-9bdc-08bd130ade00", "indicator--0f06d6ba-34a4-4362-85db-7eef66e208b0", "indicator--2db77be2-0ec3-408a-ba68-1faa634db722", "indicator--9d6a1590-8506-4aa8-b45b-2ae34f7611f2", "indicator--608b2799-3fdb-4351-8e87-f646eb208e39", "indicator--f5b393c6-f552-41fa-8d9b-c700448aa2ec", "indicator--9de06358-7f38-4d4d-a4f2-153627b207c8", "indicator--b47d2ddd-c599-457e-9c90-1780c3dd127b", "indicator--431e69ea-7759-41e9-a24c-415a357fccfd", "indicator--e1befb43-75ea-44db-830e-df56ba2831a0", "indicator--db941cb9-bada-4b9f-85ff-c2c4bb02cee2", "indicator--184e69f0-b655-4821-9e2e-68c871888542", "indicator--db4ef1bd-4132-457d-9e42-6157284aa577", "indicator--109d5f23-4abb-446c-81d7-cfaa2439871c", "indicator--597f5a27-5a45-43c3-aef3-14368c1cf7c5", "indicator--c8d212e9-b066-4045-8349-07d60e5c2475", "indicator--7cb13ba5-0d87-4ca1-9bd7-6cfcbe6fcef2", "indicator--1487bdce-c8bb-4da9-8999-f20591301ecc", "indicator--a7ce1d8d-2e14-48c7-b2ee-7628a7e6f131", "indicator--14ddf337-e5a0-46df-b0d1-d738e246cfe2", "indicator--24760be9-7254-4e05-9017-c398460dd15a", "indicator--a8df67de-0af4-4ac4-9b6a-fd0887d94e3b", "indicator--0d593111-a96f-4c24-b355-b8aa7d7f77ca", "indicator--1761270d-28c3-46b1-bb07-3c1d54fd4ef4", "indicator--9f3187d9-9f11-4f5e-a815-a3b50f08fd22", "indicator--a91b755f-8531-40c9-91b4-e35af1854641", "indicator--66932742-2be8-4153-aae9-876fd5fd33dd", "indicator--62808018-9a2e-4f96-8fb0-6da85509e281", "indicator--f8c45af4-942b-46e0-ba44-9e85c3cd1da9", "indicator--f991b5f8-9337-468b-b33c-80ad5498e4ac", "indicator--3034755d-6122-44aa-8324-f1e002e0018e", "indicator--907019f7-3375-4186-b25a-4fe2b5a72617", "indicator--c03252e8-9a37-4055-932f-aae1fc1311b7", "indicator--e47db8da-bf29-48ab-adb6-b044991f106a", "indicator--feee39e1-29f4-4e82-9580-aac81e5eef06", "indicator--383e9365-aa49-4cc4-a1d2-1de497cb807b", "indicator--83afdb72-c2f7-4f40-ab1e-9de9ba47f848", "indicator--edfadd44-2c8e-4666-bf65-3ec41f81cb49", "indicator--7c0ec1d1-fc94-4e5e-ad90-0d6b5ab3da79", "indicator--1ced9d7b-ca38-4db1-a083-8b0735328680", "indicator--ae3a7c35-ca9a-4c33-9d8c-5e14a8aca8b5", "indicator--364be398-fbe8-4a69-bfc5-5e83f14c5ccf", "indicator--d8deb937-3ccc-4ace-8076-5c48c33b6629", "indicator--b2abd1a6-e5c7-4655-a02e-5de6a3067f90", "indicator--6d0059ba-04bd-4f17-b797-b923f6d92c59", "indicator--b586314c-599a-4f45-914a-6a72a416bef2", "indicator--0721f0d2-a164-4dc8-8da5-461693d515ec", "indicator--feb45e5c-754f-4973-ac2e-3a4b78546464", "indicator--88b454d9-e85e-4b8a-aee6-2284803009af", "indicator--470324a9-8baa-46ef-95a0-c3e5e97ae9d0", "indicator--03551009-2e74-4008-9251-cb4e0f85f21c", "indicator--5971f27d-7f23-43ae-b9e9-10e20fc06a95", "indicator--19441351-e464-4133-952f-2186db6e7d82", "indicator--9343eedb-59e1-46b2-8034-d419235e3103", "indicator--c9922d46-5ac6-4474-9825-a7f73fe45c1b", "indicator--5d946ee7-638e-422c-8ecc-c768916326ba", "indicator--b2d8d00c-05e2-4040-b3fe-08c1a20fa750", "indicator--a4747ed0-e2a5-4701-b093-d262cd9dec77", "indicator--2566379f-d59c-489d-bb89-83f94ed043fb", "indicator--c007a06b-a66c-4d0c-a913-1e78ff536cb5", "indicator--49337ab5-412a-4634-a68f-adf446e6dc40", "indicator--a3b10f69-2474-4637-ab25-c6ec3eac272d", "indicator--0cbbfb99-f4f7-4a7e-80f7-bddd2ea0fe37", "indicator--84bccf0a-9201-44a3-b5b4-f3551d4e02eb", "indicator--054680b4-ce79-40b2-b8b6-afcbef202aec", "indicator--545ed0c0-d67b-4b79-ad4a-92fb12a8f495", "indicator--17108653-6b60-4934-b8ea-38f45d7190d6", "indicator--0c23bebe-ae00-4528-b6ab-6a00bfc2436e", "indicator--019c6de7-b979-428f-bcb7-9e7ca47c3aa3", "indicator--cbdaaec9-a85a-4b8d-ba87-2b3b4a4c3b15", "indicator--7cce5d31-1b71-4145-912e-17d746a25e3a", "indicator--a7180cec-324c-4d49-b7ac-3669e7d1cc51", "indicator--627f47f4-23af-45ee-bf99-6ebca3176553", "indicator--d3f62aed-42b5-4d02-98b4-64c1019df220", "indicator--e6e999fe-e199-4f50-9772-2227b9b4f064", "indicator--752efc50-22f3-4b71-8305-4bbe9103feed", "indicator--8ef0df4f-784a-403b-aca9-27324afb4fd6", "indicator--37e60f76-1bf9-4c19-b689-f7bac7bd6d58", "indicator--4d9d449c-60d9-4fd1-a75a-ebfdf832eb38", "indicator--61d9543b-7f90-4757-b8a6-06e18ceb9b50", "indicator--f00bf86f-31e0-4653-a502-a70240b2ce07", "indicator--8469f94f-1261-4f60-8380-50b93dd50545", "indicator--9e36db5c-2190-43b7-9334-6d7db377810b", "indicator--8dfdc6cc-24ea-4dd0-a802-a506539426d4", "indicator--f8b72827-3a60-4e37-8434-a9e77b4b3ef5", "indicator--2bd6b1d9-8242-45ca-8c7f-4a45ce2858e5", "indicator--bd5116f6-10ca-4a2c-b5ef-9d9ea06da5e0", "indicator--a1c3b4f9-64e6-485f-9732-468a35079b88", "indicator--7227c827-f497-4c45-93ec-8186c7e8ae81", "indicator--2c2b5527-d61e-44f2-8cf4-499a9dc4c342", "indicator--7c86ee9b-eee2-4861-9cba-f2cc8d17d314", "indicator--721df4d5-b123-4435-9e6c-aacc051e8157", "indicator--a64be73d-b5c7-40f2-8ea4-14dd729463fb", "indicator--884c934e-a8e7-447d-8919-69fccf9077eb", "indicator--2a16d338-1224-4c2f-afec-3c15210bc558", "indicator--6abe3956-a371-47c8-83ef-16b20f53751b", "indicator--dd74596b-a2d6-4712-99a9-57254ee80e45", "indicator--2940e566-4db7-4c16-b928-04fa2c6984c7", "indicator--37c1cc31-221e-43b2-ae6e-83fecb00567a", "indicator--31e28643-99cd-4ac9-9f7d-3dfdb95c718a", "indicator--91090490-c808-4b06-9f6c-1b8fc4a2615c", "indicator--24547361-ec18-4b49-afd1-0db7ffe656ec", "indicator--59870e32-a5ae-4aa3-86c9-72a7ce7412f6", "indicator--df1bebfa-3d6d-40ea-8579-e071ff31fbdf", "indicator--49bcd548-f569-4186-8226-3f27252a5012", "indicator--c8c374d3-1aa8-4a2d-bc13-98566a006544", "indicator--69423ae7-8db7-4141-a07e-8b8fa66a3957", "indicator--833ceb92-294a-4b96-b4a1-382e15d85100", "indicator--c32a8256-1a1c-4254-a6e4-b25e9a05b40e", "indicator--164e719e-2e4f-4719-a02d-0db201ccd120", "indicator--d592b125-314a-49b1-ad1a-c4eeeb4f2ab0", "indicator--7cc6639c-949b-40c5-8874-3d5b2fa42737", "indicator--0df62433-51b4-44fc-8edb-3c5f394f6fe7", "indicator--3383c230-3715-40ba-a266-ba2aed088463", "indicator--37cc7b37-ac37-4316-9574-7ed01c3ec9c1", "indicator--d5de7856-cbcc-486c-9540-0cd45a71b192", "indicator--9a70aecb-9c78-4722-a058-c58baed8a309", "indicator--2b2c8d28-f8c4-4b2d-ae3c-ce0432031711", "indicator--38397a92-e20a-443b-9f06-9f36828976ee", "indicator--14ba7ab5-32b9-4026-bb10-d2aca1b80496", "indicator--3d22a0b9-9c0b-4986-94a3-c6f5a655efb9", "indicator--efc6ef0a-9195-4566-b5ae-a17d583d4da4", "indicator--0b758661-1167-4a70-ada5-efa41569346d", "indicator--c73569ba-9841-45ab-b249-f4a0ac156be0", "indicator--273411b8-3fd0-426f-8d27-1ca8a3c26d28", "indicator--c09ceb71-0b0a-4223-935a-cd012df6dde5", "indicator--e6b21a4a-b4a6-4d11-88a9-86b66af12382", "indicator--c9fe1c24-be65-43c3-a1c7-e3c2bb301f95", "indicator--221e2614-4c45-40f2-ba59-a711267c7687", "indicator--1c5a5efd-8e3e-4f42-968c-a7ee6207f4a5", "indicator--c8896ab1-aba8-4a77-b46c-cf5130a66742", "indicator--5bbb7bbf-3d63-4f49-a62a-b78c71880cae", "indicator--7c0727ff-6033-40a2-ac54-d1983837392f", "indicator--c3ceb2ce-37f6-467f-bcb8-ec5c9e627290", "indicator--608b73f5-201d-4ccf-8e38-d0ec87cba1d5", "indicator--8c17edff-92b9-426d-b280-52da56a194c8", "indicator--2ace6113-9a70-43bf-b3a2-652a606f48e9", "indicator--8fd2fdb4-2925-4955-bcc5-5711f4b90fe4", "indicator--f45cbe62-0824-48ac-b624-7de8c2356600", "indicator--8b3dba9a-8ce5-465c-9bed-6dbb7bed0857", "indicator--03dbe76b-43fd-4b75-a732-7150c4f18939", "indicator--abcd3c9d-3d08-407e-bf92-a3cba818f372", "indicator--d4f78de5-a3c2-47d2-9cb8-e2fe7f43bf74", "indicator--d29fda79-5502-42b8-9f77-2f7129a030b1", "indicator--8a80d231-701f-4a98-9a5d-6dbddb7aeb36", "indicator--2c86519f-001d-4cd4-90ba-f727dc9b1478", "indicator--c6140680-2029-4f97-9f44-bd2c1716cb8e", "indicator--616ad43a-5e6e-4d16-bfd3-5fbaa4022af9", "indicator--0149ea50-549f-4288-a9a1-322e569ed4d1", "indicator--dd91d882-e7b7-4cec-a1fb-f7f935bb1463", "indicator--70dc516c-f663-4fd0-ade2-d44954f7f30f", "indicator--ea8968ec-5ed6-455d-a5c5-27207b9d76b6", "indicator--66dfea67-d392-43c7-9dd1-d7d42e3a28f1", "indicator--d5eb5e7d-ab67-4be9-a282-1b848f2ad67a", "indicator--328a6571-c4dd-424a-ad11-5a73f1c93647", "indicator--57b13eba-d168-4b4b-9045-d76c987d0886", "indicator--690e54fc-9fb3-4076-b6f4-d55813465eed", "indicator--eac246db-e75c-4167-839e-cf1a663d2495", "indicator--6e20eeaa-44f5-4d6e-beac-f6536147131d", "indicator--99ee16f5-f272-422b-bb4e-592121c2415b", "indicator--c80dc0d8-4d41-4a2f-9d93-538dbffadccb", "indicator--7b6255ff-a640-473a-a519-ea6310509948", "indicator--2dd94f58-ae3b-4b10-9ac9-56400b71ef0f", "indicator--b0d7fb64-c77e-4c5d-ab25-14064066c2f0", "indicator--60a97a57-1c58-43ad-b774-44e8ef76c07c", "indicator--c1ea164c-8adc-4d64-a5ae-74f9e0606a1c", "indicator--6a7a8602-7b3d-4b86-874b-1b82d4f7270e", "indicator--5e03c5ec-37b7-494b-a968-0f7643193ebc", "indicator--72cb9e4d-d604-48e0-be15-07e51dc745e6", "indicator--06cf6d26-8e84-4778-b45c-f9c9cec5e5c4", "indicator--e49e005c-c3f7-4c86-8e69-21e470449223", "indicator--3a5bce94-c8e0-4886-ac4e-89a273da1897", "indicator--47414440-3c49-4f36-a4ed-027acc0c0b71", "indicator--37efee37-7153-4c2c-b886-fc3a65d7c227", "indicator--e2db17b0-c5ad-4912-b3c7-61d0a5e44c2a", "indicator--46432d0e-c138-49cc-9d5d-66153a5f9539", "indicator--8e4bf084-0aad-4a01-bf05-c00b27e429a8", "indicator--5c3d52e5-cf39-4d5a-901f-49c437eeece4", "indicator--1af98bbf-45a4-4f9f-802a-a0a33ccdda48", "indicator--64032cde-f852-4bb4-8191-549e3f6be428", "indicator--ec57a1fe-2737-4d67-ac82-7bf04bca774b", "indicator--cec9904b-1b2c-49e5-a19f-3219a08a8551", "indicator--133f77f6-ec0f-496e-9e2e-a92c0fdb0487", "indicator--ab77dfb4-bb37-4a9b-95d8-93eb7d7d11cc", "indicator--d4c77969-3484-49bc-975b-0fa27d8ae0ac", "indicator--18e6360a-977f-4f8d-a365-38f60e09c647", "indicator--12c30e90-fed8-423f-ad41-ec6e681cd6c2", "indicator--073abfb4-1a54-4fd9-bb17-076dde9a9e3c", "indicator--9e3e9d45-691f-4093-a0d3-8227838a93de", "indicator--67a4b464-9ea2-4511-b799-3bc82c88c71f", "indicator--c675d5a1-eafc-4e1b-89b4-8668d2d7f505", "indicator--91890fd4-f211-4456-8c32-7fc05a035287", "indicator--70baf771-5868-4ec2-b366-990b61c135af", "indicator--8d4b578f-ce16-48cd-96d4-82655f335b86", "indicator--46f378a6-aa14-409c-90e2-2421a5cfbe5a", "indicator--bbc70e10-f7ab-4591-b77d-d7f4295e5e71", "indicator--8099abb4-bb53-4867-bcd4-69c804837c5c", "indicator--cb782bc3-0000-47ee-a883-b4268a928cd3", "indicator--047729f8-c2af-4b2f-95cb-162f4303ecdb", "indicator--7f6c0190-055e-4ebb-91c6-f6bb01080073", "indicator--94ba43a3-4c68-405a-98a4-2ccec6f865c1", "indicator--3ed0d7ae-3e21-4c4a-902e-fab74dac65dc", "indicator--3a2e4f12-fcd7-4702-a0ba-8b277dd4cca8", "indicator--d5929cc4-7e83-40da-bf55-a9eed3bc8667", "indicator--e56ac5ae-1345-41d9-9dca-8083177529cc", "indicator--1ea4aefe-72a9-4114-9e8e-cda84a55fc39", "indicator--e536fe02-8eb3-444c-9107-4adbefaeac1b", "indicator--fdcd2015-aee9-4d8d-9b95-951c09b858cd", "indicator--1e9bd408-3c7d-4d5e-8681-d34e6b0e00d2", "indicator--cf23fe7b-50f4-4fd4-9146-506fcc71372a", "indicator--1ece650f-5e3a-4f3a-bb49-89963fbe9025", "indicator--ce62f9fa-8fb3-44e5-936d-9ba097386099", "indicator--dd8dd0ec-0a08-49f3-bcdd-ac3e630b2109", "indicator--6280b61e-bf91-4199-b649-9e91322f96ef", "indicator--f03821ef-7397-4b8b-89a0-b356da4d083e", "indicator--371d69d2-ed5b-4240-94a0-653950693222", "indicator--06f76dcd-9354-423a-a035-135ec1e5491c", "indicator--f8b65e90-a6ee-4ac3-a085-0477aef4c75d", "indicator--6c0bcfec-c026-4efb-945c-5f837af08743", "indicator--810a3b90-acb5-45eb-b638-648f60504912", "indicator--3d6abe3b-1c99-458b-9a25-ff5e7710b5c2", "indicator--27eb8e82-9989-49d9-b876-548a77667b73", "indicator--491f4c67-21aa-4959-810f-150a78cda789", "indicator--e276d42d-e4cd-434b-b2e8-3b1050bc8646", "indicator--31ccc500-524a-4139-8714-fe156152048a", "indicator--ec94786c-008c-4a24-948f-719924662e1a", "indicator--6ea90295-bf12-496d-aedc-69640b17c391", "indicator--37924ed8-4cf9-43a1-b247-034bc47fe8d9", "indicator--cf64bb4f-6676-4fea-a8e7-bdb37406882b", "indicator--3232fbcc-565b-4c6e-a517-ee78418f41c5", "indicator--ae454e12-54b9-4dfa-bc60-40c07a0c6382", "indicator--a4a893d6-9e41-4ff7-b061-8b05be85c57e", "indicator--dc1dadc8-26ba-4a94-b6ae-a16400653431", "indicator--af2fb8de-2eef-454e-bdd7-53576069b8d1", "indicator--9c455e05-ed24-456d-9b01-b52bd236efe4", "indicator--c6d46c95-cf2b-44ae-ac38-d072f4cc70bd", "indicator--a3a0934b-e7e5-4f93-a3e4-3e77f9844480", "indicator--aaaa8f38-1f30-4bb2-a74f-f341565a6dfa", "indicator--6cda6f19-47e7-4c37-bd3e-67f7ad69c9ad", "indicator--875c3a61-c823-434c-87a9-775ce9f9ab01", "indicator--d7285dfc-8966-4129-a005-49be3d865911", "indicator--d7084d20-131f-422f-9f2d-f85421e8e46f", "indicator--7b0a43e9-c2b5-4588-972c-102dd2239328", "indicator--bc0fd272-7cf0-48df-bf2b-36d7cff46ea9", "indicator--378c6c21-9bec-4115-b537-928d6b424b0b", "indicator--ea507cc4-9725-47c7-8738-9bc48727c49e", "indicator--06e6e3ef-b8d7-41bb-9c74-d26ff905de3e", "indicator--b3b5fd82-6fd4-456d-8959-81878eb3f9b8", "indicator--98fdc286-cde9-41c9-bec7-8bb6a1628277", "indicator--1d0f0a1a-d353-415a-a90b-4efc84a4e534", "indicator--dd60701f-2873-446a-9e3a-0bc0d8b9f91c", "indicator--1ca88c18-5012-4a2b-b711-fddecbedcb6f", "indicator--d9d90265-b43f-4d85-9e06-e6b0d898292b", "indicator--615bebda-1cb0-4b0c-96a8-181425e869ca", "indicator--a12cf6e2-b6a7-40f0-a454-8be1ff612ae6", "indicator--01d2a447-08a4-48bd-b738-311dd20780d1", "indicator--98690ebf-ca15-460e-b7d8-cc6d0b43bb8f", "indicator--6e1bc21e-493c-482b-87e8-b306ccee7fc4", "indicator--360767d3-1617-4f11-8cbd-3ea643552803", "indicator--9f65ab35-5588-4eca-a63e-c6d1c7ef9e84", "indicator--d920efb7-cdfa-45a4-99cc-5f90947183f0", "indicator--9b43a386-5a49-4348-9b00-fd63851b653e", "indicator--6eb2d93e-2f1f-437a-954d-ebffd2f93aaf", "indicator--b39757b3-cb27-412e-ae14-cded96796d00", "indicator--a3749208-a533-45be-b812-6185165acd28", "indicator--9cdb4823-c367-48d3-a944-728c1867b38e", "indicator--aede7982-877d-4617-a221-d3b74ebedbd3", "indicator--76ab8833-9471-47be-a21d-02296e4dba5d", "indicator--3951d180-fc75-460e-80eb-7dcd9a672f51", "indicator--c14ca2fe-546a-46f6-a0d1-578bb81a649e", "indicator--02eb56ce-f9e2-4fc4-a428-83c6aa241ca0", "indicator--526dca26-c645-4809-990d-8995a810d176", "indicator--9b76bd4d-3ce0-4217-a794-3a8b6e22dbaf", "indicator--1f208b50-51bb-4c61-becb-ca1d9854dc29", "indicator--89dc6be8-aae3-4c94-a764-223118d39b3b", "indicator--167f7829-4569-4813-8a8d-5a70a2b93913", "indicator--11e751dd-8f20-4c8d-a3ad-b821beb1f4f6", "indicator--ae95a721-537c-4803-86e8-4757c73cc4fc", "indicator--10cb3808-ca11-4da1-affc-7666a03a7655", "indicator--ebcf8d76-1eda-471d-aa6e-c12edfd499a5", "indicator--cd42b210-588e-4647-91e3-368c09a73a5a", "indicator--025b3954-982a-4a07-b6a7-48fd1ac57833", "indicator--29194895-75ab-4f20-885e-8874fbe45d99", "indicator--e182a465-d452-4353-a73c-15fc84547265", "indicator--18c9fd95-be58-4c0a-8205-8efe9759922d", "indicator--e571041a-c2c0-42a0-81c9-97d5f163f642", "indicator--b82bc0a7-470b-44d1-875a-7041e3cc75e9", "indicator--2b7a7f1b-1057-4ddd-a71a-e0982cdd752c", "indicator--2b25d760-17ea-4f04-b1e4-ba92a17d99b7", "indicator--ef122ee1-9606-42a7-8564-b29b96e1c282", "indicator--c4654a76-46ae-491b-a915-99fc1be694c0", "indicator--cfbb5017-fee8-4100-845a-728585029dda", "indicator--08925654-bad2-4869-8485-5f5c4b90f007", "indicator--0d4eb196-8c03-47fb-a759-33cec5c5cf84", "indicator--5e8f89ca-2c2e-46cc-a48d-2119a33c829b", "indicator--a8de45e8-5bb1-4446-a4d9-4fd0af1e71b5", "indicator--c50e9ca4-6900-4d9a-8e0b-8c65b4c808f8", "indicator--be66dc24-9db1-4927-a6d8-5c01f84fd9c8", "indicator--afc0d93a-0942-4f06-bf6a-bcb21947c4ca", "indicator--67380697-721e-4f14-abea-c268225068a2", "indicator--3a34d1f7-625c-4cc9-aea4-8ec6e2f9f523", "indicator--9d872780-3812-46c9-a6a9-57f5f75f8aea", "indicator--b5906c1a-a458-45ba-a3a9-ff34296cdac1", "indicator--959f9d06-dc13-41ab-8fb6-9014e28e3745", "indicator--dbb8ac02-32ec-438a-9fdd-6d432062362b", "indicator--372fad6e-c7cf-4356-aa74-fbbf57228c72", "indicator--dcbbc502-63f0-4b3a-9f44-aeaefcb09132", "indicator--723eddc2-1142-4bbe-9f0c-23c2f021a8d1", "indicator--b1fc4b7c-b73e-483b-8c06-20db83106966", "indicator--b684efd8-3b5f-4a5e-8668-555a174ddbc3", "indicator--bc0411bc-e329-408b-92cc-f98a87d36aa6", "indicator--d1f9fc88-2c46-4ada-83f1-42070dcdfb4c", "indicator--03c0d04f-7e6e-4185-8956-2720b267e73b", "indicator--47bad482-5098-4620-9a7b-50b8b583997d", "indicator--384daa77-d6a7-43a8-b1f3-f80ec1d81373", "indicator--bf17fde2-8d4a-464d-8222-6a8314d00013", "indicator--9d315cc0-2857-42f8-a45a-3850e79ac83d", "indicator--7fd536b5-a31d-4c9e-a471-69cb4a82ca83", "indicator--a6742674-35f3-4b47-afa0-444c2ebe9b9b", "indicator--94070b4b-56be-4979-8fb2-48ae1defe1f1", "indicator--63850021-2517-4ce6-b8a2-481889f1f459", "indicator--ae588bb1-b000-4e21-9583-b62095f72323", "indicator--11498807-3cdf-4670-b4d5-a34a46052bb8", "indicator--f639890d-99d0-43f6-8191-0c5d23a0ac96", "indicator--8a189611-d3f4-4828-9e22-7a1c31efdbe1", "indicator--0d6bd050-76ee-417f-bb76-828784edaf1b", "indicator--4b65de9f-5ff3-401c-825a-5057e1bbfd30", "indicator--81334031-dc03-46f2-8efe-3814e6c6f332", "indicator--4561fac1-743a-4e1a-be90-8b7f58d5689a", "indicator--36225a07-744b-4443-a9d3-d4b11e5337e2", "indicator--7a783ad3-1684-4013-b474-c9f2d8a15e8f", "indicator--b21001ef-535d-46cc-be3c-007fdd8ca8db", "indicator--82bc8461-3263-4060-8457-8cad7f7d714d", "indicator--a94df3ab-dae3-4ce5-9587-02be650ad445", "indicator--f8e3ad09-8b1a-4fe7-b144-150bb76d9078", "indicator--bb17a5bd-652f-4bd9-8222-669373790233", "indicator--c42c4efe-13ff-47e8-a3cc-dc38c55b5a11", "indicator--c594a188-f87e-4b94-912d-583887ffdc3d", "indicator--de1777e4-28b2-44ed-bc7a-1ce2a1bb7767", "indicator--0ff1dec3-d9db-4d8a-aa43-9daedd05186f", "indicator--632acbed-0ebe-43a3-9361-2836b33710d6", "indicator--a5f57997-b681-4453-91cc-6369b6773aa6", "indicator--e3a64ebb-1722-4a91-a8f2-6c9950f6f438", "indicator--09b1f153-e3b8-482b-bc16-d1d102ea235f", "indicator--09b1c8f9-ac6d-4871-9003-8177c4d7ae25", "indicator--8de53554-0b0a-4003-a46d-9f152881cd93", "indicator--360ff417-44ab-439b-b3ee-eb0abc6cc7e9", "indicator--52649f20-a82a-4036-8426-6fa0d9c3b3f1", "indicator--fba4b78d-ee0a-4f03-875c-31b55bcc7eea", "indicator--b2cb9a04-7c1f-49f2-8f5b-6e6634f66cb2", "indicator--db0c31e8-f174-44cf-94d2-26b9268e2bb1", "indicator--92d32770-1e29-4cea-b4ba-8bfd2d1461b5", "indicator--ebef4d46-4341-4eb3-8cdf-981f8bd326b1", "indicator--525cbfb1-1307-4cf2-b931-886ac0e98b7a", "indicator--3d151989-7d62-4bf9-918b-2735aca92ed4", "indicator--dcd5e23f-4166-4a2a-9506-25941764b2bb", "indicator--fd6791e8-f84c-4cff-9fcc-7463652ed8cc", "indicator--051eaab3-0100-484a-b194-b70d9a328d0b", "indicator--b485d902-3ebb-477f-b74d-c54aa8fff3e2", "indicator--1c0ba3f5-51bc-43ee-92c9-4dcbf83d061d", "indicator--ee22574f-4497-4ac0-a4a3-5ffd1f5fad27", "indicator--bdf66543-76c2-4b61-bc17-b53ce7a6abad", "indicator--a2ebd815-4b33-4f5f-82a4-ed578b1cabfc", "indicator--ce59b631-7d8d-41b9-9670-49f01ac7b307", "indicator--33e7c645-4b36-48b2-828a-761ef0cc98ed", "indicator--a096f1d8-6790-4a2c-a8a2-9922ca946b4f", "indicator--7385475c-0a6f-4514-846e-51c1a5df2143", "indicator--9182230d-9f95-496d-832e-4cfd8637f583", "indicator--5e8234bd-aa91-44fa-81c4-2c6baebfd787", "indicator--ffcbbd32-740f-49b2-ac62-a89257b75338", "indicator--f2b14c1c-1ee2-408a-8ab5-1074818d11a8", "indicator--4910d295-7481-4a38-93d2-384514177c91", "indicator--694c2858-3ef9-4ae8-9ceb-5f251439aa16", "indicator--0353977b-36ff-41d1-911b-eeb1b6cb9cf8", "indicator--a1ab9c2a-aea2-4ce5-8055-127475fd4693", "indicator--0b0c0c29-d50f-48b6-a273-3650b4ed2f4d", "indicator--e197532c-62de-4c14-91fe-46581a86355e", "indicator--e218ee33-d9ae-4744-a3a1-704e42fbaedc", "indicator--f4f8a388-7939-4577-939a-0c8f65f33285", "indicator--90b8a56c-a30b-40fd-83ba-d9e21bb64b05", "indicator--12c776b1-8dbb-4b58-888f-381b27e3daac", "indicator--1a861f72-fc27-4d13-b915-4b0c2c74fdf0", "indicator--fc21dfc0-e8a1-494e-8cee-41b912166a6e", "indicator--c20098ae-e352-4434-845e-ffd7e93cb923", "indicator--531f1186-4692-4f8b-b658-13d78cf49d59", "indicator--a4f6e1f7-8a3f-4fce-810e-2fa2150886ed", "indicator--9a0e229f-569d-4a62-a456-5fcf60519c8d", "indicator--485f083d-491a-4289-b723-73beb37dcd6a", "indicator--4ddcf60a-2b91-43c3-bf82-bebd31c7c33f", "indicator--a2580a02-2871-434f-a5f7-327706bec881", "indicator--598a4100-6df5-42b9-880f-3f4961b1796d", "indicator--7bb66e1a-ba8a-4fad-9a0b-a15dd5366afb", "indicator--ec5dfc87-2428-4453-8f36-416edc3b4d2e", "indicator--24dd8ad8-ee79-46b2-8c98-ecd2eb932262", "indicator--56c10c40-e323-4986-aee0-774173bef040", "indicator--fd628ef5-411c-4878-9f8a-dc16ff12d9b8", "indicator--a7db655c-ec8e-414d-a2ed-51ca85680434", "indicator--b99957a1-2689-42b6-ab25-781669c20abb", "indicator--5e354a3c-5fa1-4d69-916d-033c0f00772b", "indicator--7351de90-bf4a-4e08-b72d-2926915385b3", "indicator--06050a3b-f645-4aa1-98e3-dfb096458789", "indicator--e8b165b8-6dad-404c-93be-dea2d3e6bd0b", "indicator--bae8bcc9-760d-44bf-8367-97c20fbfc8f0", "indicator--7e1a5254-3878-48ca-8591-6db7b69e5e68", "indicator--93f330d8-d5b1-406d-bdc8-c36faf5b8ec4", "indicator--8bca58a4-44ef-4c7e-81da-fa2bb7617ff7", "indicator--6ddd8851-018d-4b35-b835-a96f0352c2ee", "indicator--de4aabd1-8c4a-4589-843d-9ac172fb4ccc", "indicator--34441052-a27a-4d97-a1b6-1d63fac1c357", "indicator--837f69a4-b1d8-4478-93a6-9cd53fc1312a", "indicator--607df633-e0ad-4644-a468-ac35692cb8dc", "indicator--7049df1d-a3ae-4593-af91-dc97770b3328", "indicator--f447eb51-04a8-4ed3-b3f4-cf6417d58821", "indicator--62326cfc-366b-47d8-acd8-b3311c0f31f1", "indicator--0b85cae1-1784-4e4a-a234-846e3d468001", "indicator--c237149b-dd91-4046-b07f-dcc55b36f9c8", "indicator--3e527db9-4f56-4ec8-b965-a1c91bafd5ce", "indicator--85f1bf7d-a4af-4f80-8fdf-4891915435d9", "indicator--8ae321c2-4f69-4d45-a11e-90fb5ca19434", "indicator--784ee24e-d6b1-486e-b535-f8ec8c5a5cb5", "indicator--36a0360a-7df9-496f-9c55-0f57b3d9fada", "indicator--6a94d4dc-5097-4395-8140-c3c745428f16", "indicator--2824569a-c287-4745-9f8b-e48d7e2ede88", "indicator--49892ce6-ef36-42e4-bd96-e5fafaaec4b4", "indicator--361b9ce6-1765-4e41-b5f8-3e603df3d287", "indicator--b4bc4db6-c845-4938-b687-ee37fad4da0e", "indicator--40a97133-b1c5-42c0-9aa5-cb7309a30c45", "indicator--2713a0fc-6fb8-4295-8e6b-6fb658785ffb", "indicator--416717b9-e160-4eab-9846-9697badaf0e0", "indicator--f2121d9c-c413-469f-87ff-a4a8007f052a", "indicator--9a7bcd61-f311-487e-902d-e8829cedd7aa", "indicator--4ee3c114-59e5-43a5-a014-f158c17c5f4a", "indicator--a6028024-d7d1-4714-b072-ae13b6d3877e", "indicator--94f13f8f-c804-4d77-b109-0683a837d914", "indicator--d187cf50-fec3-4cf7-9bd7-51252564acd6", "indicator--5cfe7a5a-4494-41ad-a1f2-2f613931d69c", "indicator--4c457c1a-644f-4cb1-86e8-c73d8d09d6b4", "indicator--df4c1371-406d-43d5-a60f-b1afc81fb3fe", "indicator--9b9d67f1-cd4e-42b5-a0e8-0efc7e080caa", "indicator--93cc23a2-ae49-404d-91fc-197ac5f4476a", "indicator--90f3dab8-41a3-4d43-a6fe-c841241a7aea", "indicator--8c4803df-08fe-4489-9e84-3f248eda47a0", "indicator--68b24c9d-ef11-4670-a6a4-dc84c11ebf06", "indicator--ad910da2-77cd-40ee-b9df-8e0c91444841", "indicator--d956b585-4dbd-47a9-a050-b9f54004e16c", "indicator--6d6a65c3-fec3-47cc-a902-cf01de32e4e0", "indicator--3114b17f-81b1-478d-a76f-89dd7defcf9e", "indicator--3dbbf562-d02b-4c39-86eb-711536003c9b", "indicator--1efe07c6-1899-445f-8dd5-9de3dd7addb8", "indicator--f536a277-030d-479c-9d1b-802af153c81e", "indicator--e659a70f-c0b5-4459-806b-d6c7e1f3d052", "indicator--657ecdb4-7b62-4724-8f0b-981cc50f054f", "indicator--2b75ad42-6596-433e-a16f-266e37d7ccf0", "indicator--44a7d65a-2828-4f27-b945-49223587ce61", "indicator--d9ad7d61-b048-4eb5-8eeb-d9482750716a", "indicator--c2766faa-7c06-41a6-ab08-ef0ffaeea759", "indicator--830c4276-d7ab-4cd2-82dc-09a0ccbb0d21", "indicator--706da73d-a460-47b8-88d4-e7b9b1b48e83", "indicator--06bcda50-8272-4d37-9e7f-a362d3173751", "indicator--88712e94-fc45-4703-b0c0-0afea006a96c", "indicator--489205ba-10e5-4743-a6cc-803485560c95", "indicator--d5ff58ab-7ab8-49fc-aad0-db72a49d6a10", "indicator--1f16b5e6-67e6-452e-9274-55c9a04af8de", "indicator--e649dcca-400d-457c-8767-615dadf926cf", "indicator--358a4dc7-42df-4d5d-ba64-e14ddbebad36", "indicator--b234a17e-5b86-4858-b36f-44b44be11dae", "indicator--48d68228-32e2-44a6-80c7-f0edb80477de", "indicator--9895d891-f3db-4e6a-8dd7-1b263329d7a7", "indicator--c7174cd1-a010-41ac-902e-41bc743da17d", "indicator--9bacfb99-691e-4295-9bd8-b46ef23beb46", "indicator--42d41fe0-eb5d-4878-8ee5-3edb6c769bed", "indicator--bc59bca9-516a-401e-a81e-1f9e60933c9a", "indicator--76f2ddc8-9c6a-4dc2-b298-0a0be7ac53f3", "indicator--699a1c55-2afc-4daf-b32e-e68a5673fef2", "indicator--f16ed248-8615-4c95-b9e5-5cfa40c3275a", "indicator--d40f53f5-8f10-484b-aef2-8d6ff401a379", "indicator--ad9304e9-176d-4c3c-8d20-f9cb6e9e3947", "indicator--094b4020-d3ef-4678-8df4-986d510286f7", "indicator--58ecb1ac-ccf5-428e-8a86-2ba80b3a44cc", "indicator--52d0f9ef-1013-4b88-ab7b-d47a22958785", "indicator--6f7685d9-de03-491f-85a9-ea4d428837df", "indicator--7f170c79-fbbd-485f-9810-9af55e87b457", "indicator--8ffb7dfc-da4b-4ca3-82cf-d49f3a0fc56c", "indicator--c1bef5f6-5aa2-49e0-90bd-fde2ceb05484", "indicator--d636f40b-d06d-4a8d-ae81-38f2db534e6c", "indicator--143d6f67-f2c6-4095-b676-9b90081006c8", "indicator--76be17ad-046c-47cf-b8d5-5a787285da80", "indicator--ff3f647e-c4fb-4f97-81ea-0b5e9b8b140a", "indicator--16615d74-5fc6-4fb5-80bb-510c0f1380fd", "indicator--358c2691-8d85-49b5-9626-ee7a3a7c1ce5", "indicator--78017ce6-0b55-4e35-9d3d-0034a2b0b61e", "indicator--7f36a9cb-f1c0-47f8-b5e9-cfe499dd45f8", "indicator--1872ff78-4d7f-4d30-94bc-a87759e5cb4b", "indicator--96a30ac0-3dcf-4394-a2ec-3c2943a7de01", "indicator--22753480-8e2d-4a40-910b-06ec9bed8591", "indicator--f369b9f0-98f7-4ae9-81c2-e29779d4addb", "indicator--9e47e271-7e5c-44d8-b295-8cb307446198", "indicator--b1de3649-0e4b-462d-86ae-0c771e893a89", "indicator--b074cd0a-3cab-456a-a818-429366efb882", "indicator--f781b739-b95a-4ce7-838d-7d7271c4c2c2", "indicator--e7be95e3-4d03-46c5-9d81-f1c748cba8e0", "indicator--fdb9b712-9086-40a8-83d8-1f69977f3fee", "indicator--5bf71d94-3ea1-4f71-b840-6a6f2fef31a2", "indicator--0c998b35-3ff0-4fa5-a98b-dec5b7b012a7", "indicator--d3a9b0b9-c4e8-4574-84af-d301b41a2fd4", "indicator--ad5b6dae-2337-4ea2-89c4-e00e8ef9c852", "indicator--8d54fc32-449b-4edf-a441-3a21fb9c5c3e", "indicator--5087c810-739d-4feb-a081-d5fa5e965ebd", "indicator--7da2d680-fc6d-4a3a-933f-a25be7487fcb", "indicator--b60bd39d-9a00-43cd-9204-b262f86fa3fc", "indicator--6965e2c7-5f67-455f-91e9-b36e739fe498", "indicator--58e25a60-dd8e-401c-b313-5b44e1297962", "indicator--f0277cb4-b2d5-4ca9-8287-e1577fdad327", "indicator--7bb1caa9-702a-49b6-854a-ef18f5418aaa", "indicator--108ab4f3-fc77-4103-8496-c7a05d83feb7", "indicator--24f6f638-08e5-4e5c-a6d1-d49104d81ae3", "indicator--c6653e10-5693-4b19-94c6-2dd59b2158b9", "indicator--547eddae-d24a-444e-b900-868288b3b4a6", "indicator--ad3e52ab-95e9-4182-9da6-1c17eacaad35", "indicator--4a7d3a6d-880d-466d-9c2e-45166a0c0965", "indicator--fc7f7f5b-ac69-4efb-8895-5ee79478c32f", "indicator--393cb938-f487-48ca-9b7d-4b962ef033a4", "indicator--b0ebc67e-3a77-4887-a647-b032cc33fa48", "indicator--d92cab8b-098e-4dcd-ad19-0272c2a18cc8", "indicator--e1b2b103-f024-4f07-a339-752aa787b67c", "indicator--0339959f-7e52-4dc4-8911-6b02ab1762f0", "indicator--bee03d35-2483-40c3-a20a-b4aa45e35395", "indicator--54359b1e-b412-4eb2-8c83-f5cf595c57ac", "indicator--3b63bdaf-ffe0-4deb-bd7d-dd770fb1b40b", "indicator--6dada946-c941-461e-89c4-4187e4cec0cf", "indicator--140f5e42-7a4b-4b23-95a8-e32375763601", "indicator--830114f6-ca78-4808-97ba-f16324a620ed", "indicator--905e9295-9091-49d6-9ab7-90b2a4a95eaa", "indicator--32543b0e-39c4-422d-bbec-bc1440b1139a", "indicator--4c3c17e5-7f59-43d7-a928-e98239083c40", "indicator--c9bd447f-f4d9-4907-8ae2-451c8c606c54", "indicator--e015750e-7973-4dee-aa03-59184e0aef86", "indicator--cc924124-933f-40b1-8203-78781f7f260d", "indicator--5eebd179-afc0-4992-9f68-09c3bc036c8f", "indicator--608eb221-b220-408c-b3a4-f091a7084572", "indicator--8834b479-506f-42f7-864b-8d6b8a2c2b1f", "indicator--63f7cb90-7e79-474e-a6f4-f82fecbe4b05", "indicator--a1ae7313-2195-4198-87e9-7e40f0bde945", "indicator--c802bfd7-de26-4a9c-9709-ded17f4502c7", "indicator--06a47277-d130-4718-bb5a-d3a98713967d", "indicator--128ed9c9-c872-40a1-a173-58d555e2aa64", "indicator--0b1db3c1-904c-4a6a-a1fa-3552ea2a6e17", "indicator--32f5d2db-f6b3-4c6c-ab88-41f5df4fa271", "indicator--bd08701b-4d17-4c20-b5bd-a9737d6dda5e", "indicator--a0eee635-6b82-431a-9024-9bb3b0780344", "indicator--5ea4ee6e-297d-4d2c-9e90-71a725b40cba", "indicator--c8378499-f3f0-41ee-9e32-659ffde4b867", "indicator--c86811e0-f823-4711-a2c0-41362857ea5b", "indicator--574e57c7-6ce9-4767-a205-c9d338ee76d9", "indicator--06590976-43bf-4c54-a601-8a9ca9d36399", "indicator--d69b81f1-80c5-4302-80d4-1c61d7b669c3", "indicator--1bafb87a-e35e-43bc-a8e4-75c3c4e24796", "indicator--15c2bc55-7906-4533-95d1-36ed1a12cc36", "indicator--690c620d-c65b-4aa5-9437-20774007daf9", "indicator--542e3e13-99d2-4b40-bcbb-c6487e2b5297", "indicator--8f9ba781-3a81-4ed5-9229-cec09c11fb7f", "indicator--e4ad7ba1-a733-476c-90eb-a6f8886c3c74", "indicator--02be0544-3f85-40d1-974b-313d0408c6e5", "indicator--2d5029b7-2395-48d5-ad3e-3cad2459f8f2", "indicator--d44e5783-d7ca-4c4e-9f5a-c18167d8b198", "indicator--d10acca4-75bf-4206-acf9-455c7a6c8170", "indicator--be0f55b0-8b61-49dd-8c49-42fd004ac89b", "indicator--fb9ceee9-3660-47aa-9352-de3197e601fc", "indicator--296c49be-ba35-4c1c-82a1-44a0a0644502", "indicator--88ecaff1-db5c-4040-ab0d-18b4b4a1f8dc", "indicator--3b2b921d-4c03-42be-bc93-b40c732eb190", "indicator--1e6313ec-3949-45e7-9fdf-6f24ce4c8d59", "indicator--7328c5e9-a13b-4f63-a4f2-2030e44c6911", "indicator--fb4753f9-9984-45bf-8f9c-7cc3903a7786", "indicator--8a0a7db2-e188-4412-9290-3b55b54cb02e", "indicator--2b179d63-f2ae-4e31-a9de-969756bef0a1", "indicator--0c8ce888-9972-46ff-baaa-5f70c54646ca", "indicator--c9b51ddd-d44f-418e-ac80-5e3fb50d0af4", "indicator--932e0ac2-2309-4b28-8d7b-ab83e63922cf", "indicator--ef2b03c4-edf8-4d2c-b551-6fcbb84f6b2e", "indicator--26347d07-c7d7-4672-9941-37dc8d7dbf65", "indicator--fdd71e0a-8e1a-4c6d-b036-515fa77c4fa7", "indicator--4717f12a-377d-4cf6-a490-912489171949", "indicator--8ce8cc37-e15e-4145-8ab2-a071cb41b706", "indicator--06ddaf37-7414-4904-8565-25df5de010f6", "indicator--a2f55c00-83d1-43b3-8ab6-380acde42862", "indicator--7260e0f8-0d16-4f4b-8613-ff00c5b5753a", "indicator--78ec7bb1-a333-4016-b3ed-acb77b7d55c8", "indicator--98dd9108-d454-4b33-a7a4-95bc06b60c45", "indicator--3e39e19d-6e44-4876-9ec5-9ec64710af41", "indicator--3cb4bcb3-08b8-4266-a5c0-cba48f95c3d0", "indicator--01634b08-2501-4edc-86ac-666a6dc43ef5", "indicator--eb50c7a8-aaa8-4326-9a39-0051df1c9911", "indicator--09ae735d-9748-402e-9d86-d86df36e5922", "indicator--60d60674-b394-48d1-b589-156669d816c7", "indicator--3db5955d-93fc-4bca-aa41-407fa58b9be6", "indicator--e3302452-6152-439d-9722-87e505f23e4e", "indicator--5139e88f-2fdf-46a5-a703-064024e630c8", "indicator--80bed321-72b7-47bf-af1d-875ace4c4a18", "indicator--30dc088e-956b-40e2-bad2-3a472962e1b2", "indicator--23170c73-114f-4f26-a45b-aa933ff54bd5", "indicator--ca19deaa-7f14-431f-aa68-780ebeda9cf1", "indicator--d3590eb8-161a-4be7-9373-85a6eb2bda5d", "indicator--3da8c378-a3de-446a-9f79-f8d15cbfadc8", "indicator--d690c328-7b60-46c1-9d0a-630c3c674838", "indicator--3d4e0732-7002-4e70-8857-a07949f4e000", "indicator--6477e2fc-f3a2-4af1-b8a8-027bc8324d89", "indicator--cde29085-263a-45e1-9acf-fc298198cae0", "indicator--50046738-19f8-4c65-abaa-f98323a3f345", "indicator--28b41fcd-2c32-4627-a73f-17f2f65e9ff6", "indicator--e104df73-35ba-40bd-b830-787a654e6217", "indicator--2b77b6f8-b9e7-46c9-9c8d-af653b34c181", "indicator--9f4b93d7-4708-4b55-ad16-0211dab58629", "indicator--c5f4f202-3019-4395-9666-b7c6fb0c9965", "indicator--a70e0361-a87f-4115-8d84-8b5e92707666", "indicator--cf403e13-ad04-46f0-9ba3-cfbc2af12487", "indicator--3cf56179-9223-42be-9a46-ad9c4b591246", "indicator--cb4426f0-aaef-4467-8a50-37552d002be3", "indicator--f3ec227b-f3a9-43ae-b02e-8fddfaae4aab", "indicator--186ef439-7bfe-4883-a18c-94a48e2a1d0a", "indicator--f4e9aff5-00cd-4258-96ae-c63938c51fde", "indicator--b8255294-82e8-4426-80e7-6467599cdc2f", "indicator--498a195b-1d7a-4c47-94e3-93188c284632", "indicator--0f6a95ca-ab8a-4cc5-9eee-65fddd44236a", "indicator--df08c792-5e39-4fa3-a342-57395375c009", "indicator--d5ee5e4a-aec9-4fd5-bd74-69c00be87c05", "indicator--27ed7087-e666-4d17-a7d4-93a1da3eb010", "indicator--03ade0d7-53c6-47bc-93ec-a382a44bd242", "indicator--bd605e4a-2327-4850-be9d-1ad92f2ec78f", "indicator--7a40db25-0cce-47cd-9bcc-b56ca3dfdb3d", "indicator--b76eee37-57e8-4a33-a110-dc79645ef886", "indicator--b9180d16-4278-45cc-a4b0-5283ca5d3b84", "indicator--5708fbbd-d8cc-4225-92aa-3e9fe4f9887d", "indicator--bb2123b2-01ae-4cf8-868f-17e437078d06", "indicator--800024d7-13e5-423c-8019-237d28db4cbe", "indicator--71a7f000-f57a-4b0b-af33-112cf44305e3", "indicator--953b9db7-455c-43dd-8d00-2d469e6c67a9", "indicator--3a112fb9-b301-4958-b78d-58bb0b8ad4f5", "indicator--dee58a6c-912a-4ea9-9fb4-344b3b3cb3f5", "indicator--70323fcc-86f0-45c2-8a9f-3b169076a48c", "indicator--ff852b3a-a9aa-49a6-a049-a2793e6b3462", "indicator--e8a6700f-625f-44c1-b9cb-ad55473c9fcb", "indicator--cd7647a1-e4b1-41ec-b7af-a7a50ed28f1c", "indicator--f4449a8e-fc8a-4b1a-843a-9e66ba6d996d", "indicator--576df5cd-1c8a-4ef4-904e-bd5e3ca216a8", "indicator--5aae2278-0a0a-4d19-94d5-8307fd909224", "indicator--959eda30-72a3-46c2-b7ce-5bc8b29517de", "indicator--eedbbc72-2ba2-47da-b5ff-8cc3ec6d9103", "indicator--03ea3838-5d24-4c34-9394-d7b2059d6c13", "indicator--bb966b24-9d9a-457c-ac5b-808a5ce1fac9", "indicator--78f064df-dc35-48b4-96b3-c0367bd5246b", "indicator--147550a4-571f-48b3-8507-db9b5545faa1", "indicator--e0164734-cebb-40c4-8190-af499bbbb3ac", "indicator--d29a3462-9dbf-4182-9c68-2041b516d553", "indicator--8ad6e53f-1f91-473e-9dc7-c157f9beba51", "indicator--92524d37-0c8a-4c6d-b4e8-8972fb667a55", "indicator--2801a2d5-b63c-4b6d-af6e-b08bde11888f", "indicator--aadad69c-3943-4fb1-ae45-0c419725a36c", "indicator--7fc79f9e-0177-4430-8aa9-9c7953f150ea", "indicator--652c03d1-684f-48ad-8a3c-de5bc299fac8", "indicator--50826b41-8ccd-40e8-80c1-b7f64784078d", "indicator--c52e2b6c-ad58-4dfb-bbae-bacf83908e79", "indicator--302a22b1-c478-499d-a237-888a21ca7497", "indicator--68f1596b-0709-44bd-a1fe-f7f766708744", "indicator--dcd0c540-5153-4611-b442-8de9e78a9fc5", "indicator--b2cc488c-4649-46a7-9976-d6f5d1deb543", "indicator--cccd5a59-1c4d-42fd-bf93-608854470647", "indicator--51260030-986c-429c-b579-b975964b37cf", "indicator--067878f0-c248-46ad-804a-792d001d9271", "indicator--8d4dd5ef-953f-442a-9823-e62de6bf6dcb", "indicator--50c56bc0-0f95-413f-b8f0-c78833a164d2", "indicator--16535860-c865-4c92-b2d2-1b37073bb14a", "indicator--b425e26d-330e-4705-9a7e-9daaff22ffa8", "indicator--dff00631-90bc-4e8c-a183-3cde7b8aa642", "indicator--49b60b32-69bf-4392-8416-34ac8f926f73", "indicator--439b9d6e-63a0-499d-9fdd-14076a137ee7", "indicator--66d6b4d0-628c-47d8-9372-67cc763f0e7b", "indicator--87660f38-1e98-449d-b59d-de27f1561a4d", "indicator--4cc0d229-56f5-415d-b0c3-3154d4294470", "indicator--90400e87-3a19-45bb-835f-ae7ec3e625a5", "indicator--c23826ba-03b3-46b2-bbd8-e8aedc21cb89", "indicator--7b5a4131-08f6-4c1a-b8d5-80a55cc11e18", "indicator--444943c7-2483-4a1f-9792-baabc8068ec4", "indicator--4cf47774-710b-40b9-9376-1e6d12579107", "indicator--67256214-4c63-4eab-b02b-40954f41cc81", "indicator--ecf1f3c3-6dee-4a54-86b5-55ce2d756dc9", "indicator--b9d5fdd1-5b3b-46b8-a6e0-683711484d3d", "indicator--658c86de-5ea3-42e3-98ff-0595f5a2a7b9", "indicator--80fc8a3d-f34d-4cbb-91c6-3df4c2389268", "indicator--885fe0ed-23cc-40ee-a4ca-06f8695d7205", "indicator--38699668-2f1b-45d5-9621-19093056bd4b", "indicator--d52f8d05-c22d-4b29-8052-a0bc079666f8", "indicator--6c1a3261-5340-4d4d-936b-41767a80be2d", "indicator--31356b7f-4e45-4935-a1a6-802d8831d6d6", "indicator--acdf1335-e49f-4540-81ee-a9569e19b570", "indicator--5647c6da-d7ce-47f9-9a18-8d111630ab93", "indicator--c07cd490-1de4-45d9-8943-e03e88f26c3c", "indicator--acb75e31-c86b-4ab5-a7c2-49e45e6c463e", "indicator--2a673fa2-48eb-43fd-a6a0-c9cdd4d2f2d0", "indicator--b110f75d-23a4-4950-be81-aa9126c1ea87", "indicator--7c7063bf-6b26-429c-b84a-00a8a57abeb9", "indicator--d410aeae-5deb-444f-970f-8eb9c323fd6a", "indicator--31c464a3-8b27-4d0f-8500-bc63ce6c068a", "indicator--2f0b995a-a5fb-4936-b98c-369a22563a23", "indicator--85368dbc-47ab-4e08-8e29-7ad62e6421cf", "indicator--c8d0bae0-04cb-421f-9a74-58d7cd0a98fe", "indicator--86276966-f352-405e-a86a-79899aee805e", "indicator--11598f82-9d28-4b2d-97cc-34d511cc3b2a", "indicator--80b49dbc-05d9-4e0e-81a5-28e09602ab13", "indicator--dcfc567c-6433-4a56-962a-3d17a1c34b78", "indicator--2a738fbc-dc96-4d1a-b5ae-18b44ea16b68", "indicator--81719833-8aea-4638-9a43-300c1b6b530c", "indicator--9085d533-e386-4912-8f58-e5f0941f10e4", "indicator--5d4e2b6d-3383-4cc8-8829-5b3c8d25102d", "indicator--503aec9e-6744-4ae9-848d-6c3c5b0dfb8d", "indicator--d91fe686-a1c8-4540-8d3f-bf3d904e80a2", "indicator--635d28b5-9b8a-47ee-8f28-a6f67be4be56", "indicator--1face0fb-8c41-4530-85c7-ed45eb5b67f5", "indicator--8b0300f9-950c-4810-840a-8a3e996fcab2", "indicator--fc594983-8a71-43e7-92cf-5976f0b7ce24", "indicator--cb4f9444-5580-4c8a-8544-c7d86c899f52", "indicator--d8d0b341-66e3-479f-88f5-0fcce45e3194", "indicator--e3a200a9-fef3-4b95-a080-dcc6cec22b37", "indicator--a99577ca-4a45-4145-b688-f60ebb3afcb0", "indicator--7ec52310-72d3-4125-96ed-b3e383f7bc75", "indicator--df95aec0-5259-4441-8c30-6c0117f77074", "indicator--d53ee0d2-9421-4f29-b2df-d5f1deb0d7af", "indicator--ea870fd6-df6a-4eaf-ba45-5cac6c4f2c0a", "indicator--4b12525d-afe4-49da-9a7d-f285372ea622", "indicator--34dc8b44-d51d-4b64-9bc7-b4ba823b88b5", "indicator--679c4424-a92d-4a7e-8f60-68c85501f9bb", "indicator--e76f387a-c5a2-4a97-85c9-475cf6d2cfe0", "indicator--67f64dd5-fa87-4a67-8805-21017a70c0e3", "indicator--d34d26e9-5b1f-4269-91de-9e23eb872512", "indicator--d75bde81-762f-41b1-a897-a65c604165ab", "indicator--38c0faa7-4e61-4277-a15a-eb1f92a52f17", "indicator--bb41e11f-7db3-4eaa-a479-1ec63b14d9cf", "indicator--35864592-f1b2-40dc-8081-a86cc5a94aa1", "indicator--c1c0c2a8-5440-4162-b60d-4a83f01bf936", "indicator--43fd0479-625f-4593-b8d7-a2779c6e020d", "indicator--5af8f0e5-0639-4466-8965-8a43e8542e02", "indicator--b50c4edb-6651-45f2-8480-73e19ea6f16e", "indicator--28948115-b912-497b-baab-cd07e22ac784", "indicator--7a096081-ca55-41df-9ef6-71cdc79f8a7b", "indicator--ec14b083-fe57-4168-8f76-bbb31059c595", "indicator--ba80306b-d997-473c-8c67-ac6769a56f1b", "indicator--0204778a-de6f-4a50-881b-a30cbfbd3da3", "indicator--35e6370c-ef25-41f8-b9e6-d880cdbc7b57", "indicator--85633ceb-afe8-4e08-8d8b-91c3427a5759", "indicator--61fd9b21-f55d-40c1-abe6-558149b472ad", "indicator--19c2a3e6-7401-4a95-b54c-8127872ee5af", "indicator--c2ff1f88-b1e1-4fb0-9293-ab3fcd5f8055", "indicator--5238939d-afaa-4f4d-9476-daf48d51f730", "indicator--de3aef3e-8af4-4e07-b6a3-772d8ceebfb4", "indicator--20f4b1d7-b840-4770-8169-88e9ba50df6b", "indicator--3583abfe-4b0e-47e6-a2a2-ba1e8d52e41e", "indicator--3ab457f9-c65a-4ee3-9ca4-50253423c3b8", "indicator--3e3a9fa6-e950-4a6c-a324-2d5b9bb3903b", "indicator--3abe5e71-3425-45fd-8a8c-7c91a7eb37b8", "indicator--444abb9c-22bd-4a87-81d7-540cc219f1c5", "indicator--01b5d16f-3d92-4f94-a9b8-7834bbf9096a", "indicator--e92910b3-0067-439d-be09-ea0f10745a78", "indicator--c220b470-f571-4c31-9a7f-a4856760108d", "indicator--2dab1331-133b-430c-8551-aeb4c5051232", "indicator--1cbb0fc0-992f-458b-81d2-a6bcc372d4ed", "indicator--a922bae7-57bb-4bad-b2ff-c704c1a53ddf", "indicator--f293816c-9092-4a04-9dec-7de13b4f3479", "indicator--9ba91610-25a6-49a5-b916-122986560968", "indicator--906b6510-83d3-4e10-944a-5210ed9f3e4e", "indicator--041ea204-20eb-4582-9fda-1d28a0e3c245", "indicator--2ae611d1-06ab-4034-9f28-6cb557cdaa57", "indicator--25b51540-896e-4726-bf90-7c4843173a3d", "indicator--adcb65d9-4bcb-4254-9fe3-58b670a0847f", "indicator--3a4ff0ab-31e6-4978-a293-1a938cb67da5", "indicator--ed1e5435-b864-48ef-ba99-0166358a8a05", "indicator--b591bec3-e203-4005-b674-a581c4cafbc7", "indicator--329b5134-a6ca-4634-b787-52c895c46870", "indicator--25bac802-99c7-4a51-877f-24052dc134bc", "indicator--24045fc9-59f4-4f57-ba9f-f908c11d57c1", "indicator--9c6ad027-8a0d-4ed3-9f8e-59cd645e482c", "indicator--1dba07de-c15d-4ac6-8d5b-6450497226d6", "indicator--80937630-f019-45e7-8c45-339b63e71e02", "indicator--5d5c1b86-e557-482d-b159-4a2eed223e15", "indicator--728e63bd-5579-490f-bbc0-336e91dee216", "indicator--80759a08-4377-4485-b718-df846317175d", "indicator--2aa9e687-7e2e-4863-ac69-c0346e28cc7c", "indicator--51886332-39f7-4e0b-9158-f66dcac49b97", "indicator--8ed02adb-3e58-4b55-ac94-99d6c15b35ca", "indicator--69130fde-5ff7-4bfe-8068-02357f673f55", "indicator--54c68bab-57ea-44a1-a640-75553014193f", "indicator--cebef97c-354d-444f-94f6-41b30d8561e0", "indicator--a007aaa8-fc8b-4c96-b582-0e205ec98da5", "indicator--e7233611-f94e-4b0d-a399-e4e7183e6817", "indicator--7831c8be-c3b4-4a66-8cc8-98e7a2541bb8", "indicator--0e40aa2e-3067-40d7-a4fa-f151b993a5cc", "indicator--8874d2c4-6837-4cd0-8aa5-9d6386b634b8", "indicator--eea9a882-de75-441e-b710-3819d8c283b0", "indicator--a01e5a17-b8b7-48f1-b852-d980a34338e5", "indicator--a15eed88-0707-4739-8e8c-a572b256ec0b", "indicator--ebc9d3b4-5ea1-44a4-8419-bd6b08f7c25f", "indicator--c1715fd0-6ccf-4944-bdbf-9df03a0a343b", "indicator--996ed699-27a2-499b-a04d-1216d0439fe5", "indicator--17db7911-e5d6-444e-8ace-4685cbd653ba", "indicator--f91db482-b7ab-4003-a73b-7ff8a5e75b00", "indicator--bf20d319-6b66-47bd-9641-6d692383c29f", "indicator--17685372-00e8-432e-881f-0be5839a8f65", "indicator--296fc12f-1f6b-4e0a-bb38-f19c69620a8f", "indicator--bbbe785e-507f-441e-8c03-6eb7f72b8dad", "indicator--b89023ca-570b-466a-940b-e8d7f8fd5086", "indicator--d68cb201-be90-4a16-a493-d3d2381c9483", "indicator--4a1ced2d-2763-4078-b342-f2a9f44b696f", "indicator--5890c7db-7068-4be8-a8ae-7aafd13746db", "indicator--9a323340-a120-426c-a474-aeaafc81eb65", "indicator--57c6390a-5d72-437a-a727-4e5c876c54d5", "indicator--48ee650d-3c66-4146-a458-df405cfe9a26", "indicator--a95c43a8-46bb-4c52-9bfc-cc5ca350da27", "indicator--36efc60f-86c3-4b59-b019-0390ef590074", "indicator--bf8080ec-cedb-42e9-9703-b45827b04229", "indicator--810b8168-a723-48a2-bace-6c0887e99fdd", "indicator--d4df4952-f3a8-470c-9f45-de5d77b8b6c9", "indicator--265e8908-aa17-43c4-b8f1-e6630a1a9566", "indicator--62182130-6656-43c9-acbd-fa3c3eea65c5", "indicator--d6001fc8-7546-4f75-a7ed-1ac089648466", "indicator--eaa84429-7fb6-48fc-b1f8-817a3823462e", "indicator--213d9e3a-83f1-4771-9ab4-18c912dbd716", "indicator--d479fd2c-c06d-4a5e-8264-82539ce2dacf", "indicator--5629c7a0-4771-4f0d-87c7-aa7ff6901c7a", "indicator--72a16f19-c691-45fd-bcee-5f4f37f16fcb", "indicator--288029e6-5ccb-4e64-99a6-ac9193aeaa84", "indicator--857ffee5-a28b-4335-bf90-5ec37e7cb0ee", "indicator--052c83c6-c19e-49bf-a265-149449bd3bbd", "indicator--d1ccf4b1-e3a0-4331-bbfb-bf2461e6608d", "indicator--efdfbad9-a845-4d73-a90d-461a7405f23d", "indicator--d4355d9b-bd5b-4d3a-9ee2-afaec207bf55", "indicator--ca20cf10-721d-4fdb-b80f-b1404c2b7d51", "indicator--a65cc3b1-38e5-4cf2-8b4d-4bc5754a5d1e", "indicator--ed6748fd-2b5d-48d5-a914-3439404eae6a", "indicator--432d6b11-a3b1-4674-90f4-cd7b15edc0fc", "indicator--f8c93b64-9c6a-4d65-a4ed-4132336bda5e", "indicator--bdc765d2-c75e-4314-b2f1-18636b5ba3fd", "indicator--60f23634-14c8-4ce0-9b67-4f5932843ec8", "indicator--269af36f-7a35-40ee-86f7-e130387acbab", "indicator--f5f4fcd9-ef9f-4f95-b56f-a5ad115d1640", "indicator--88a1ea00-10af-4bb3-8127-01ba42522193", "indicator--3306426e-fdc3-43ae-9278-a6f7f2d6ed4d", "indicator--a3ce0275-4af6-4528-9264-95d18339890f", "indicator--85d5c4f3-cc2e-4176-af56-24738a887807", "indicator--475c8df8-0d34-4079-8a04-3a4be4005282", "indicator--29c24cfa-9677-4e7d-9907-9c6a985b2bbf", "indicator--9dd98ac2-b72d-4f53-b89f-62e4656b5367", "indicator--208ab703-e12c-438c-8cfc-5bc3845d3670", "indicator--652fdb16-ecbe-4be5-94a9-79f9d980e603", "indicator--812d4772-e6e6-43f9-a87e-da5008cafb3b", "indicator--ed85914e-0476-499b-8bd7-b44749885fac", "indicator--8c026dda-98fd-498e-8da4-216ed626cdc0", "indicator--1c8ba0eb-5fde-4d14-8fe7-b6ff4eebdfd2", "indicator--0ac0bcc9-3223-4c72-83de-e01fdf882839", "indicator--cf8feb2b-d702-4df2-a8ff-b043e846c267", "indicator--ca75d799-64a0-4f7b-9507-df8634a86c49", "indicator--8cad71d5-ad6e-48e5-827f-4bbc88717bb7", "indicator--a09691ba-1a3e-4964-9922-54aafe37832c", "indicator--3fd671aa-50e9-46af-9698-87f77a0e05ee", "indicator--c3a07298-d5b0-4443-935c-1b44ba666dbd", "indicator--e254dd1f-e9db-43f7-a133-95db14fa2050", "indicator--d0a9071b-e3d5-49ac-8d97-218627e0cd7f", "indicator--6021c8f3-adfd-41a4-954b-866f45365c4f", "indicator--f4299ebc-8d36-408f-a6aa-d65bb162d66e", "indicator--3c83236d-6e6d-47a1-9326-b0b78d18aa41", "indicator--3604ac8f-bd77-48d9-aa50-93bdbf423085", "indicator--bdfdec48-bbe4-4977-b802-db144c7eede0", "indicator--e201cbad-2547-4526-a450-6fc7db0a6c20", "indicator--d5f82cd7-be4a-4cda-a10d-37b7a548e5ec", "indicator--72449e2b-d11e-413a-aaf5-b71ffaf1d34b", "indicator--086464d5-b9d8-42b3-aa7e-79edce2422b3", "indicator--04b5b6ef-e2c0-4f13-a6a6-9bc91b5e4776", "indicator--3f1c5cce-3e2b-4591-be1a-647af245dd6f", "indicator--df48464a-1ca1-4c66-b77e-50b64fe5e2ef", "indicator--a368b444-5bb3-4435-8057-fe52fdc475aa", "indicator--cce1bb28-e0a3-4997-a95b-7f278880c2a1", "indicator--45cca049-5618-4712-9b48-8ebfa7fdf35f", "indicator--11090a95-938b-4577-b635-9f5fa48b767e", "indicator--9e24793d-afe2-412e-973f-0000404549db", "indicator--d1964071-5e2e-4e98-9a05-b4fb8124dca2", "indicator--09ff7e58-2a32-47b7-811c-df31d0566fbe", "indicator--f2291784-814c-40f0-a2f3-92e3bfa9c145", "indicator--c21fcf04-e3f1-4af6-9792-15bd83d256dc", "indicator--386b2264-0f76-4161-8eda-4b9579fbe8ca", "indicator--1bad2553-5b89-4f39-a92c-7a03f68b8386", "indicator--8554c53f-bf3a-49bf-bee0-cb44479f447a", "indicator--8323fe64-d941-4cf8-9537-da3be6eaba46", "indicator--739bc08c-97ba-4ebb-b6b0-44c1bfcbb11a", "indicator--9a42d3e4-c62c-43ed-8693-0ad8688c7668", "indicator--156b8689-376a-42ff-839a-8a0d2f1c93a8", "indicator--b6a9e170-64b6-4f40-82cb-2ed9fed37967", "indicator--d463ffd1-709d-4258-87b9-4a708887e271", "indicator--14a0da1a-bffa-4cb2-ba7b-e6f38c2181b5", "indicator--fb5a1fe0-69d6-4262-836c-e0724e0da5d5", "indicator--cedbe34f-b7e8-452d-9f9a-80995eb10f28", "indicator--f1bf9295-fb62-4c4d-927b-4061dfb74fa7", "indicator--5acee896-3163-4d71-8b5d-190c7eb7102d", "indicator--c22d659e-8dbb-48a8-9ae8-d7d84ebf5146", "indicator--f46c5a6d-bae0-48ca-acba-39db3f216559", "indicator--13fa2377-ae80-47b9-9865-7a41b7c3f8c6", "indicator--e89bf43a-60f0-4a39-a38b-ebe92bd58f51", "indicator--a08c15d4-b95c-4237-826a-fecfb5b079ff", "indicator--0614a9ca-39bc-4dba-8e7a-b9b7e57a8836", "indicator--41937c29-ee01-4b31-bcdd-c346cff89e30", "indicator--ea7e6270-a209-4aee-9a0c-4fefd4dd2397", "indicator--0d550e22-ca8a-4b6d-a587-f1cd3c618b78", "indicator--988b49c8-9ac2-45a6-8a27-3fea85093a7e", "indicator--83370771-83ec-4adb-9626-4d3b36519bf5", "indicator--6933c60c-6dc3-49fd-920a-9b880aafc9f4", "indicator--2f6f8688-4cf8-4eff-bc03-bd690d137923", "indicator--5829a80c-ed18-461e-b0ed-4b3a306556e3", "indicator--5f8040ab-c470-4f85-9d3c-04a8c5c58f13", "indicator--02d687a2-5626-4e10-8171-33ec0bf6f3dd", "indicator--aa32242a-9d59-4e2b-b593-191357f760f0", "indicator--d1aa8b43-1a7f-4d64-90f2-3efa5277bdd5", "indicator--cf08a399-829b-4a1d-ada4-e7670add98e7", "indicator--48f2adca-b799-4af4-a0cd-47e9ad5d0750", "indicator--593a634e-7887-4df9-a91b-979d24eb94bc", "indicator--c4da497f-b975-4e4d-8fb3-5970292a8d81", "indicator--1cb40d76-7d67-47f4-8800-55ffb3052673", "indicator--3612b91c-b9f2-4a6e-a10a-a7717afd8a87", "indicator--81f99fbf-1d88-4e55-a57a-2407bf1c29a7", "indicator--b2b7129d-68bb-4a74-982f-16f7a4f928ea", "indicator--9328824c-6ac3-47b5-94d6-4e56aee08e10", "indicator--16c2a216-dff8-47c5-b9bd-e7e6ca12e950", "indicator--7cbe6ff2-f89b-40d5-8a90-0eaeb2d0f86c", "indicator--2f214e47-fc82-4cb5-a866-fdaaa7d21556", "indicator--eddc6754-4020-4cdc-b101-5829c86cba87", "indicator--405ce208-c4b6-4bd5-a2d9-e3c46b23820b", "indicator--80f4df15-ca50-4e98-81b9-d9950dc3a38e", "indicator--fd73bd20-2571-49b0-a9f1-94164b5501c6", "indicator--126cc348-e101-4e47-a4ce-ba60e2c5f23b", "indicator--6ca277c5-1aa7-47a2-b13b-7f2791f6e7fa", "indicator--75d872ab-c1da-4cbd-b73f-a35cbe5817c7", "indicator--22b6e6cd-9d74-4164-b7b6-f651afb6ce22", "indicator--ac165248-2f4c-46c1-9396-dd0d0b35c09b", "indicator--90800925-591c-4c41-af8b-09d333473f6f", "indicator--e2b4cfe6-6e90-4a46-a62a-eff1cbcaa014", "indicator--128344fc-d576-4e36-9d96-598c7138948d", "indicator--ededf464-3115-4ea7-9067-bae2a889d53f", "indicator--22ad16e2-266d-40e3-8da7-3f406adcb99d", "indicator--a3717468-3a62-4118-81a3-831fb3a59d73", "indicator--c6cc9885-7714-458e-afcd-b78c7afd069e", "indicator--1737c8ba-3b47-4381-9852-34ef47395644", "indicator--e9765b61-f269-4777-9145-cb28853a3242", "indicator--863fbe7a-a8a7-4953-85e2-4b2b26eb806c", "indicator--f2e8ef06-f643-47e5-9778-23b39694982e", "indicator--ddbe42cc-1fba-4eca-ba06-6ac9321c1e4e", "indicator--4d8630b5-790f-45d0-a011-7fb1c2049b6f", "indicator--8f367695-bdec-4347-af52-c78a385a42b3", "indicator--579363e0-f196-48ab-8b92-579798288f21", "indicator--aaa6c693-8f6b-45e0-a8f2-b8b6eecdbd42", "indicator--85c00963-c1f8-48fd-b704-62732b33471b", "indicator--ad55bbd9-eaf8-480b-b43f-81fa2e5ed11b", "indicator--1e8f9b38-4e5d-41e9-b54f-4f61a320bd30", "indicator--cbeec845-cb1a-48f0-9e74-451b747bc897", "indicator--99474648-eeaf-46a6-bbe4-a83b7f13ce78", "indicator--da484eb3-f821-4ba9-9602-c3207b0ac5a6", "indicator--b525bc95-642d-4dbe-88eb-a2b52b0432a2", "indicator--1205c614-bd79-4e5c-bbef-8eba9795504f", "indicator--a4be27dd-a18a-45fd-8589-317319460e84", "indicator--1da0b3c8-5ddc-44e0-974f-2cd3dac74674", "indicator--83f39531-86cc-4599-9690-de6df6d90b13", "indicator--4ce909d9-dae7-4eb6-abc5-87e6648bec7e", "indicator--bbf38955-cc46-4cf0-b9dc-e5ed9eeb3e34", "indicator--9773fdef-c90d-4ab1-b867-520efa3038df", "indicator--a7338563-b887-4341-bd32-d7e1be8d3c5b", "indicator--c7f6386b-81c9-4955-a21b-2329417ff2e6", "indicator--5c4e9171-26fa-4b0f-959e-e508c4674f76", "indicator--d69997b3-3669-4af1-bd80-696035d3e69b", "indicator--ad1f7501-aa87-4c3b-b9ba-52971f363c0b", "indicator--d5c53f16-d619-498b-a1ba-174dd552a7a8", "indicator--32e75770-3157-4c2d-aaa5-4b2f862057d7", "indicator--9ddd2f9e-83e0-4343-9171-5e052c3178cb", "indicator--1478a222-1e73-4786-b038-70d5e044973a", "indicator--437a3f62-e2d7-4b86-aa75-732e4ec1b7c4", "indicator--5ed2b33d-eeed-49e7-9483-141377fd3cc2", "indicator--bf68114a-0aa9-4a1b-aaee-837fdf1356ab", "indicator--88ec24b7-bdd0-471f-a745-9b49c124efb8", "indicator--0b24c40a-7c4b-446a-ba21-36bd57d66381", "indicator--c698a2f8-49ab-4f13-9106-127b81b9e532", "indicator--28163b54-5580-4b2c-9edc-9d846b14d87b", "indicator--9339e06c-6f66-4721-91ac-54d82f61e5c7", "indicator--8854d4b6-db94-49ba-9dd8-60c2f1c585c4", "indicator--d0b682b4-81aa-45e0-a5f2-89b819fd8b5b", "indicator--9ece4f67-6669-4d7e-b682-e973ca0ed999", "indicator--724d84ee-667d-481e-ba0a-e5a5cddd0d73", "indicator--7878a232-503e-4aa2-9a02-24841369c816", "indicator--4317afa9-d43d-4334-b342-086260e71a88", "indicator--b9856a18-72eb-4249-9c02-71ff1919400b", "indicator--b4942853-af97-4be0-b8ca-88da684750af", "indicator--469f8945-f57d-468d-9310-c742a6f282c0", "indicator--3369a4f7-3b65-4e72-9ffd-bcc539ff1efa", "indicator--3bb0e6e9-28fe-4de2-ad25-e617e26efa11", "indicator--ba245368-0497-4bdc-9652-936b0c7370ce", "indicator--ac9ca40d-b4e3-4dd0-be2f-a4fcc4788f33", "indicator--b397073c-eea0-46ec-b907-143c83e84619", "indicator--496441b6-68ab-4ccd-ae59-91bee4d4fba7", "indicator--325d5926-e343-4332-ba83-6f1d11e74fda", "indicator--760827bf-0712-4ac2-9c07-be1ceeb34b8f", "indicator--b1450bc8-ecf7-4547-8ecd-9b77a63a5abb", "indicator--6d6b0968-3288-4248-89df-fb3a8d3af3d7", "indicator--b5621cd3-faaa-4143-80aa-1e337b1cc8c1", "indicator--fd26ba0c-2b56-46bb-aab6-bf04afcb7de4", "indicator--827a4680-f21d-41d1-a079-c3d8b2fcf1bd", "indicator--458f13fd-b605-4930-a8a0-7b1085e8d7e5", "indicator--79c10d2d-1b7e-42ad-9e27-e7b3ac7479eb", "indicator--82c59a4f-6e39-4ed6-9b2e-e32d38fb1afe", "indicator--90760102-4bf0-414a-9c5c-992bd3e28520", "indicator--1234cdeb-d11b-4295-922d-a2e2f086b22e", "indicator--bc3ca351-6477-4263-b118-c02fd8c2dfe8", "indicator--b25a2525-e50c-46c3-954b-d5fe2e739b07", "indicator--b3d1337e-153e-4b40-b594-671c82fb4702", "indicator--06a60ed5-8d19-4594-ad96-6d64235f1162", "indicator--adf7455a-36b1-48a0-8451-9837fa69db17", "indicator--109888e4-af79-4ba4-8478-8e5284d82413", "indicator--65852682-7ca7-41c3-9f5b-834fb94c6e00", "indicator--26808f25-ea38-4b3e-9ec4-0c7c4b4467dc", "indicator--81913e15-2c23-4956-a98a-75e6a2b45aeb", "indicator--7498a86d-c043-40a8-8229-69dda0892630", "indicator--54e248c8-16db-40aa-ae58-c14a1447b895", "indicator--abaf78ac-a8c6-440a-bb83-b8b84cf03bfb", "indicator--1f8e6735-4650-43a5-adfc-cb13285e4294", "indicator--3c9bd695-8440-4f9c-8cfe-b1a3b87ef4bb", "indicator--dda17f88-012a-484f-8a2d-9837b7c525ab", "indicator--60d0847e-6486-471e-b3f8-423e89facc14", "indicator--518ec0ec-a3a1-4309-a99b-3c434a4a27d3", "indicator--b919d9a1-d696-40b3-995c-d3f22bdba1e0", "indicator--aa95fa4f-6b91-449c-8bae-9b5fc87ae7ec", "indicator--c793bb3f-69d4-4739-8aa6-28b9b44e2de9", "indicator--d4adac0a-be59-4193-b431-831f63ce2719", "indicator--6fc61c30-dfe4-45cc-a30d-d84ad287260b", "indicator--41cb3596-7736-4762-8aa0-7a50e8429a81", "indicator--3cc48d76-e708-4e71-81ec-aa0e5a393900", "indicator--85549e26-7315-4251-94a4-9a2ab912f88c", "indicator--38840d48-dbe8-47e1-a29a-e1e2ac7cc9e1", "indicator--441fdb8b-2e65-42d8-8920-08356419dc1f", "indicator--d494a754-1659-4e01-a63f-8ca635425c6d", "indicator--19d37cc4-e454-4395-9927-584c7e4b91d4", "indicator--8f0435ed-6d28-43fd-9624-37fbba2fd5a9", "indicator--70a7bc27-1453-460a-92a8-688d022eb381", "indicator--09d4689d-4820-493f-9342-e248a046502d", "indicator--1d97373a-9f26-4532-aa29-322a5ff14d33", "indicator--d06cbdf5-4e9b-446b-ba26-7aaebc092116", "indicator--42c28bab-f378-4b48-a3ed-7df104846460", "indicator--d6e9ea2f-47a5-4a28-a617-e8dc2b4c7908", "indicator--0557529c-5f78-40f1-b045-5f1694f1b009", "indicator--7705f8ff-83a2-43f9-9315-b7bed708ab48", "indicator--33b1b406-5508-438e-8426-304a53c40d7f", "indicator--03a507bc-4f4a-42c2-b675-a805e8937f26", "indicator--5a631f00-a40f-4305-a5c7-4ca822a4fd32", "indicator--36886616-7b27-4149-ab04-08293bf6db0d", "indicator--d8aad911-563c-4d61-b455-6fe2b0341b69", "indicator--db8fa6bb-330d-4207-851c-330ffdd71c07", "indicator--89405c7c-850d-43c8-86e4-e075cd699bb6", "indicator--d90f0b51-a6d4-408a-b07c-31a2c0f8c1ae", "indicator--371fa943-d897-46fb-b8a8-00884ceef3b1", "indicator--dd9b078d-65e1-4564-a9d6-2fd2d6db785c", "indicator--183a4156-8f82-491a-b37a-9a3a1e070134", "indicator--ffe8bb89-3470-442c-b885-db38108633d2", "indicator--ddcc3c02-bb21-4fff-bde8-25d9eeddc67d", "indicator--ac6fb8d6-61de-4c76-8859-786f451707f4", "indicator--6fb2c939-18e4-4388-b02b-173d5af3c39d", "indicator--55d890ee-c684-4395-8aa1-fd238d98b528", "indicator--0c14e42e-fb16-44f2-8deb-a9633b795de4", "indicator--cdfd19db-19ac-44c5-9830-40df258d4797", "indicator--a0a01640-b1dc-4b0f-8ed6-75c823317af3", "indicator--27020bd2-389b-4a95-b7d9-d909688f8c03", "indicator--3b2441df-7aeb-4a64-b85a-53aebb00ff52", "indicator--eb211ba6-cf4c-450f-b1d5-3fae624b639a", "indicator--a834767d-fd6e-4c5f-af4f-4d2246025ee3", "indicator--c62583e6-15df-40a3-94ea-2ab2a719614d", "indicator--e75af7b9-0e7a-497c-8350-21fa4b6c4e07", "indicator--f7cce53f-a151-4b17-80d4-6a53e66fd2c0", "indicator--20c3ad3e-fd76-4875-8d03-9c429c269366", "indicator--22659c12-43b0-4ee8-9f23-87061a23070a", "indicator--d8da13d5-24a4-463b-ac4b-6047c03a46fc", "indicator--e449b613-43d5-45cd-94a7-e4a382f2d1fb", "indicator--fbb3331e-943b-4860-8a99-a5295b55d523", "indicator--27106a6d-e1f8-4de7-b1c8-83ccd77cece2", "indicator--83ca5683-f3f5-4f2d-aafd-3289cdd30e3c", "indicator--a9cfa4dd-a3e4-40b8-aaf1-e68db407b832", "indicator--3c6a9a9a-2ed1-42b2-8fbb-48555403df6c", "indicator--a1e0445d-ebba-44ec-9255-56049fa71997", "indicator--e2126da1-268b-4d37-8ccc-54f145992d3e", "indicator--ac5988d0-c81f-48de-b4e2-8d497c708a7d", "indicator--ed7a368d-577a-44cd-8f0e-0063f7bbb79e", "indicator--3f75f735-1275-4bd6-bbd2-4fbadd6b22f9", "indicator--f37b50d1-69da-4ae9-bc24-bfc43569ff2a", "indicator--759587c0-e8cf-4567-9bf3-33cce34a9ae2", "indicator--0763b67e-387e-49e0-a993-9ed40161aed5", "indicator--4f28da86-c3bb-4f1a-befb-18c001097acc", "indicator--d37868a9-79c9-4398-826b-5d9651cdc7e8", "indicator--e80c8e15-093e-4549-ae73-642752b3922a", "indicator--4a5f67df-c357-46eb-806f-2cc549112993", "indicator--57600f9d-edcf-463a-925e-be4de6b0bf0b", "indicator--b76ce0f4-5432-4395-a816-ef4facdd7923", "indicator--e1111f3a-5285-4f79-ac43-d4dc25ae6906", "indicator--13c9a7ef-8ec6-429b-9188-a759fd101b22", "indicator--b562a2ce-daee-49a0-8fc8-fef02583c875", "indicator--9c84b256-3133-40dc-8bc2-cbd053e24a4e", "indicator--48f3eb02-bfd3-470e-8184-e7c494e95d0e", "indicator--13c6b14d-e423-4652-98cb-507db03277ae", "indicator--abd50043-93dc-408d-b29e-4ee3de627983", "indicator--d6eb3e72-82f8-4dcc-a293-28e8271ffc8d", "indicator--f98d3280-706d-46b5-8da8-521ddaf218e1", "indicator--d30eb634-244d-4ddb-8720-44e19847c94f", "indicator--89af8440-2d90-4499-ac64-b1e836f7ed9b", "indicator--92c60891-e7a9-4ef6-ae1a-f8e5d788dc61", "indicator--da31cc2f-aef6-4639-b9eb-116b542886f1", "indicator--d82f43d3-25d6-407b-8a71-bd2b7d0543ac", "indicator--4d653e0c-84a6-475a-b65e-eee2bd837644", "indicator--da879ef4-0d5f-46ee-8363-aac6ae77af46", "indicator--92311d45-e7e6-4e6c-9420-61b88781c26f", "indicator--f01e2035-c99d-40b3-8ede-18b63b4fa16a", "indicator--59fe8a8b-2ac1-45fd-945d-de5f1c2326d2", "indicator--3192c4a9-036a-4e49-a62d-60b4877aa9f2", "indicator--50bf62de-844e-4dc4-8688-bf934ec51d23", "indicator--0d873c8f-c080-4aef-ab58-a61c99b2b0bd", "indicator--ed2dfee6-ff77-4c41-a9f4-a0d132a81abe", "indicator--c00a4bc4-7200-44e1-81e9-de8bfccc6747", "indicator--ba82449c-a054-4b37-ad52-23d9ecdc9236", "indicator--2fb5830d-7817-4093-a765-b0215b563382", "indicator--bc78fa82-8139-42d6-88d9-defd87ac769a", "indicator--d1976047-6424-4e45-b3e0-0b2b2a2d33fe", "indicator--ad54a0f0-2961-4e55-915c-20cd8836e556", "indicator--fb1cf7b9-3b43-49e1-bf33-2e0d0138f6b0", "indicator--d234d629-7c31-4748-be68-2641594bd5b1", "indicator--d3f58ed9-d9d7-47c1-95f2-cc21d61c0047", "indicator--11523f0f-9c59-4160-97c2-2f1429c3bff3", "indicator--c503f978-622c-4cd9-9cc0-e14cb2d2b37d", "indicator--c40f9d5f-39fa-4898-a03a-47330f569682", "indicator--4fea82ee-884c-46d9-b126-3121773c420b", "indicator--965c19be-9bfd-4575-842b-6dcb42f9206a", "indicator--9d0531b7-c3e7-4acb-aeb6-bbfb4c25d558", "indicator--74d95243-40d7-4552-a544-153335e1172a", "indicator--eec76aac-3efb-45a2-b685-846e9dacda2d", "indicator--a3acf246-6298-4dd7-b8a9-e12fa830ed57", "indicator--7eaa4345-5a46-4cc3-81f1-b94561f6a393", "indicator--c7125580-77ac-4c29-bf1f-c2cd01e2b2ed", "indicator--21bf7c9c-26af-48e8-bf1a-b6ac187dc50c", "indicator--97fa380e-71c7-45e5-a594-105696764a09", "indicator--f10d4b46-671e-4d74-886a-b75f4d946d25", "indicator--45d3ba47-84c2-409b-a2c9-88b667e337ec", "indicator--18a70bca-dd74-47d2-b35b-df442c441428", "indicator--940650c7-a458-4c07-a2ed-e0593e94f5c4", "indicator--711dc64c-d011-4574-ae95-78b184b674d3", "indicator--952baf1b-4475-4f3b-a748-d8a6d478a514", "indicator--04d739d0-0e91-4731-a0c8-a46e059fbb86", "indicator--6c21b7eb-78ea-4f05-bc2e-68fbb02baa85", "indicator--cbcb985e-ed3f-4223-9e57-e24398b0af3e", "indicator--f93353c5-f816-429b-940f-56564153cfce", "indicator--90c4aa47-a526-4402-8206-7c5e47443cbc", "indicator--c68ad3b9-d187-49d7-98e2-e22e0524c3b1", "indicator--dd6a301a-bf7b-41cf-98c2-a587d0f7d01f", "indicator--0ce4d121-b19c-49a9-af1c-0070644d5e78", "indicator--2c8214d8-0617-4dca-9e5f-815285061220", "indicator--22383e20-89b2-4108-9a88-15b9099b2424", "indicator--44eaea05-16a8-422a-91a3-2d80bafd372e", "indicator--54d2cdbd-4035-4b5e-a6d0-f27caa49fcc6", "indicator--5e9ed0aa-847a-4ae8-b9b8-63af498c24a6", "indicator--f886eb76-429d-4631-923a-a3971e9bc3ff", "indicator--d99e4a02-2bef-4024-a9fa-d08c86dab93c", "indicator--a5317fce-66fe-4a96-80a3-7921ed68d6b5", "indicator--ebc34c3f-449f-41f5-8236-a39e73601658", "indicator--8e981f61-a660-4551-8258-bc26ecbba525", "indicator--95287373-bd0e-4e7e-94eb-0914601c3840", "indicator--9fb32c16-6e58-40fd-9bf2-d2ce97a504a7", "indicator--82bcbbcf-07ad-405d-9d1d-039d09e3e21c", "indicator--a2f10cd9-b86a-4b9b-b494-5c802daa8a99", "indicator--ae9b76ff-207e-4c7c-b88c-eb16a3e76f91", "indicator--dba7b8a7-f172-4432-bed3-9b10a29e5ea1", "indicator--19d444a1-7212-4379-9edd-022b940e3242", "indicator--910e0697-556b-4af8-b457-7c072a0d305e", "indicator--5dc5e998-580f-4358-8e10-6c6e28425e1f", "indicator--7c6ae028-2460-4474-93dd-424053f0d251", "indicator--e373d57a-e6e9-42b7-9bff-f82d7a67112b", "indicator--38856b9a-6492-4edb-8f98-bc4c21d24e2d", "indicator--95739494-2a55-47c5-b85f-8db89af7f6d7", "indicator--b87d36fe-dc17-40ec-afe8-fa270e86dd8f", "indicator--5435ae58-ec5f-4853-ab96-6acd35a1c2f8", "indicator--8e2d5043-b01f-4049-b5ff-93e6756ce1aa", "indicator--c82c2a39-8f66-4329-9789-dd91347c27b3", "indicator--7b87b2b9-85c7-4566-a582-c6e2c454bd1a", "indicator--f4565b8d-c9a6-45b6-b025-5575b9dd8827", "indicator--3ee29fd4-83b2-4f96-8fee-41d8cba1ce7d", "indicator--fd049756-76fc-4f22-ab8a-f60bf3b60690", "indicator--9a16f645-2a68-4900-891b-630f422383f1", "indicator--7d252843-5a0f-47bd-8436-b41203f776c9", "indicator--a81156ca-d315-4f54-b332-d26842e70578", "indicator--d49310dc-3ba9-4a84-a034-44d1648f5e33", "indicator--0d70474b-b3bd-4388-986c-6a3f520fd17f", "indicator--c6afeaba-c00e-45ba-b73d-814790f87556", "indicator--9307cc91-26e9-4b48-a9f7-30a6259e571b", "indicator--65ce6a21-2dba-4f58-88de-710cb433c04e", "indicator--2399c378-c211-4d79-8743-f40ef618930a", "indicator--c5e0c731-a627-4adb-b50b-221cc4282859", "indicator--e98a1d91-c12b-4b84-995c-22ce862ed593", "indicator--095df8d5-1265-49b7-873a-ccd6cb3be8f5", "indicator--29b39c00-9e10-4857-bee9-83696a8c4d3c", "indicator--e6bb72fc-c976-44dd-8d84-1837534bb0cf", "indicator--eca4de6c-7fe1-4840-98fa-592d5a4c057e", "indicator--1bfb5942-9d2d-4b25-9635-a6a3f9e15258", "indicator--1f88806d-1d89-46b1-b8a0-4730cc9ffa36", "indicator--de48db25-5c97-411c-b8ea-7ac079bbd48f", "indicator--4b96e354-fe26-43a9-94fd-e3f242e60efd", "indicator--990a837d-ec80-4a5e-8393-4bee6f0e15b3", "indicator--fe309f8d-8b1c-4d79-9fd0-6780668247d1", "indicator--f5c28324-bd9f-4f73-b0ad-007d9dcc6a6d", "indicator--fe28ced2-8566-452e-8e5f-af94aa1e3d6b", "indicator--c816418d-23d9-4f43-bfa7-eff57c416d09", "indicator--5cc043de-6ca4-4aed-9a4d-1e2aebca0c2d", "indicator--3da15412-092f-4ad3-b446-8de03e699c96", "indicator--b80e0218-b515-4346-94dd-1d2c3c699af6", "indicator--0240ede6-e414-4207-a676-78217975d3bb", "indicator--6f83f943-52af-4943-b976-7f03c7e0a9d1", "indicator--ec674788-a01c-437c-ae6c-ab846577a280", "indicator--c389223d-fed6-468c-9274-a41b77bd6ac8", "indicator--e9d43684-7c0e-4aca-8207-5a8de695fea3", "indicator--f7f8d060-edd7-4082-9b6d-e6aef455126f", "indicator--7af796ca-ac5f-4869-87bb-a04973e92c7b", "indicator--c1e58e52-5707-46d9-9e35-afa5385e763b", "indicator--a378dfa6-6997-47c6-ba4c-6d4fe39b1705", "indicator--fb59d3a5-eec7-4838-8e70-ff04ce5be9bc", "indicator--25cd4069-0e73-4e16-aa77-5a824e6a0bef", "indicator--06f3a884-1296-44ff-9d83-d2e496f3d537", "indicator--38d3b075-570a-45ef-b87c-36c397b63ce6", "indicator--9be7fcfe-a9c1-4af6-842b-54c5a136366d", "indicator--0cc12df7-a320-480b-9f63-6a98d318a2ee", "indicator--9fbcb7f1-e77e-497f-af61-e29c0c06bae4", "indicator--85fadd34-8815-4edb-9e0d-36fa315917ac", "indicator--2568cdc0-4ed7-48db-b67e-ff2a68b8f58a", "indicator--e6c58bbd-d631-4cce-a95e-20cd7a70ed07", "indicator--89c08a8f-2c0d-4500-8bb3-a6fa901e64f3", "indicator--44e4dc7b-e0b6-4b39-8a0f-913b554c6945", "indicator--c2267ed8-05e8-4f3c-8a09-d578365c14a8", "indicator--3fe0cfe9-d33c-44ea-a3c9-49f5a5aafd37", "indicator--7560578d-91d0-42f2-9a51-404963bbc86e", "indicator--33f19415-3c11-44f1-94bb-6cb5f7426ea8", "indicator--d6a8b373-c9f4-4aa6-bc72-d058e4945e45", "indicator--8ae53751-48c9-4192-b218-037482ccc037", "indicator--a22b5686-6542-41e9-95f2-ee69ece49fd5", "indicator--b7b87758-79a9-4ffc-a5e1-5821731fbda6", "indicator--64a797f4-ecfd-4cdd-9425-a8433e62f118", "indicator--3c69029c-f644-4f79-a2cf-8294b431c46f", "indicator--683369ee-1b2c-4bf4-ac5c-8b7085e88cad", "indicator--6d956bfb-ea0c-435d-8bdb-d3ca73d90256", "indicator--1733c0b2-d7a0-48c6-899a-a2d0d8a8f3c8", "indicator--e3189390-2910-4a3d-9f30-4a460b094d52", "indicator--b4ae7d2e-fa19-4974-834b-561d0115896f", "indicator--a89688ed-6091-4d5d-bad7-1c77e384a7b1", "indicator--dc29c9f5-ed08-447a-85df-517d2197c624", "indicator--f7d66372-c845-4c1a-a68b-b09b402d6687", "indicator--80cb4cbc-2617-4d20-ba5c-0a8b93ca2005", "indicator--d3b29409-06c5-47fd-b2b4-531d9a7d35b0", "indicator--2d8732f6-dcc7-4e98-ac8f-fe6413bfb14e", "indicator--1eb577c8-20e2-4a48-bacc-d7d92b966eb9", "indicator--cda819e0-c1fd-463b-b9d5-3acbc43efa0f", "indicator--6f4b439e-775c-4bdd-b462-d16d4eb9da39", "indicator--faa6427e-f91c-4ad1-a33e-9fb97b318798", "indicator--3716c61d-37b7-466d-9024-4671614c28c3", "indicator--bf52283f-1136-473d-a535-38798f180e8b", "indicator--abde7198-b8da-4213-999d-670acead9a22", "indicator--4abe2df9-2a9b-4eab-b962-d26da9f78ac3", "indicator--01906a2a-7cd2-433d-b47c-2b7a8dfc5f2b", "indicator--7b50d060-8091-4354-ac0f-34d64cbbf551", "indicator--51fe81c3-a746-4473-9e8a-7e6dd75056c8", "indicator--f5ca48f3-73ee-4b26-ab8a-b0b2554ebb2c", "indicator--dd161303-d942-4989-8d81-0dfefc859bf6", "indicator--8aae7bbb-b915-4292-be66-c7992323f62d", "indicator--c291b15e-3895-457a-a650-da0a37509906", "indicator--f3ec32c4-788c-4fe5-af0c-b20385149c72", "indicator--67109a83-cd08-44b5-b821-babc07528973", "indicator--d40cf53f-e620-4f25-9a08-d1e952d1f447", "indicator--61ee2a3b-d5ed-4abd-b7a7-0e09317d72ba", "indicator--69c26b0d-44b0-4701-afbf-028c9f455936", "indicator--77939daa-20fa-4be0-838c-95d881357123", "indicator--cd575da0-4f5d-4b36-9c5d-2f648470c666", "indicator--9a156359-0950-4c48-a2a4-d203bbb608cf", "indicator--5a1d3897-c830-4297-8240-cd90d8dd7cd0", "indicator--cefeda3c-24ce-43f3-b936-5326ab5a7e14", "indicator--b2c16e67-f108-4066-a91c-36aa5e321aeb", "indicator--79711323-24de-4dc0-9262-e9f0f9bf3f63", "indicator--c0b0d85f-50c2-402b-8228-b773ff6e57fb", "indicator--b2a29aa0-3d39-4841-8a52-8bd967d3263f", "indicator--f03ffc3a-ec66-4778-a425-8bfa5b92bbac", "indicator--7e42b54b-9830-4627-a215-a54296e6be6f", "indicator--b6011e13-a925-4b8f-a2ce-45fd8f8e26a8", "indicator--ad3ebaeb-fc78-40b8-a42d-cf442b576fee", "indicator--4368bab0-5ae4-4cee-97a4-d56abdbd36df", "indicator--d165faad-f3b5-49a3-8722-1d5c5df56bd7", "indicator--18b0a0d0-79fa-43e6-9302-9c5bf1e01fcb", "indicator--afea662d-bfe2-4a89-8714-b93ac442f79d", "indicator--abaf6301-e3fc-435b-ac92-b753385a8a40", "indicator--19482c4f-158c-4902-8d41-767d5a1355dc", "indicator--6350baf9-d322-4294-8f1d-3ce7361a4899", "indicator--c9382198-3282-4ffa-b41a-5931154fbf33", "indicator--1c4223a8-688a-4803-b348-bd1b9378165e", "indicator--73bf21d2-def2-48a3-af67-db078be35e66", "indicator--5ec411a3-7c01-4ebe-aefd-2d3cbdd94c19", "indicator--b652e3e5-84ba-414c-8959-0c002bdc782f", "indicator--f2c4ea40-810b-4a8c-9173-7a8e3f56437f", "indicator--bb413902-7e9f-41b7-a304-d77bd3efc53d", "indicator--a621c799-d146-4fab-9564-ce4cf5ec7473", "indicator--966a461c-7863-4fe8-a39e-1d9eb86a2e34", "indicator--2d20456a-6d55-4e2d-ac28-1e47e7e2f96a", "indicator--5946a09c-f8be-49f6-965e-6e98cb06e9eb", "indicator--3ad18f59-d01d-4a83-8bd3-befd810653a9", "indicator--58634b2b-e997-4c1b-9bc4-01084caca25a", "indicator--42b06a00-fd79-4359-9146-3aa7cd162022", "indicator--8652dc97-6890-40fb-b342-a650a607eca7", "indicator--aef88c4b-503e-4b58-afbe-0a4172f4f27a", "indicator--1d4acaf3-9107-4cf5-882b-541df0d04228", "indicator--90a816fb-caa7-41c7-b619-d9a8c352bde3", "indicator--ceb8f345-f7df-4a46-a4e4-d3c4afce214c", "indicator--e6f9b8a7-8456-4516-8ab3-d723078143d5", "indicator--ee6d3a6b-cb54-4765-86c2-daec976d4739", "indicator--ca309817-7eba-4b4c-b0a2-8cee5e39a7d8", "indicator--d31186dc-3e78-4226-8fe9-2013b144ac57", "indicator--b47fe3bc-e877-4644-9737-073bffe6b37b", "indicator--4c2e7655-f438-4bf1-a6c1-f5b3158301cf", "indicator--f224f9a9-1332-4e3d-90a1-facff4364cb5", "indicator--6ce9daea-55e4-4238-adec-9166cadce96c", "indicator--cecdb91f-9d73-4cf4-ac4b-27ac760f09c0", "indicator--ebabb7ef-2cca-48a7-8541-73507da7a917", "indicator--c7d93b47-071f-437b-bb8f-3c15d187a55c", "indicator--f6bd4c10-bc02-419d-bf1e-ee538e1e0340", "indicator--d6018ade-2bdb-4d57-baa3-c8c457872321", "indicator--de42f272-9523-41f9-99c7-3f4c68aeaac0", "indicator--136b1138-e0c0-4d37-91c9-9bacba63f374", "indicator--3ef62454-8a2e-4fff-b6a3-096d7ed5d71f", "indicator--c5aa2115-7b8f-4fde-b98d-7794db31376f", "indicator--2761f460-8044-4d35-b81b-62adc055b7ed", "indicator--3aabcea1-cf9f-4507-86fd-a8df617ad228", "indicator--752d8c58-ae42-4e98-be03-ab4d24b1fc52", "indicator--d328830d-0bed-4688-8247-841b1cca151a", "indicator--8139b093-6c20-4706-8723-4535953d73d9", "indicator--db852c09-336b-49d5-a6f6-ece4b2fb8697", "indicator--7f484bf8-af94-40a3-bcb6-7a7affd80d30", "indicator--8ebb070c-72f4-4de8-92e1-be30fb37f3d9", "indicator--27b6b6fc-0d47-4aff-9370-2b01b3453a1c", "indicator--58c1347f-3777-4709-8c58-2f371a96c37b", "indicator--8f384c0e-e5bb-4389-a547-1b8e202fe942", "indicator--257f979a-6dea-47ff-ad58-7855bccb2358", "indicator--ac1a23f3-98ec-42ec-ab4b-e977d81d65a7", "indicator--8568eb05-7b8b-4229-a312-3797829df7c8", "indicator--620f95c2-acc0-4449-94c4-3b5749eb9fc5", "indicator--49af8957-758c-40bc-b5ab-df61ceceb0f5", "indicator--d4e3fe8a-d905-45e3-a522-d5e218045bef", "indicator--144e3684-c769-4440-b67a-85f9862f722b", "indicator--2324244d-b6f8-454f-b4bb-84ccdf0a228e", "indicator--1b074fe8-bdab-4f35-8279-6d2cf6472712", "indicator--e105c175-b789-4a8c-8d73-6b083a2249f2", "indicator--9b4530f5-8861-4f00-bcba-84c73926c4dc", "indicator--daeb93b8-037e-4b73-b9b4-7ce1dcf011ce", "indicator--5879a0bd-06a4-4b47-b314-1c2a8f9191c9", "indicator--6fa3f711-7a29-4294-998b-164a3225ee04", "indicator--addf5026-f538-4849-b46f-cb28653c509e", "indicator--3c5d8ef0-3aa3-4f9d-9292-7c4bae31ebf7", "indicator--6dc76e00-2ec0-4337-8598-8ae8af83822d", "indicator--3c7d2148-cac6-4862-8b9f-d72e10c44e62", "indicator--5b4b56fa-02b7-4990-b21e-0c21c82e7e04", "indicator--32eb0ea2-125a-4de7-a1c1-a4ddf656fabc", "indicator--a858c254-8915-464f-ba32-48bae1e7159e", "indicator--dac043cf-9b9d-4c16-b050-fb1cb6f125b1", "indicator--7b64c8c8-52f9-42ff-9eab-fa48517af55b", "indicator--574a8ed5-6ad1-4238-8078-322015f42628", "indicator--ad69141b-666f-4d44-abaf-5a7298555dd2", "indicator--2d23115b-71c2-4c35-b250-2887b30e5bcf", "indicator--d0c1428d-ddae-4774-962b-0689e1dd1e9b", "indicator--d041e535-f0d8-4b6c-b11f-e305f855df62", "indicator--695fbb01-d244-48c6-b185-f39a577dcc63", "indicator--c81f3c11-aee3-4572-9b33-71ce69a44a28", "indicator--4c4164da-692e-4f30-8ef0-edbb6ddef15f", "indicator--8c54414d-9a23-49d4-ba74-8e1f5b299040", "indicator--7605d07e-f290-487a-accc-15b112d6f3a1", "indicator--74f4f4a9-da7f-40be-bc34-a6465d2ccd5e", "indicator--23144da2-bd69-4b09-9530-dd47edacafac", "indicator--b76c408d-825a-4fe4-ac74-3ee484201266", "indicator--796dceb9-0e6c-4c78-8e8e-3b21a9919754", "indicator--f78ee52f-4f2e-4c65-8f70-c6dc5826475f", "indicator--b7baca35-869a-4d20-b721-8f9061bda811", "indicator--55fbe313-8e24-415b-bddb-9af166a2a8e6", "indicator--6e50343d-224c-4206-8edb-97933a7cd2a4", "indicator--4209625f-0bcc-486d-b1dc-83e212dac94c", "indicator--0a6c0970-a353-42eb-9989-08d2f3edab06", "indicator--e86ed30a-ea99-4346-9926-f29f027db211", "indicator--6f171d68-0563-491f-926f-8fda9327f3e1", "indicator--d9e7ebd6-68df-4888-8f61-cd8954855d19", "indicator--b87cb250-fbf5-48d9-afad-dea0324b5a76", "indicator--d85c3e0e-32c4-4ae9-9403-45453a736408", "indicator--c7484fbf-26d6-49c8-8de9-63cdcf4ad056", "indicator--5c7b67cb-2f72-497e-856e-64a839d571af", "indicator--1315d984-1467-4047-aa7c-c3fe9b157fd3", "indicator--a3470314-2c6e-4868-9c09-a65201f446a6", "indicator--d2fa9b67-f799-470a-bfc0-d6994a0a085e", "indicator--7eabe21a-8666-42a4-b0a6-d09ba3d95018", "indicator--51c1cd9e-b2f7-404d-a4fe-2dd893931dfd", "indicator--f7e813f8-f3c1-42a2-a459-774924c4ae31", "indicator--925c5b5c-c0ad-4c1b-aa34-1be48ef0c873", "indicator--bb7e966d-7393-404a-a9e1-b0869e228a75", "indicator--51d271dd-2b00-4842-9ab5-27c39412cd3d", "indicator--5b6f0d4d-07d5-4882-8484-6c5d233e9562", "indicator--2f6d2f11-af12-46ed-9994-c0dcaddcde19", "indicator--f5d1492d-66a4-4403-a319-4e70297a8cfc", "indicator--33d04591-32d7-423d-b312-167c08ff12ad", "indicator--4fdc6133-c557-440e-ab21-5edbc98bef4f", "indicator--bcd06820-df51-44ec-a46c-ce816c666934", "indicator--b6591b14-88de-4c87-93ab-044cd1ffc891", "indicator--fa133c39-e083-4b28-b403-e9d9f50030c5", "indicator--e257b1b3-1f87-45c4-b4a4-85463f34f351", "indicator--6afd57c9-b343-4d99-b131-11388de751aa", "indicator--42013a94-cb36-44f4-a7f6-40a099ea6dd4", "indicator--4cacf16d-479b-494c-944e-df66ec6d27cc", "indicator--3517db19-ae56-4ccf-abd4-6c3b40277a0d", "indicator--c668f689-e6ba-4341-9fd9-e49a6c1fdfeb", "indicator--8ea9582e-45dd-48cd-8dc2-afb751db4960", "indicator--c84135e4-754a-4b3e-8ec1-02fcd0eb99c3", "indicator--3f4dc1fa-7b77-4c4e-b8af-2cd3cfd1c601", "indicator--c90b86d6-61a7-4716-9cec-41a5182fda40", "indicator--c28415fd-3bb9-4098-9348-bfafb9b834e8", "indicator--1e405490-68fb-4d5b-a321-0e0e96814e27", "indicator--773af2fb-c036-49ef-8624-f83bd1608220", "indicator--54d1c49f-4b07-4ba3-abcb-2c0fc5401239", "indicator--1913aeda-36ce-45ff-95dc-d0cc09354df0", "indicator--bd167eed-2704-41e1-ba41-197083681e12", "indicator--a25045bb-5780-4dca-9f75-b5c30326298f", "indicator--9f66a832-1264-4b10-b79a-9f0bc9c51dd7", "indicator--f9e091a5-6dd7-4c52-86d7-9cb869f27cd1", "indicator--ec1e9ca8-d668-4d26-b1f4-288f940da1f0", "indicator--a435473a-0bd8-49ca-b9cf-bc8f4b742d8b", "indicator--0196444a-5720-452d-99f5-aed1c941c565", "indicator--92b4ad88-ebea-4681-8b25-530f5c7ae3db", "indicator--68814786-ebf9-4914-aca5-b5ff3bcfcae4", "indicator--8036b263-f6d5-42e5-aefc-a244ca850d8f", "indicator--08b39d5c-7f16-413f-8a22-cfbf6155ec74", "indicator--ddbddce9-edbe-4b99-8110-9fd27a1e3f71", "indicator--304d442d-be8e-43a0-890f-2bf3cf6f8cc0", "indicator--f3a40284-10d2-4545-a79e-4a048a4a34f0", "indicator--14c05948-ef0b-45bf-827f-9c9a02b5ffe9", "indicator--636a25bb-e4a3-4abe-973b-a2a3bf9bdd8b", "indicator--65d3cc01-8681-4c90-8638-af78adfda8db", "indicator--e1438a33-bc31-4c75-9c28-c0fda6dbf07e", "indicator--dd12d5be-b23d-4408-9bf1-d7cb91cb1c13", "indicator--1a0ef7f1-cad5-4c33-8bfa-718fb5aaab5e", "indicator--f3b6fca9-9dd8-463a-a9d1-0bf14e929f3e", "indicator--1800fbad-a056-4bde-83b2-03adc81f4649", "indicator--ba5b2c5f-83e9-4fec-b587-156f56683214", "indicator--5d182452-8a39-434b-a3d5-cab14ecb3bbe", "indicator--433292ef-a43d-4a87-b80b-b30582559f45", "indicator--be436f9d-5aa1-44ee-8940-15e267fe58b4", "indicator--ae456d7a-73d8-49cb-a4bc-ccd2a05e682a", "indicator--7e087bb8-11af-429d-9575-964fd204316b", "indicator--e3e26788-ada3-4f31-8b59-8515e8c23e68", "indicator--e6989fb2-b1e1-48e5-b2d3-d045a613aaa3", "indicator--51d82810-3c4c-42cc-a1ee-0540f0cadd1e", "indicator--a262caf0-c9c9-458e-9908-caca10f08147", "indicator--6a835178-8b79-4b44-82ff-97a1268b88a9", "indicator--e1dba048-ddf3-4f63-aea9-863da2ed8199", "indicator--c19d5134-cae8-40e1-8728-954e7ca849b2", "indicator--3d4dd865-4f9a-4477-af82-462dbbcb3fb1", "indicator--7fd0e16d-c56a-4766-a993-84159a1e09df", "indicator--86c77d93-4ebe-46bc-81e0-380630c53bed", "indicator--13b2860e-9829-4fb3-8ee9-382163c3bb7e", "indicator--e25fb370-d954-40f8-9dfa-19e999f3c4cc", "indicator--ac4094a4-b544-4d2b-a0b9-f0d2fc549043", "indicator--12983746-b9db-4410-81a0-0c64f028903e", "indicator--183b3dbb-5c2a-4d95-9874-9bcaa2945651", "indicator--e2ba593f-3e78-421d-8623-aeeebf858c0e", "indicator--2de63ea6-61c7-4ba7-a710-6cebb652449e", "indicator--234b5fe4-c519-4439-9013-439b15538d6a", "indicator--3561f0e7-2bf1-4409-924e-676c7b95cec1", "indicator--0438de32-1e0e-4e6f-97ed-e9aa86d2f03b", "indicator--cd871f4f-eacf-4749-9a98-273bec57a63a", "indicator--2f51c052-1ac8-445f-b794-227f9670af83", "indicator--6a525f61-1097-4c3e-826f-abc04a3e89a0", "indicator--40482b9e-908e-43c9-9dff-8e1901ab6dce", "indicator--9f1d512b-d034-430f-a227-d5ce051ed788", "indicator--31b9d996-e0ac-471c-845b-99994c1c1771", "indicator--a107e724-77b0-45a9-8a56-87d08e2146c3", "indicator--1d2cba86-acca-4daa-a97f-006816d6cc80", "indicator--424bfd15-9d9e-4d25-9448-3261c763e1bc", "indicator--92b370bf-dd6c-4ec5-84db-ddbd9b10eb8b", "indicator--ae5c302f-38c7-40ff-b16d-735a943e604a", "indicator--7dc3067a-793c-4b4f-afe8-35bd1882d0d1", "indicator--d24743c7-ea56-4f4d-87f1-1071749d73d9", "indicator--590a5ea7-f7ed-48e7-b74b-1d300111ccf7", "indicator--ae6bda81-b2d0-4a50-9591-38db75e2d8a8", "indicator--5d713242-87c8-4e1a-b2b2-43f64746aba1", "indicator--0e8f60cd-c082-4b99-9c8f-8cff9ceeb398", "indicator--1c428a54-95a7-4e0b-a157-cf2cd30387fc", "indicator--9b93e10b-0823-4aa6-8a7f-2f308e181393", "indicator--39aedb5a-5794-4f1d-917e-d0ad5052d01f", "indicator--b053115f-5562-4d98-9050-019398714756", "indicator--4f969277-0907-42e2-841a-df23a379b9a2", "indicator--00006083-8f6b-4596-ae03-101b65819e47", "indicator--697eaa8b-7af9-4a5b-ad10-93dd2940c254", "indicator--1813e18f-c596-4ea2-bdbd-85a7913f1876", "indicator--4bfd6ea0-2179-461e-b822-c402b7839c98", "indicator--174ea55e-1c85-47b7-91c5-ee0fdf712703", "indicator--8054887c-fec7-4128-9f09-52d0834761fe", "indicator--03404655-cec3-4ec8-a1d4-a51af8c12d34", "indicator--c0d27a82-fabe-4ad1-a291-1356fc5be26a", "indicator--a66aaa07-f6a9-432f-91df-59ff6ace956d", "indicator--050dcc2b-2be8-4fb5-86b0-2d14d8a94948", "indicator--1aa9060f-01df-436a-b764-81b1c59b08de", "indicator--641d6699-9224-448d-bdca-0c43eb9f145f", "indicator--1c690ccb-96b6-4a5a-9e5a-1c847e54d6ee", "indicator--e240bc9c-6c45-4508-8688-5acec414f503", "indicator--825bd62a-f46c-49b5-a015-82c0b125710b", "indicator--bc08193b-3c24-4298-ac75-10f178ca6672", "indicator--7e97828e-e46a-4b33-a5e0-eb4383833ab3", "indicator--1ead99f7-55ba-407d-8185-39430654e799", "indicator--367e7ff7-927b-49b5-a53c-d4ec7a242333", "indicator--c36b485a-b922-41c7-9188-453402791dce", "indicator--e582aa2c-27e0-45a7-a235-9599fe84cddd", "indicator--938028bb-5041-44fe-a99e-111dd7eba0b5", "indicator--212fd524-11c7-4ba8-b147-2f03c60a96eb", "indicator--391ef7d8-df44-4495-814e-b0372a091d81", "indicator--68124629-3997-4f8c-8055-f0863aeffc4c", "indicator--309deeea-56e4-4260-aaad-efc2d2c23166", "indicator--c681d385-ed2c-4138-9618-248ec009332f", "indicator--e298e1f2-8e1a-4f80-84c4-d54ee51ded7a", "indicator--06c0979d-b441-405f-84f6-5e904fe14530", "indicator--682f6657-8ed1-4e14-8296-134ccbf22156", "indicator--2b2d7964-4231-4c90-97d9-2856bd3c751a", "indicator--96983d1a-8695-45b2-9b12-942406124179", "indicator--64ad4a02-1684-467b-9bdb-06ec66dd66c2", "indicator--debc095d-a805-4a6c-a090-6a47e443eb79", "indicator--bc92e065-f127-453d-a69a-12e2655902cd", "indicator--f83c19b1-84df-469e-bc98-304f9d998261", "indicator--c3a02089-b1f7-4075-bb86-8c2446731287", "indicator--388ec069-10d0-481a-82b6-2d97b17e05c0", "indicator--98bc57b9-26f3-43ab-9ec6-a6b018157018", "indicator--3c07ac4d-c91e-4442-80e1-de9076e47424", "indicator--e3979af4-2104-4a43-b2d1-4d207bf00291", "indicator--3b33a15d-1f99-4d4d-afad-bd73a85461bd", "indicator--f45971ca-e3b4-4888-9c31-34cbd2599e21", "indicator--5079ff4a-f28b-4e60-b7eb-23850f62daca", "indicator--dccfd8f3-9771-440b-9acc-403cce955107", "indicator--30d36407-0c4c-40ca-8119-ce75aeacb1ef", "indicator--6a2a1466-8771-4c2b-80e4-c670daea01cd", "indicator--28b6ae6a-b135-4eb3-a35c-068f02d72e70", "indicator--99da58c9-f41a-4414-850d-84005972dcbd", "indicator--da7b4d77-3eea-43fc-860d-0e224204ec71", "indicator--0cb77310-1f94-4409-b56e-dd2dea8193bf", "indicator--8b839063-667b-4a15-a386-5615410c9d7a", "indicator--b4bcee61-f088-4f49-9cfe-d7ca8838c9c3", "indicator--0f53aed3-6b6d-468d-879e-63c43154d515", "indicator--020b67e3-83ec-4554-a1de-20a50de7dc3c", "indicator--7f534077-5f26-4252-b32b-c14f4895f246", "indicator--a8d52465-43d1-4c66-9bf4-281f032d1a11", "indicator--2ac7bcfc-2f5d-4f54-bb78-5f5f125f7f88", "indicator--e406be5f-6025-4647-859a-3c624688deea", "indicator--4f93c716-6ebd-40cc-9050-779534f55dda", "indicator--8f8d2b4f-2e27-498a-952d-a821bdd02f42", "indicator--a3289f41-3a07-464b-9b28-22e52e19de87", "indicator--99bb8fff-6b04-45a7-be2f-8b3f1211affc", "indicator--7bf243d0-5982-49fc-ba31-129352fcd14e", "indicator--35659fb7-4612-46e9-a333-e1bcfed88493", "indicator--5ae75569-d0ee-4e6e-a61c-1c6913c8edcb", "indicator--b6f0b98e-0ae4-4cac-ade6-2f6f43631320", "indicator--3fb695d0-d0e2-468e-8003-fb5a3a71704e", "indicator--df6a56f7-61fe-4ef2-b726-19a623fa33ab", "indicator--55995a46-892f-488f-89e8-cf0a4c7e92ab", "indicator--3e9fb0ba-aac4-4570-b169-17802e487d95", "indicator--6de1a3a2-9abc-4f76-a257-7dd1c444f9a9", "indicator--9520745e-1f4f-4454-b112-76d360d512ae", "indicator--6d6e32d4-6891-41f0-8651-6fad7b7fb550", "indicator--f8a57e54-7d29-44b9-9e63-b2c4bcc69f08", "indicator--36303dbe-0f84-4b63-9e97-6ca729d07bc7", "indicator--8957a0f2-5595-4627-9db3-2304cdfb9020", "indicator--d49d9fc2-b5e1-4b75-88f5-f173844aeaa2", "indicator--50702275-d94f-4a5a-8887-0ea02331720e", "indicator--4cc21753-ad04-45b8-b456-f75ac8f442c2", "indicator--564360b7-e3ef-448a-8b46-b1fa3f13598a", "indicator--95a641a5-c6d4-420c-9316-2c0096032047", "indicator--9a12af1e-30b2-4031-8531-70b4b885bc91", "indicator--811303ac-a8ff-48d7-a353-aa56c8d638f3", "indicator--4bab1b30-be12-447f-a111-028fcd85c6ad", "indicator--03b02efd-ee5a-4051-bd71-275e4c722ea2", "indicator--83fc0704-4780-4aa8-8fd8-22632b5b6e31", "indicator--1a9819c6-0f56-4e01-ba68-1f3c1ea81cb6", "indicator--92752db3-0102-48c8-b969-247293ece22b", "indicator--66450d83-bc40-44ab-af1b-bae937c11157", "indicator--face6aa3-3857-4612-96e9-2f0e7cbb513e", "indicator--b0a31879-f1d2-4126-8a8c-e4f67f5ad174", "indicator--15ff6a57-dae0-418b-84f1-d20ff38a3919", "indicator--d03115b5-ed09-4f4a-84fc-8436c9f5a388", "indicator--8d95ce0b-d716-4814-8808-892f674940fe", "indicator--7a57033d-45b8-4925-90d2-f972b8b91dd6", "indicator--fa24c83d-29bb-43c8-b9eb-2981f0549995", "indicator--fbc7cd3b-14fe-4bea-ab4f-83da386515f2", "indicator--e8f893b5-95bc-4187-93ae-dde1700243aa", "indicator--90b65ee7-bc7c-4b75-8a18-87fbdcf44a94", "indicator--92d29679-7dd6-4785-9524-ddbe6f6cd264", "indicator--b49bfb56-041e-4e7a-80b1-28bf2436d421", "indicator--c5acbda4-4142-49fa-add6-79633e962886", "indicator--8a79185c-1af6-4c72-a58e-1cc5e949318c", "indicator--34b76ad0-c8da-4b3d-9286-e21deb7f2034", "indicator--4be2346d-d400-4659-b634-5e1430b42601", "indicator--5a4e8191-65ca-45f7-a8de-11c8048aec73", "indicator--e693305d-a9bf-4855-a291-156cd68ce1b9", "indicator--275ac058-e856-4fb4-839f-c18a8733e186", "indicator--96641512-130c-4059-8755-3b9efa49611a", "indicator--9b3cf66c-009b-4b8d-86ab-9930e0b1d8b9", "indicator--ec0f66fd-bf80-4804-acb4-c3975dc55caa", "indicator--403dc233-73fe-4771-9c45-9c3c2a80666a", "indicator--afa408e4-c246-4df9-97a9-d1fca2642f1a", "indicator--311f9916-3b0a-4512-b221-ee0a1522d1f5", "indicator--98f2d2ec-744e-418e-8f95-c841df0cfaad", "indicator--de299aa9-a4e5-416f-a4aa-b578f479b619", "indicator--11451073-0f0c-4ef6-b2bc-c4d458aeaa88", "indicator--a56b695b-95d1-42b6-a82f-7abb04f32d4f", "indicator--b0641d67-3218-4556-958f-a3f2d86fdd24", "indicator--1a1ca0ca-6812-4789-8030-93faa7df8b8a", "indicator--10f10954-b39b-4388-8cd9-6afe23a17353", "indicator--74a0c3e6-0d56-4360-b91f-7ae53e8828de", "indicator--e9407d4e-0370-40c5-a057-7e75a99d2026", "indicator--c5604ec8-6fda-46ff-8147-b7bb52b4d059", "indicator--0d408cdf-ecdf-48c4-ac71-93593f46e27f", "indicator--bec98c15-5317-417b-8152-6089d510235f", "indicator--02a02f1b-784b-473d-bec8-5d56610bf6ff", "indicator--9f5ef16d-a15d-4e31-bd91-25b6c1a76426", "indicator--83dedf17-04bc-4f13-adec-69ae1a09e779", "indicator--dc805a60-6e4c-42c6-b3e1-b7fd04bec7ac", "indicator--eb6d0074-0049-4af1-9518-3983e92a0f45", "indicator--1a30ed96-cf5f-451b-ab81-7ee6c77131f1", "indicator--e0def108-8d7b-49ec-9579-7388a542758f", "indicator--5760df65-2faa-46d6-ad20-aa7c53133e2a", "indicator--3f6efc7f-08f9-4467-a962-0206e6f6596a", "indicator--2d4bec68-6996-40d5-8ba0-72bc9dafca25", "indicator--eebb6f93-baf9-43f1-b864-155a8b25b89f", "indicator--368e044c-04b0-4535-908c-881a2f94d64f", "indicator--25a0fc65-6720-4e93-bfd3-46472e614a5c", "indicator--1a6cccf0-f1e6-456b-8547-97a35a6f3c4a", "indicator--68af63f2-db4a-4944-8b4d-6b3a4b9c104c", "indicator--df804330-3276-4ef9-b8e0-f718f749ba3c", "indicator--276487fe-5e2e-4233-ada7-2bf90da97e21", "indicator--0dfee76f-faa3-48af-a8c6-da8070085002", "indicator--3affbebb-2e81-41ee-891a-b7717242fbe1", "indicator--05fbf512-541d-46a0-9dc5-4ad1d98811f0", "indicator--a9bcba4e-ec70-4e31-8dd3-94220767977c", "indicator--0d1caf21-2645-4e93-94d5-4b0a583921a3", "indicator--f686c8bb-bd70-4b33-b57c-150c5acbe0db", "indicator--bc6cca31-ef74-4e2b-8ef0-f09c04ef4bf2", "indicator--46156a34-bae9-406b-89b2-c26c1cc79815", "indicator--51b11c86-d884-4db4-a48b-92215ccf85e2", "indicator--53478974-7cd1-4c2c-ad5e-0a14b82dfa0e", "indicator--dcea5d8a-a24f-4b30-bac8-5cc01178fc4a", "indicator--41879306-6cc5-4777-a32c-13f67e88793a", "indicator--6273836f-2516-4f49-a28e-13369ff4a8e3", "indicator--5ea9627e-e797-4e8d-8b7c-fdba3bf81183", "indicator--dc4f47de-5c1b-4ba7-a4a7-3adcedb22ca2", "indicator--3c54a0ed-b709-41d4-9545-62421bf5f93d", "indicator--fe3bc07f-9d23-4fe5-810e-56f7bcdf05da", "indicator--62c26bba-2271-4abd-9bae-fc281858db77", "indicator--7f069a2b-f834-4505-8311-a69037483952", "indicator--6e8f7374-6519-4c4f-9a7e-76f221950f4f", "indicator--b7287f07-a098-4d54-8984-ed5ed0a21c4c", "indicator--7bd003a6-e3e2-4d04-bbf8-678f18e8017b", "indicator--6d4ed55b-24bc-41c0-a492-1733362032b8", "indicator--7ce12465-9744-4ff5-a7a6-aa90ac3e5899", "indicator--8ce7f5cf-fe7b-4185-a4a0-a0c6100a5929", "indicator--37493a3b-67ce-4e0c-9d27-7828c827f1d2", "indicator--4b211c87-f4d5-4fe4-a4c7-b6a4c2cf5a78", "indicator--8f865d82-befb-470b-b03b-2663e8a3081b", "indicator--ffabd1ae-2647-4b2e-b792-acfc59803dba", "indicator--ac0fdfc4-4e0f-437f-8f84-f59f1c8bfc4a", "indicator--4e690d2e-61e8-4d27-8aff-7168912ac6ba", "indicator--fcf0448c-dff2-4c3b-9de0-95229c3d935f", "indicator--94c5f584-a516-4607-864d-36ae15f194c3", "indicator--bc7d7270-3178-4c38-a707-46895547bdbc", "indicator--e5733b2b-c8b0-479e-9511-1b0b0d9e898a", "indicator--f1965eb2-aa8b-4356-b8ee-043b691d6f22", "indicator--beb34ca5-71e7-4780-bdf2-63cd4244caf0", "indicator--42a8765e-51ee-4ce1-90be-8e8c1a5dc584", "indicator--c7d70aa4-8c7b-49c1-b9bf-07cb431c710d", "indicator--96e878fc-369d-41bf-948e-55b5679de512", "indicator--cef92651-9e4f-45ed-9915-3a988e43509b", "indicator--eb00c35f-ed3d-4d89-ac6c-579533423a9c", "indicator--494021e3-ca54-4772-a29f-ca45f640090b", "indicator--eb716ac1-7f74-4e8a-bb94-9e1c09e27897", "indicator--a25121b5-26ab-4cd9-a749-df81eb1bc66b", "indicator--2cd2faf1-9e72-4f02-a27b-d4f7447db7f8", "indicator--939a035e-960f-4886-a1c0-bce1b463ffcb", "indicator--3b650db5-71ee-409f-9edf-84908abd55be", "indicator--083231fc-f099-43f9-a621-22021495b71c", "indicator--5b6fca6a-b590-4ecf-94ae-a69994b65350", "indicator--1e94989d-9b7a-4d87-8ba7-d1ede1f02d6f", "indicator--f5e5e04d-aefd-4d2d-abd1-9fb711276946", "indicator--d11836d1-2227-4576-982c-45ea56a64e0b", "indicator--81a7a3fa-b95f-4dad-aef3-1714e4712f4f", "indicator--225ac2cf-beff-40fb-9ee4-2d6915a696e1", "indicator--fb992eed-db81-4c36-a7c7-d0db51ec0c35", "indicator--f181d5af-f9af-488b-aec1-cf9cee8d2233", "indicator--16600831-9310-4a79-922e-c58eb4a1e25e", "indicator--731f9978-55c1-4222-be8c-98e1a475beef", "indicator--69d822cb-b38e-4b83-bcaa-5ab9401102c5", "indicator--97da379f-30a1-4538-8b96-1a266afb8f6b", "indicator--cb5f8f14-2de7-4392-8f67-d8fe5f6c2702", "indicator--5aea8875-0455-479e-b2fa-9cf2e5bc9793", "indicator--98d23b3c-3ca2-4edd-ae39-fce269d76d5a", "indicator--c36e6f9a-6ff1-4de4-832a-cd03f0ba026c", "indicator--a9b2bfec-84e8-470e-ae49-eab60a3f5666", "indicator--f3b42de7-c1ba-4fdc-b133-235bf5eb5a84", "indicator--cce647f2-39b1-4abd-b03d-9440de3135de", "indicator--1e7ef022-ea3f-48df-bc24-b26626128c37", "indicator--7b21130c-3d24-4ec3-aca5-5557156e3e75", "indicator--22b3971c-5011-40c8-8ca7-8c4672655380", "indicator--214a7347-ceb2-4bf3-a038-deb773c5e6a5", "indicator--c8bb3538-a7ec-48a6-8683-bf4ea1006575", "indicator--80f074a6-5b42-416e-8fae-20da4de4a51a", "indicator--5c6bfa7d-c2fe-4d06-9053-243817311ce2", "indicator--073535b2-2f13-4748-9ac0-d78c5983f04b", "indicator--8ee9e4d7-5371-4b51-9713-1458a0a61bcb", "indicator--32866c4d-462f-4275-90b6-acb7eaeeb0b5", "indicator--e92f6378-e562-4bcc-b427-f31a00ef3b4b", "indicator--d839ed32-5594-44e3-a8ef-d80b24fcce72", "indicator--5538647f-177d-462a-b012-559e7f87325c", "indicator--03fcdaf0-1ca8-4cf5-9a27-dbe3be555050", "indicator--09f2f465-fc11-41fb-a666-54c8d66c9864", "indicator--76075010-a6fd-42fe-b9ea-a4591e325130", "indicator--c2c091e3-c0ff-4b10-98f9-194b359d16cc", "indicator--9d112491-ad97-4298-9f05-0976ccad93ef", "indicator--856ec0c3-f67f-4703-a9b0-efab56306685", "indicator--a5cc4e98-4003-41af-aa11-13425cd1f638", "indicator--68d6f8e3-c9f2-4d80-a613-9f8f1d00ab8e", "indicator--d4b4f8b2-3b46-4858-a433-72d601327cdb", "indicator--d5b78812-1a85-4f4a-bedb-9c601c7100ec", "indicator--54ddc87d-d07d-487f-8f0b-28b8eabc8e25", "indicator--2a604bc6-c847-49ae-8ceb-828e542b8616", "indicator--bddf2814-bab4-4da9-8d06-adc078f0806c", "indicator--4b82e247-0cf4-4cda-adc3-064efad70633", "indicator--45c2784b-2d7e-4c98-846d-4952c867bafb", "indicator--b2b26b3f-593c-46b7-ac67-54824f8b80c0", "indicator--c5eef81c-9eca-46b5-846b-68134ab0914e", "indicator--5e1b502a-d85b-4163-95b7-b149400014fb", "indicator--a3e16624-e950-4e94-88f2-f80965d798fb", "indicator--25230a4e-a24b-4584-af37-fd31cfe0b28c", "indicator--6e114e4b-f0a6-4c3d-8b81-4bf200a4879c", "indicator--c29a1947-18ce-4f00-ac0a-fdde9a59f477", "indicator--a8d06d3b-3683-4d67-96d8-ff838684fbcf", "indicator--a7ddc675-9afd-468d-815e-5ade53e7c69e", "indicator--643e211a-9385-4946-ad10-03b46e2e1230", "indicator--0afebb3c-7cb3-4bc1-ba1d-26d5380c94c8", "indicator--c519a297-da26-4f67-a05e-38b34f5c277e", "indicator--41c5a463-cf96-4672-ab6c-4eb6af576942", "indicator--24ebf76b-ed3d-4371-b4c9-9288e43409d6", "indicator--fb52a046-31d0-444e-b0b9-556511232c06", "indicator--03c9e786-72a2-48e3-bfbc-d8008c49c330", "indicator--187ff2ad-9cc3-4e7c-8b6e-0b8c23b31c31", "indicator--075be62f-1cad-40a9-be53-cf34ecc12962", "indicator--13b2833e-1c14-4ac5-8ee7-a236cebcecc3", "indicator--290ab102-bd79-4158-a7a2-d9f00fb49f12", "indicator--b09d37b6-3f25-4039-b2aa-50bec1b06bde", "indicator--9c0d636f-e571-4ebe-b027-8ef80ab3928f", "indicator--e875590b-b6fa-4dc6-a4af-4f3e9454697e", "indicator--d4edde83-b3de-4262-938e-036460078b61", "indicator--a9c6349c-c6ce-4972-abca-384ea0ad4554", "indicator--62c964da-58ef-4e81-9b00-c9f0bc343ccb", "indicator--abd859fb-9acb-4481-bcc8-bbbeea33497e", "indicator--17b50905-a070-4858-96a4-e250d368d1d4", "indicator--30b94dcd-f058-431a-abef-12d5f09ad3a5", "indicator--a7823ac6-4877-4324-9fcd-d30f42bee49c", "indicator--a6ffc5b6-217d-42f3-b349-f64077b6dc98", "indicator--c3e83d49-82d0-42e9-bc96-59fe2c775af0", "indicator--8b9f2804-dafa-4fb4-b246-ed5cc3d700f9", "indicator--c1e80320-fa2e-42aa-9967-d7d0ec18fc01", "indicator--4696208a-0d2c-46fd-9f7e-de02f76f95c9", "indicator--145d6e51-ff12-4f8c-b1ac-040065b74ec7", "indicator--a3e551cc-74ba-4c7c-8a2a-730216bbda6d", "indicator--52db9ac7-326f-43a3-85af-0d01949e8a54", "indicator--4f438c01-ca5a-4662-9b48-8a29c323e582", "indicator--dcd29b42-7ca7-4005-9bdc-ac683589e922", "indicator--c5ecbe13-6b7b-4a3c-98f6-406ae66184e0", "indicator--e415df2a-1e95-4c96-9f00-a9f4baefdb1f", "indicator--47579b4c-7c4f-4e16-92b6-60e0978d9fef", "indicator--b5ba21ac-fb5e-4626-b0dc-139a0dea595d", "indicator--38aef17b-5f34-44ea-87ff-14e0c08ce7f6", "indicator--2dd6f450-1f39-4c4f-abc0-863e68b3fbca", "indicator--6062c9bf-15ae-4b68-b8ae-b5f0c5699c19", "indicator--e6d3a9f0-534b-4e07-9320-57f22a7ce6d3", "indicator--febb99fc-2ca1-4065-8eff-65ded1f46911", "indicator--81b16f26-7892-4bbe-9af0-25bbbc58544a", "indicator--3798c906-7fd9-4604-945e-786bd511fb9e", "indicator--b588cc05-c18a-4bb3-9ea1-08bca04d5a6d", "indicator--90d4cbb8-9dca-44b3-954d-24f6dcf0005e", "indicator--9684569f-5b47-421d-a246-6a2b73353f9d", "indicator--63d392c0-f3c8-4d1e-a189-0f7e9f6a834f", "indicator--bc6c732f-383f-41f7-9db9-c8efffa56e45", "indicator--85661527-d8d2-478c-8394-1c0bc3969911", "indicator--932f486d-ce35-48b5-a143-f9b262c1097f", "indicator--0a46df9c-6ae6-44c8-ac6b-71b37583d645", "indicator--44570bb2-0721-484f-b803-86d35892672f", "indicator--7fc6cf61-7509-4c4c-a0dc-dde91ee9139c", "indicator--e4c0f2c7-e2f2-4203-bcb7-94bd57dda6b9", "indicator--3522770b-a407-4d37-89ac-2818aca061ae", "indicator--5216c09e-8842-4973-a225-bbbafec88963", "indicator--bec716d7-d8ca-4ef8-b2a8-1bb383ee1460", "indicator--cbcf676d-0355-433d-aeb6-4be18b965d68", "indicator--6e00679a-2807-406f-810d-9cd8a9b0ecff", "indicator--e4d7ece2-86c9-4b0f-96ed-bb87f17d2d7e", "indicator--fd94e220-6b99-46c6-be7f-07afdf3cbeb9", "indicator--8135398c-ce9d-4b6c-9766-e3380895c0f1", "indicator--98317371-9756-4769-892c-06b74248f10b", "indicator--656a507d-80bd-4802-982a-df9bf7c33dc0", "indicator--c07eede4-f35c-4bc9-af4d-ef0bb7065b10", "indicator--8d50696a-2e60-42c7-b2c0-1ea9630f2e7c", "indicator--d0d0f2a5-6174-4284-80b9-fb606f27e488", "indicator--70e3b724-1e53-478a-978c-74f1a1f06aa9", "indicator--904eedfd-ab0c-4e5a-b806-1f28ad8da5a2", "indicator--d934f455-9c05-400d-8ed9-098269f92cf1", "indicator--d72112c9-f9a9-4013-986f-8ccef9bab98a", "indicator--244d5351-32a3-4134-9f09-4077e9feafcb", "indicator--ef4af0de-2a0e-403a-a1cf-175517d493f1", "indicator--e6cd543e-31ff-47bc-91b7-cc1fd45add55", "indicator--cfb4133e-af29-4518-b923-b47015d85596", "indicator--be0eba19-750c-41c5-aecd-6cf942493ba9", "indicator--790abfb5-0c6a-47c0-8c4e-35eb99f9c634", "indicator--5419fc6d-a1a1-495e-b35e-abad902e9d55", "indicator--c1962263-fb52-4d67-b778-056c01925a80", "indicator--942107f3-de1d-4745-8288-945d5f604988", "indicator--39e94419-5796-4ec1-9001-174123469eeb", "indicator--73770096-61eb-4944-9e06-94b7090a8fdd", "indicator--9e2fbbf8-42e8-4c60-a325-3532cdc7b83a", "indicator--e243a3b6-2a5b-4363-84fc-3b004668da65", "indicator--14b475dc-af05-4007-8c84-2270817f89f4", "indicator--7d3f2272-932e-4df7-bdc3-f4a4d5048f3d", "indicator--f95b119f-7243-49c4-ae02-3b9afc54375a", "indicator--4017a4f8-cb84-440c-aca5-bf14d669d8d4", "indicator--34018b02-aeba-45de-b4a1-ce0cde65c1aa", "indicator--87de051b-85d2-4624-9b1b-f2cf87dc1a3d", "indicator--f693e04b-8b2d-4805-9477-fd564cdf8df1", "indicator--b59147ae-8d97-4676-8212-0ecc09ca2c34", "indicator--de122628-40e0-4743-8283-772f0ddb1721", "indicator--f90aacfe-d58c-416d-a06e-1658b9567f57", "indicator--b0dbd517-27ad-4a2d-8908-c6c2477b571f", "indicator--34e1b53a-1f61-47c5-af80-600ade6439e9", "indicator--7d378f52-5b7d-477c-8eac-b605c30025fb", "indicator--c39fa3c0-135d-43be-95d1-59c04c49adc5", "indicator--4f7dabd5-59e0-4900-bd3c-68a7808086bc", "indicator--ddf50f2c-3362-4bbe-81df-b5441ea7e877", "indicator--cfac697d-ee52-4023-828a-26659f5c3674", "indicator--5ec95af8-fbb8-478f-90ca-eba0e74ef5d5", "indicator--21e76b3d-0fb6-417c-bbf0-52cf8fcad881", "indicator--b8f57beb-f8d5-4d29-a00e-4b1ea26ad539", "indicator--a7619296-cd3a-44df-85ef-4ba30378da6c", "indicator--7575aad8-ee91-4d7a-91ac-825b3ee7218a", "indicator--5aa0e1d2-e276-481f-903b-b86c33bf6851", "indicator--2a724b5f-f002-4099-96b8-e9db46087002", "indicator--fb1cc857-2920-43d1-a2b7-bf810b858518", "indicator--b79fa72b-640f-4a98-ab62-64c33ae33804", "indicator--60fa18dc-305b-43c7-be00-7abbb2c40640", "indicator--3d054bfe-89c2-405f-a2ca-26e680d0084d", "indicator--d6aa3e1b-7565-471b-b28f-3111f020ab23", "indicator--76328400-a4e0-4427-81d9-ecb8483fc24d", "indicator--d827efc5-b56b-47e5-ba9a-1bc6622e0d6d", "indicator--35c96e90-ad71-4c68-9a6a-8511a6cdcbf7", "indicator--93ecc386-741f-4dec-8e44-54b6e383b5f1", "indicator--50becaa6-c70e-4614-8e10-208bd2c7fb05", "indicator--feef491f-bacb-4542-959f-1c82dbd93e2f", "indicator--4a67f186-3063-4222-b4fb-fe2fb0c93df6", "indicator--caac575c-2333-449c-8938-4fffa9ba4474", "indicator--46d1eaf9-4ced-42ce-acdc-95c66363eebb", "indicator--2dedc0ba-fc2a-4605-80e8-fa9514c2263f", "indicator--0a4c5399-66d7-4345-9cd6-0cacd09abf9a", "indicator--b05517ea-66e7-47bc-a373-78f45a38a24e", "indicator--bd65a3b3-9afc-4722-a5ce-fb65d5695d2d", "indicator--b319581a-84a9-4b58-9517-c6e038effd9c", "indicator--463ae3e1-62cf-4d21-8b06-28a4cee07a7e", "indicator--0f5b7e7a-03db-43bf-bebd-650ec230a167", "indicator--b3383100-951c-4571-bff0-97ef4038877b", "indicator--393905d3-88e1-4554-a2bb-fbde1025ede0", "indicator--3673794d-bf49-4a29-9de3-1131a93a27b4", "indicator--d2cfaa9c-b8b3-4d10-8422-d6aa9f77acb6", "indicator--c3837d78-08be-4650-aee9-45912342d22c", "indicator--d107e39f-c0f2-4bb4-b3a5-2423315c702b", "indicator--64b39f47-4472-43f5-ac78-5af8d19712d9", "indicator--ec2ee105-a8f5-4e49-8c84-86d846ef6c95", "indicator--14500ad0-39dd-47e9-9701-680f522dec60", "indicator--15852285-d497-46d7-8792-7c0f6f167c5f", "indicator--cc623c66-c056-4424-9e8f-de4779cb4d2e", "indicator--18ee6770-6906-4e1d-b01e-eb053b0acdd1", "indicator--b028624e-962b-4993-a8c2-8b8a1499ccf8", "indicator--60b77dda-eda8-4710-b864-720aeaeda58a", "indicator--138029fc-c17d-43a9-ad3c-445d1d459814", "indicator--55105496-d46f-4745-b340-5abf5f7f76a5", "indicator--38fd1a70-0b96-4d77-ac03-0fda82431576", "indicator--d10fa130-38b5-4ed8-a46d-b485fe0603f1", "indicator--0b433ca9-09b2-49c7-be40-1ab104483734", "indicator--b439b575-0c34-493b-9c8b-3134be3f157c", "indicator--3b0dbd2e-5dcb-41b1-98ac-ff12469f3600", "indicator--703bffe1-a7e4-4971-bb5e-fbf765b50d7d", "indicator--bebc0d35-1dd6-4ccc-82b2-e09d63a4dd9b", "indicator--79f2a743-8d12-424b-a9c8-d3ef899e7562", "indicator--0ffab846-0363-4122-8e30-5512db30d918", "indicator--210f160d-3d4b-4344-bac4-458d4c7ebbc0", "indicator--b02109c6-1714-4377-abcf-c2a4d8b07821", "indicator--3b668e8b-e818-4ade-a0d7-17ab0958eca5", "indicator--30bd3b29-fb82-47e5-9e20-6bc034f56262", "indicator--bd003a9e-8c3f-43af-911b-e0ae4b12855d", "indicator--bd3f288b-7898-4abb-8cd7-fa6bc172482b", "indicator--a84a68cc-c886-4f9b-be53-3bc34d467a32", "indicator--58ed7c22-526e-4e57-9e46-b2ead3fbc479", "indicator--1e2892f3-f633-419f-a167-983cb733d824", "indicator--74c81022-3937-49b7-8c9a-43515c8c6052", "indicator--3bc54ab3-25bc-4ac8-bdc8-4ac009481a6f", "indicator--ccd2c65e-2e4c-4710-92f5-b08e1803c555", "indicator--ba61268c-2f10-40ca-921c-336e8e4c4e7e", "indicator--fdb256b6-3182-42a5-bc60-0097e5ad408a", "indicator--927d557f-e24e-433c-aad2-8bc1c49d6f60", "indicator--bc3bdbe6-a497-4dd7-9367-b04a215afd0c", "indicator--3b62e78d-19c2-44bf-9db0-ea0e757a919c", "indicator--5139d553-ef8c-4037-82f9-222da20ae579", "indicator--4a82307d-dcba-4b6b-8e52-0a1c20d09984", "indicator--75ed4d5f-85e9-4aa4-a72c-a50eb618449d", "indicator--eb7780eb-5dc9-4fb3-a9ea-6e7d1b714e3a", "indicator--c15762d8-32a8-4ba1-9bef-48374986e546", "indicator--a80743a8-fa33-4be6-891d-c4bf124eda7c", "indicator--4c4a62d2-852d-4ea9-b74e-97280e4b9926", "indicator--c80419ed-4ee1-4774-b5c1-0d68ec617687", "indicator--397e5b79-0175-472f-b328-96c0995358d6", "indicator--0df1ef84-b771-4325-81b9-7f75b0fd3966", "indicator--5a094fcf-7b4d-4b45-9989-0c2e2e88b26f", "indicator--2be9f85c-c134-44af-8150-e120d3d51014", "indicator--4b77b65a-fa2d-4439-b791-c7b9fb853610", "indicator--bbe873dd-0834-4793-ad85-7f52e433cb9f", "indicator--3f9c5535-5b81-4f7f-9fdb-84bc574b48dd", "indicator--67acf13e-022d-45d1-ae22-276529fc2530", "indicator--2ebf9f3f-6e0d-460c-b9db-ca0084056b3f", "indicator--00daabf7-2b93-4d6b-aa54-01c6dcbdd9e0", "indicator--39a38af2-8f98-4331-96e2-c7a82d4ff5ab", "indicator--4ffb972b-141b-43dd-9361-bedae8798a89", "indicator--6534c7ca-ec35-4077-827c-a7e8db2b8d03", "indicator--8abe8bb1-6a0b-42b6-8ebe-75760786857f", "indicator--56dd7f37-4a68-45ad-87ed-c1f2668f7b27", "indicator--2bec64ad-1183-4892-aa32-4971cc1e4cc9", "indicator--5fd6d625-57b6-479c-9de8-8486187c748d", "indicator--ba8ab69f-92d1-40cb-8238-168dc4a79027", "indicator--6bfbe848-c073-42b3-a69b-2974849ba7dd", "indicator--e3267daf-d245-49f5-a50f-5408948be6ee", "indicator--a59d2ef5-98fa-48cf-a558-1ee69d3a1aa7", "indicator--e0a2f563-3bb7-449b-abeb-2ea0e85b574b", "indicator--8c015db0-8379-4a42-b64e-5f78644b698c", "indicator--62d345b2-d5f8-43e1-8fed-3dd16c3cb468", "indicator--bb34fff3-b89f-4818-98fa-a00deaab49b8", "indicator--a35aa8cf-40b6-4c3f-b73c-0cc60bcaa666", "indicator--5662af07-667d-4ae1-a05c-746608525d46", "indicator--e9d58b4a-4d21-46e0-ad96-4ed9b0db2e33", "indicator--7d9bd870-8a5c-479b-ad36-9ea5d7cb1d77", "indicator--e8b35670-8acf-4d17-90c1-e28704448b3e", "indicator--0739b1e4-8052-4123-9701-fcc7c99ee5bf", "indicator--ea2c1ea5-5176-45d5-832b-bb10402965e3", "indicator--522b9cf3-0f00-491a-9b9d-8b78a31398f8", "indicator--285f01a3-b547-4943-8ff4-ef0dc4d3981f", "indicator--0e64ac49-3746-4abd-b95e-58c5051c5d32", "indicator--aeea88ac-2339-484a-b1e7-61587d9e62fa", "indicator--50ed57f3-8b59-4db9-a3eb-eb7f13d62947", "indicator--a1bb873b-4613-4f03-a6c7-fc277a9483b0", "indicator--31df7738-cebb-4eb3-b470-c0a4d17e6169", "indicator--159f9fc9-430d-4ce0-8e7b-7916328c7cd1", "indicator--d37fec48-0091-4b91-bab1-f96d3829270c", "indicator--d646bf90-071f-4b02-9eb4-9e20ba570796", "indicator--654648e9-816e-4b14-b146-833b2fdf5794", "indicator--db6ed826-96f3-44ec-b4fa-6a57e4f15f83", "indicator--28d1c53b-01f0-4587-a5c3-2b30d2d40f71", "indicator--1fa33f7c-7381-4ed5-b0ae-796020fcf7bb", "indicator--941ed78f-1df6-483b-9396-eb04dc25e73d", "indicator--f080bd16-49c5-4727-8536-ab6d494deed0", "indicator--9323441a-420f-4dd5-aafe-1ad1872972cf", "indicator--d94487e4-5f4d-444a-b731-b99253e3edea", "indicator--4db4eb81-f5d5-4089-bed6-05d544ecbc80", "indicator--3eb61795-e3ba-4d90-91dc-737df32443bb", "indicator--d33861f9-1a76-4d71-8710-2708ebef4939", "indicator--d576130b-75f9-4732-b621-9ce2d9c9eb39", "indicator--aa9491e9-4394-48bd-9c57-afd8af1d8c00", "indicator--957a6918-5c86-4313-9888-32afe5f6282f", "indicator--4d18052e-c0e4-4fee-8015-e1c78d9e44aa", "indicator--c8dd5ee8-4bf3-45db-9bdc-334104e8f546", "indicator--7948a435-b65d-482c-a2e9-36f49c1c6825", "indicator--ec21f7e7-a6a7-4bdf-a37c-9f97a25cd3fd", "indicator--d82c5a40-7180-43a4-82e8-ff038866e4da", "indicator--c573ec63-0d0c-4128-aa22-7e4e060321cc", "indicator--b3e11ff7-7f7b-4cb7-b448-610d93939369", "indicator--668c9a9c-a205-4f47-be9a-05023dd45a02", "indicator--6c1db450-c8d4-4e76-a7e0-8a6d7be37af9", "indicator--24271e9b-8755-4230-81b4-4a2d0d3e0aa7", "indicator--3dbf67c7-9d70-4ece-8b93-e765d6c26527", "indicator--96274088-1294-4ea4-893f-199c20b54895", "indicator--ca78668d-c36f-4c84-8238-590c3c30c6fa", "indicator--05c2491f-5aa3-4da4-9077-ad872d58d371", "indicator--4df3273e-b6e5-49da-bfb2-152204baba9a", "indicator--b18b6767-7b4d-42c5-aa6f-083cebe7f662", "indicator--68410733-8edd-4a42-9cd5-ca1c7af9b5a3", "indicator--bb001a53-a34e-4616-bd52-46b9a6c6e5f1", "indicator--737988d9-0f50-4d88-a8b4-e58e29ca8245", "indicator--77893097-e141-4e17-9bdf-d84b5a65da31", "indicator--10042c21-62f7-4aa6-a396-a2936342f871", "indicator--e5611940-4025-43ec-bce6-5798c181569e", "indicator--5485108d-e07c-4f60-9bd3-8a2cc7120cbd", "indicator--76b9c6db-a4a4-41fa-8cd4-d206cb88b698", "indicator--3abbc243-8492-41da-8b8a-31903c6c5395", "indicator--3b065a16-26de-47d1-a011-118a2ecd8cdc", "indicator--512bfa16-c1ca-4f71-9caa-46280743b354", "indicator--d24f3bdf-ead2-463f-bea2-01476e83630d", "indicator--a4034d6c-978a-4d85-8049-0e6be9e2f7a5", "indicator--16cd4156-1754-46cb-8795-46968438f918", "indicator--42edf61a-6e74-40d7-8aac-cb87505537e5", "indicator--2a868e35-1c2e-450f-9a2f-0d02258e3cb0", "indicator--3ac8b6e5-eb47-480e-b34c-75d51ec2f8b1", "indicator--642d8558-d0a4-417f-a373-0318628da828", "indicator--fb841b6d-193d-4017-b081-99e41fe6697a", "indicator--a7ff571b-2ad3-4d5f-86c0-1b573e83cc30", "indicator--51eb6ca8-cec5-41a3-b846-ac2c895df832", "indicator--fa17c628-ed99-4c27-95bf-d76c5d3a8905", "indicator--00b8ee2f-e665-4d5f-8b23-26e2ce067e1a", "indicator--7c69a607-d188-46cf-840a-a7f926ad62a6", "indicator--48d107a4-1d3e-4933-bf9c-6db4f0f99f95", "indicator--e38ebc67-a304-415f-b192-76324030a3b1", "indicator--9d2f858c-d61d-44c9-9ba0-a363fc0137f5", "indicator--8bb12c56-b7ea-429c-a8b3-8eac44795312", "indicator--abaf5406-3832-4889-9d3f-f185c223b031", "indicator--d80a6ca9-4d20-41b6-b4a6-b2d475f1d054", "indicator--8f3789de-8e94-495a-aef6-a8ee6489fe24", "indicator--c9cf7a1d-cea1-477e-bed0-403680dc8598", "indicator--22187781-64f3-48e3-a5c1-7b129513898e", "indicator--cf71931d-1a3d-45fa-8d62-f1069eeb80ef", "indicator--ac11c8bb-2fd8-4086-9ee6-3b006495bf3b", "indicator--dbae8147-76c2-474e-8e37-db433a83261a", "indicator--7d8c763b-2589-4550-a8c8-7bbb55e0c199", "indicator--a2cc88d3-fbeb-4a50-93e9-753daa98af27", "indicator--1421d3b4-b216-48da-b0e0-df4ce75c62ce", "indicator--076e9ba2-53ab-4e40-8997-51106f1f75d6", "indicator--a3a55f62-bb4d-43e7-98fb-946392c7f96a", "indicator--32e1a894-4de8-407e-8ebf-b38bf4662651", "indicator--e8fca5b2-273f-47d0-b6b9-f0df1914f875", "indicator--26b8408a-1a93-46d4-9d29-d5e1ef782680", "indicator--46655bb1-835a-435f-83fa-4ebfbab0f89a", "indicator--40d29756-21d6-4d96-bf9a-efe52ab46d16", "indicator--cc4beb08-a131-4a59-b49c-8335da0ab23c", "indicator--2e2b0aad-7986-4bf4-b4b4-9bebf72c34bd", "indicator--9e681347-73ea-4604-b751-f1ad5cbf2875", "indicator--bea57ec8-45d4-43ba-ae61-06a649b6e0e6", "indicator--60d47868-7523-40d8-8f2b-2978be882a57", "indicator--34d532a6-ce36-4410-a07b-cfb5fa7a1b88", "indicator--8a8c1b2e-53c5-4115-b494-f28040a05a1e", "indicator--09f442ac-1a6a-48f8-982f-6616d0d4ef9f", "indicator--ef0a95b7-42e5-4afe-9888-b7c135f82787", "indicator--2aa20bcd-5d51-44c0-88dc-284d244ae522", "indicator--be37b0e7-d006-469b-a280-935054e61f85", "indicator--676f2a4b-280b-4a43-8b90-ebfc56164027", "indicator--9d5fa80a-c2eb-4b33-b615-7b6f16b4f99f", "indicator--edfc391a-eae2-4fa7-ac66-e613c9d5fa76", "indicator--82b9909a-dee5-4013-82a1-ccb1fdebd21b", "indicator--1b609500-a1e2-4b1d-9bec-d8f4a478a7f3", "indicator--9dfdfc3a-d4ee-4c73-b403-a3ef2d899c11", "indicator--0a853c40-0930-4b55-92b7-46e3fd01f3f7", "indicator--584d81d2-7165-4f0b-8051-b8f4acd33470", "indicator--68c60e42-c826-48c5-b429-5125904fd738", "indicator--fc495b7d-b394-4925-a283-0182d1f6d331", "indicator--656c6d85-ecba-4060-8077-d40404e2d753", "indicator--89f3dafe-a923-437d-b455-e4933de3fa4f", "indicator--6c7e7ceb-9216-42ba-aecd-6c93d78b241f", "indicator--7757014a-3d77-4f33-864f-fa4085c1245d", "indicator--2a0b83e2-c672-42a7-a503-3ffca0735aed", "indicator--466aefa6-cbae-4d62-a302-03a108d96188", "indicator--b789e8cc-cb6a-4245-a679-b72b195fd16b", "indicator--806199d1-fca1-46d5-837d-0da283f1bcd9", "indicator--b66fd6c7-8da5-40e2-8ccf-5cb2533ee498", "indicator--9adba267-96cf-482d-883b-713d76425847", "indicator--edd8b93a-2c1d-472c-aad0-5533e4911883", "indicator--83901acf-d464-4617-afcd-ad1ca8128a18", "indicator--e5a43e53-dd5d-4ad7-99ab-d987890ed633", "indicator--1b6f8842-2722-4dda-a7b5-4bced0f29602", "indicator--70fe1361-1cff-43b1-8fbe-8c4c1cf4c1ec", "indicator--d9df2598-e60e-4c6d-982f-11ab03d778a5", "indicator--fd8327a8-583c-4348-a5de-ca7436e7cd85", "indicator--bf49450b-f681-4c5b-8f9b-5386b6d49a51", "indicator--c7147319-742c-4f47-9e80-f637c6bc1989", "indicator--e0582e21-6308-4ac5-8590-5429ceb3e255", "indicator--79734622-76c6-4449-b37d-51accf0e491b", "indicator--369bd816-de81-4195-8e82-4ca4c81449bc", "indicator--96caf775-f937-49f0-b44e-86410c85807f", "indicator--e3524291-61cd-4e08-a636-ba7b8de6291b", "indicator--0a823fb0-4555-47f7-802a-38b35f46b5a4", "indicator--fa454ccc-b28d-48e9-bef4-e905d81d32e1", "indicator--0c6ab6ed-8bf7-42cc-839e-5f621c39ca08", "indicator--da69f686-f336-4b54-b56c-aac28d28a479", "indicator--71fd2ddf-18b1-48dc-9a5e-228f029c1689", "indicator--b0c49f7d-d039-4c30-94fd-4fcb35be125a", "indicator--3c9ca6da-b659-4547-9fed-10c8e224d3a8", "indicator--9b0351f3-9d18-422b-ba59-b5dcf91388f2", "indicator--8ad1e276-1f13-4529-b8fd-5094f30d49a2", "indicator--69e47086-00f5-4780-bc67-8a8194e0be0c", "indicator--dac7fe23-6974-4719-8c41-a5309154c386", "indicator--5e21a06e-20a4-4814-a617-4bedd16c4176", "indicator--530e83c2-df8c-4fe9-ba98-4d471bf6ce95", "indicator--77b3e5a5-9c1b-4f5e-a451-480b08e45209", "indicator--1dd4f493-b82f-48f6-831a-43d2bfc858c3", "indicator--579bede8-973d-44cc-9447-a8d6f2e66b15", "indicator--8d030f46-492e-4f53-ad4a-dcddceec518b", "indicator--2bca9965-9bee-47be-bf0b-8ab3e924da8e", "indicator--669ad845-cd69-4981-be41-8deaa614aaf5", "indicator--f77216af-1422-4979-b57f-f8557d0ce28f", "indicator--992c269e-2794-4e93-8ea8-a4d9d349cf08", "indicator--54a3c7cb-2495-4e60-8bf2-53f17b8d246a", "indicator--467d4ede-0957-4de0-a541-74156d3950e4", "indicator--5fcdd8ad-d503-406d-a54f-7455e2b428e5", "indicator--f31a1f53-2d64-41d1-92e5-9218ae56055c", "indicator--834afc3b-4504-48af-9dc9-97e5524d6210", "indicator--7caea0a6-d581-4f68-82af-ad0685ddb377", "indicator--a1d36f54-7cc5-4c17-9046-09394ca247ed", "indicator--e15e2ecc-8b27-4d6a-8b11-3a33c0eecffd", "indicator--a6830746-5de0-48bf-980a-2abe0e6e0578", "indicator--3701174a-884c-46f3-a2eb-51a54d4f9cac", "indicator--ffdea915-7176-4f3d-8b68-159ce1e7fe7f", "indicator--1eaf1202-3538-4a0d-a517-6deb10ca6ef9", "indicator--3f91ca85-60a3-4e2c-aa8b-666fb3f8a3ef", "indicator--d8933982-4fb3-48e0-902d-cc37a2c79f4a", "indicator--ddaed51f-783e-4a2f-9b4e-c9f4802d556a", "indicator--039ac549-e35f-489e-8725-9f9e0a76c95f", "indicator--c15ce3d6-9412-4145-a9e9-314c58d1b141", "indicator--9e1b09e0-d91f-4e3f-82ed-da15bd0708af", "indicator--05eae179-feb4-425c-98d2-a63a94594511", "indicator--1f55f758-ed61-4f6b-97f3-6faa5c554fe7", "indicator--7e61a779-e16c-4522-81c8-88e223f90028", "indicator--1982cc59-f335-4a88-96fd-9ca1f1ee455b", "indicator--ea348aaf-b2db-4c4a-b358-81fd1dc77c00", "indicator--498affa5-67fd-4eb4-9862-0cc8b15efee8", "indicator--987cd1fe-cd99-43f9-8ab0-185b9e9c32cd", "indicator--03f52ca7-fcda-47d7-ba40-9bc8990cd437", "indicator--c8540d91-d28f-42dd-a5cf-1056e84078b6", "indicator--5c25954f-c43b-4ea5-9513-a20a02c2507a", "indicator--c283fb34-4032-4185-a746-e2b3af20e090", "indicator--497e2794-5acf-408b-ab6d-868ad81c46db", "indicator--84524377-2d94-4761-a0d8-ab0797e534e1", "indicator--f19a2ec6-fd21-4bc8-9dfd-518a087b7363", "indicator--4587f2ac-86b1-4877-b8e1-5ead8fc5a2e5", "indicator--b032870a-e8fb-4259-8ae1-6044e610a581", "indicator--7929f141-169a-4839-b662-64e97cc2c6e4", "indicator--81b45275-36a1-40f0-950a-7f39329a11d3", "indicator--221c763c-45da-45a1-9fd9-c44a286c9e64", "indicator--d47cce08-7e03-4cea-acaa-c9e245426d08", "indicator--0860b3dc-0e15-4998-aa71-3ede52a5db83", "indicator--23c46e61-7592-4e1b-9edb-085269e8ffc2", "indicator--d3f3edf1-4e60-434a-b86e-d60acf557e6b", "indicator--0f43a400-c083-47d9-a5e9-613672b6a27c", "indicator--971f778d-12ea-4d92-85c9-fab134357ebb", "indicator--d3ef039e-04e9-44a6-b7f8-76d27c80684e", "indicator--37987edd-a2ca-4079-8d93-da39f1ff1660", "indicator--74c35af0-2fbb-4e65-9cf5-8b7621e0f4e5", "indicator--c077014d-ce00-44d3-aa82-8e8e243e77b7", "indicator--9ad4a885-f61e-49de-b519-1f688bc732c7", "indicator--263826b6-d355-4f49-bfb7-144faead6c08", "indicator--b9e6a5e1-4d77-4188-b8b2-4311546322ce", "indicator--7ea0d443-1d92-412f-abfe-a05508f376e2", "indicator--0ce63bba-ef8d-44ff-ab1e-730c84c4c933", "indicator--e03301af-7761-4a82-b7a5-2655e2a39ed1", "indicator--ae41cfe5-1c22-47ce-bcfe-a1a8ab2c44aa", "indicator--2b1272ff-c0e6-445d-8070-edece7230e3a", "indicator--99408d8c-c5d6-4006-b4e2-3243045c7a94", "indicator--323520af-9d93-4889-937d-6686c209e9dd", "indicator--0f04a57b-3de9-4b7e-bdbe-0f9634bcdd23", "indicator--e6b39a41-fb0f-4056-8457-078e530fbccc", "indicator--4a1d9c68-783e-40c7-8ae4-69f6324628f8", "indicator--65af6850-cf5d-46f3-8b5c-f13fb5d89b76", "indicator--36ebb858-0e13-4e40-9cd9-747dcd614588", "indicator--5eb333c9-6459-4862-92b0-ef86d57e33b8", "indicator--6a5ecc5c-a0da-4090-86ba-b56f21bc4671", "indicator--b4e2181e-cce1-4e47-a198-1e5d9ed9248e", "indicator--3ff225dd-0e74-4b9a-a363-2ae0966da5d2", "indicator--a6b79644-00b9-4123-a461-28d584c5e681", "indicator--cd50b22d-e462-41e4-9b92-fb2d75f7bf1f", "indicator--3be6e8ad-7f5a-4c43-96c2-5d00ddbd54c5", "indicator--04c51c0c-e0a7-4db7-96d4-0960c5a045ad", "indicator--dd28482c-6dcf-40b5-8936-283fc19d5184", "indicator--5233c051-a9a7-4c48-9f4a-18d5847dde20", "indicator--846f36a5-2076-4957-91a5-824f96f60ddb", "indicator--df6a8610-a2f6-41d6-bfa9-bae55abc7b7f", "indicator--db1d01c6-9d9d-4a8a-8fc6-a6d8e0efb79c", "indicator--58f3ec25-5bff-4044-8def-00ab35c45e31", "indicator--b425c177-2048-4619-b4c3-4f6a5f3f054d", "indicator--8407614c-123c-490b-b3b6-c329a8f07c2f", "indicator--ea9ba870-5aea-4cb4-aecb-cb0d875b2fdf", "indicator--c63aac18-2db3-48cb-a4ba-2cc0cefcc911", "indicator--9f484710-3167-4a29-8b78-436107e54de0", "indicator--1f3f578d-9baf-41ef-ab24-3bb7d1b6c018", "indicator--dc7d6d61-3f46-4b50-ba8b-687052f2653a", "indicator--06740963-08f9-48ce-aafd-47effac62379", "indicator--cbcc60f0-9eec-466e-a980-4159ea73eb51", "indicator--67419c5a-e187-471f-96c2-68c295d7a344", "indicator--3a7a724b-fb9d-4727-a127-714112753281", "indicator--4ca1e0d3-fa9f-4f1f-bedc-9e316224536d", "indicator--20a4b644-c843-4ef1-9a66-43a8c59de687", "indicator--d1f05e3a-6886-4620-94c9-fd4cbf3abb5d", "indicator--7afb0624-a712-45d9-9d61-fc02ff77b9cb", "indicator--14ad3a55-0b7d-4872-8650-759c7c2922d2", "indicator--46779da2-0127-4000-9a58-d217431fb8cb", "indicator--92bfd7e9-e67e-4e2e-a24a-7bd60fb3697d", "indicator--897e8a10-e566-45b8-9763-8f3e2c0a9178", "indicator--e761a3bc-3bb1-492c-8485-175419c224b0", "indicator--2542b7f7-f7dd-47c7-ae93-426d05aecd3d", "indicator--82f3d166-9349-488f-a619-5cf494d62bb6", "indicator--9c484803-f7e2-43e3-92f0-335f2430c192", "indicator--cd61aae8-8abe-4609-968e-6c275ba9b028", "indicator--1f8bdbe3-9967-4e13-a113-f8e1ec6e1cda", "indicator--b289c78b-c54d-44f5-ab1a-611f8a00e9ee", "indicator--55436763-028f-488c-817e-d631b51817c2", "indicator--fa588875-5985-4735-8933-d2f0728ca5cf", "indicator--45c27480-a61a-4d8b-b5af-54dba48a5d1f", "indicator--cdee8b95-1a88-415a-affc-216a1608b590", "indicator--0eab9ca5-77bb-4a9b-b632-52f2fbecb898", "indicator--482bf53e-724f-43c3-9c2b-e78c50c6e2b1", "indicator--2cc3d3b1-6e22-44dd-8f74-3b6dd4cc5f5c", "indicator--0309beb1-6271-4a89-bd4d-f44a26ea6978", "indicator--227542a9-b302-447f-831c-f01af51b9646", "indicator--f5f921b4-2bcf-4aac-9738-58f8bd0b6880", "indicator--b54b0fe4-0c59-42b9-b7cd-e060e7465b49", "indicator--b5b200fd-7f18-43f0-b0cb-cf889ab8aff3", "indicator--93af3068-8594-45b7-83b2-6649e4929dea", "indicator--fe770dae-3224-40bf-9a4f-16b2546ebf8b", "indicator--09ede80d-3e8f-4f69-8d2b-0d0036391d27", "indicator--2413f0f9-dba1-47e1-a843-b646a5fa1947", "indicator--04f45263-25b8-453a-8ceb-00525832d17b", "indicator--3ff94223-8367-403d-9eed-0d9355592c38", "indicator--cc3d1be1-755a-4527-a55c-b9f406389c5c", "indicator--0bedfc65-f4a7-4f96-8bf7-14cb0516c41e", "indicator--a7a93335-7527-4c4b-88e2-b227d9d9b9ae", "indicator--b7b28893-26d5-4f16-9ee5-ba5879d6697d", "indicator--10358b03-8e22-4ae5-9831-af5efa4cef4d", "indicator--57e471c7-296a-4714-b3fc-0813e46b9140", "indicator--5e483cf5-a5ca-415e-b8dd-dab8388b870b", "indicator--90e5199c-611a-4e93-8970-402a95347622", "indicator--f639ace0-cbdd-4743-a494-79d1b1594ef4", "indicator--363002b2-379a-4b90-b310-9c591373b324", "indicator--72df808f-29e4-438c-879f-69fd32412a3a", "indicator--eed33821-1e1f-414a-825f-41c7e3c09257", "indicator--44718dd7-4646-4b5c-9653-2b2ca4c8a7da", "indicator--d5a2a532-b9cd-4730-a6f1-2784862c506b", "indicator--218fc4d9-9269-4265-ae22-9052e842450d", "indicator--984c0ab7-9136-4691-bb90-6f074ebd8950", "indicator--c9b4e86a-3e85-4ab4-86ad-8ab5d995a17b", "indicator--87398485-f46b-4f4b-a455-70b8d70a4b98", "indicator--b2e426cb-bb1e-417a-b12b-135966096580", "indicator--cb7801df-e1ee-4e40-8894-84198f4d5a0a", "indicator--d74934fa-66c5-490b-81b9-ce47efeca5f7", "indicator--5b5a4de2-52fa-4e52-96cb-30a3eb0d396c", "indicator--e325964d-d09a-4264-874c-5af992234835", "indicator--3e2e0973-ed97-4e4f-aba5-98cd287b8518", "indicator--43d40a61-90d1-4247-a79d-e4738bfd2aa2", "indicator--226fb687-77ed-49c2-8fa3-e0c95e582121", "indicator--da438e94-43e1-4a9e-8cbb-824520cf8655", "indicator--2fca09d4-4aa8-495c-b6c0-f1a978e18240", "indicator--326609b3-7cbf-41b4-a38c-97ec179e03fe", "indicator--ec60f5c2-2366-495b-a2e3-ea024616b1a6", "indicator--891b9984-9d18-45e3-a056-d425592e4db9", "indicator--4e3d60b8-1550-4da3-a9e9-499facecc9b7", "indicator--9e298275-dc7a-4752-8fa3-5f4a10b6d201", "indicator--93017fdb-a643-4d7a-aa2f-d4f51c9702de", "indicator--3e0db085-1e45-4412-99d3-f5ecfe4e30c4", "indicator--2e4ef9fc-1f6c-4ce7-8f15-62bf2626474a", "indicator--2edf78b7-dade-4887-b46d-d8a58b79963f", "indicator--7804cfbe-063c-4eef-b3e5-958cc4bc573a", "indicator--e2c321e5-57fc-4409-a018-a246b31c363f", "indicator--b5064336-23c3-4d2a-bb46-f51092244718", "indicator--5e77346c-4a12-49b3-b8f3-10f87b25def3", "indicator--d8881402-902f-4d46-b43c-91bf055ffc39", "indicator--974dfc02-980d-4cd1-9079-9bbb21120d51", "indicator--5d92fd1e-af7a-4479-a679-f3a623147c81", "indicator--4ee39d46-62ea-457a-9072-8c92c29463a0", "indicator--fae611cc-fb44-48bf-b658-914b43fa7b3b", "indicator--94f182c9-c8a9-4d73-aefe-b430a46aec56", "indicator--7abed393-b7ed-4910-8dbd-720bc3d77880", "indicator--cc281efd-6198-4415-a23a-fb6f1fbfeba7", "indicator--e34f4e2a-d162-4dc7-99bf-291ad5d63f08", "indicator--b28f2fbd-379e-4dcb-8326-bfafe56d4191", "indicator--ace005b4-50cc-43a8-b93a-847acad2213d", "indicator--f22e3b5c-c5a6-4d46-9ef9-a569a49f6d95", "indicator--76b2fc13-a12a-4e0a-bc15-45a4844b9964", "indicator--58170d29-007b-41f3-b54b-b5a587d74b88", "indicator--c4164d6f-069f-4ad9-bb9f-21df88df2fc7", "indicator--7526f4ce-7fa2-46a4-82c2-0d7173b0e75d", "indicator--29b74c8a-0ab6-4390-a904-22c821d34646", "indicator--5bed0c3d-b16b-452d-9f95-3e56b6f2a977", "indicator--633c6b23-4424-49ca-9601-b6c79f531161", "indicator--3687ac5e-0851-4e7f-a307-54f06bc52a6f", "indicator--f1249c95-758d-46e8-baa6-b60badfe9ee5", "indicator--6a802f7d-ff86-4bef-b3a0-d8ca0a4007c9", "indicator--ed09f4f3-5213-49f5-9a02-d41a38c6fb36", "indicator--1fb5daa6-1a78-4bd0-a3e4-31c7f9409f60", "indicator--894bff87-30f1-4a86-91af-1f210255e2c4", "indicator--2264d971-0dba-462f-bb0c-43c5532bd4cd", "indicator--16524fb6-1fa3-4ce9-b2e8-8dd14cb6dfbf", "indicator--1ee0bbf4-1c7f-4fe2-99b3-8539ee1c932b", "indicator--3122a8c3-e4d4-4022-aa1c-8f61f9d599f7", "indicator--ced908dc-0cfa-43af-97cb-84e716243158", "indicator--fc568560-3224-4438-8a14-9333e454f97c", "indicator--5068f1c3-e6be-4ff5-98fc-ab759d751cc4", "indicator--a1f44680-25a2-4e8f-b9af-e6f3e6147615", "indicator--eb17c318-949c-4df1-937e-4c4795252ed6", "indicator--eee87c0f-25a5-4972-97f8-48c7afb9f987", "indicator--45c9ed19-f6a3-4ae1-b2c1-bf06a8c389f8", "indicator--4239ae0b-1d1f-4df2-abda-735e4810e529", "indicator--7a9f201b-45fb-4f82-8d3b-a4e628c9419d", "indicator--8fc06448-2a11-45a8-a464-d72b8c54232d", "indicator--e41d7938-0ae1-412a-82e8-ddde80e6e539", "indicator--4a06f7b9-71bb-419e-8f7e-c473b78fc897", "indicator--a5e8c8be-989d-4bf6-aa55-d1ab6ed6b56d", "indicator--d3ac3a55-5435-4aa5-9747-b547cf725b82", "indicator--8a19b106-2026-4912-acaf-813535789f85", "indicator--37d01031-5ba2-40fe-a739-43e45790c610", "indicator--7d0f0d07-32ef-445b-abe0-b605e242245e", "indicator--771acf7b-ac98-4e93-ae62-0d48d02c5e59", "indicator--6dad768f-5248-40d0-be36-bf2f5da2c19a", "indicator--ff76fd00-0441-437b-a9b1-57224c82ade0", "indicator--7c970956-e78e-4daf-b53d-88de6b6812d6", "indicator--1c1da24b-40ac-450c-82e5-9dcd69cfb2c7", "indicator--0580221b-4229-4a58-a72b-5cfb802631c5", "indicator--b57950f9-e7bd-4ac4-a2d1-2e427edc9b5c", "indicator--58a868fe-780c-4087-ae98-37b2de2ee15d", "indicator--424ebd0a-67f8-4d3d-8361-5db1e2be373e", "indicator--1e0a7617-6b1d-4498-92f3-4782060a884a", "indicator--59aa1330-98ae-447a-b390-c9ec822f2b1c", "indicator--be5822e4-19d7-4a3d-8e65-420e4abcd1c0", "indicator--46690233-c2ef-437b-99f3-ef4d90320e35", "indicator--d58fa353-31d4-4178-93d8-f15b6117dfbf", "indicator--781e17a5-da44-41e1-8fa7-97658ce4de07", "indicator--916b7046-021c-46f4-8e10-97689b084943", "indicator--2f6232ee-e8a9-40b7-8e0b-0fe6aa641952", "indicator--471b7f99-0294-4854-93dd-49837b820c8b", "indicator--7079928c-d32a-4526-95ac-911cc39695c6", "indicator--18f357fe-1e76-4811-810e-237c3d1146bb", "indicator--1aecafc6-72c8-4b68-9d4c-1ff2bf8fe6b9", "indicator--ccc1c8e4-3d50-4a4c-bd61-fd6f091f5ee9", "indicator--bdc7da6a-ca51-4fd5-ad0d-bc4fa2e8e3a4", "indicator--6d3742bc-4e40-4329-a5fd-5590511722c9", "indicator--17ff3711-59d3-41c9-88a6-ae184e156305", "indicator--083c4fff-61fd-4a81-950a-3e256b402767", "indicator--ba46c44d-e7d4-4313-b37b-c7b33cb8f929", "indicator--b2431c33-546b-4a96-b9e9-89a4dc848d55", "indicator--b798edd2-034a-4370-8738-780bc514163c", "indicator--9a9e1e80-b3bb-4a4f-b0ad-f714e0475ee2", "indicator--40830cb7-22a7-4463-b0ab-c89261dfb797", "indicator--3807a00a-4b59-443c-93da-0f38f565dd2a", "indicator--d0b1a490-10d6-4269-8895-edfa65ca00f4", "indicator--85d6eec6-6711-45be-ac6a-31068a04eb6b", "indicator--4dcac69e-6597-499f-a1b6-e2371db34df9", "indicator--e8f99e36-3e87-4a16-954e-1df849a6db8c", "indicator--72448db3-98cf-45cc-9796-42fbaa9549df", "indicator--fe580061-5627-4b93-85b4-b576f5f2b298", "indicator--7b617169-09f0-40d3-897d-468329fa7223", "indicator--7b028cd3-eeb4-434d-a906-bcb75f1c54c7", "indicator--61ab3924-ee69-40ad-843c-f1406b5a2fe2", "indicator--62ebbad1-869d-4866-950d-0017f680c529", "indicator--7a24dd4f-3a2e-437b-8a05-b95940a824f0", "indicator--74305885-35ba-45c9-8595-3146ff59cb14", "indicator--0be8e011-75e7-4b2b-b2ba-d632cd8bbc1a", "indicator--51b8e1d7-c440-44c2-ba28-77c8d548e461", "indicator--b34ddf49-4bfd-435a-aca3-994d9a7e1053", "indicator--9e59644e-3a39-4d2a-a267-5b1c83c10ffd", "indicator--62e28507-5f53-4e4a-9d58-5bea8a687919", "indicator--9aef9d85-ad00-4065-b85d-d4a474dc363a", "indicator--6f2af59a-5cee-4e91-9fd8-6b060af7f4ef", "indicator--9dc573e1-6519-43ea-975d-d7e42d238dbf", "indicator--3b727c6b-0592-46fa-b77c-e0987875bda3", "indicator--d8b9e266-24dd-400a-b57c-59b3f838e5fc", "indicator--90d2599f-c51d-4fe3-83e6-adf21111c79b", "indicator--4273fd36-70da-4915-834f-098425c33c93", "indicator--b1dd581e-e096-4512-a5a7-ed6a78595f16", "indicator--f8a6ca06-bcf7-48be-8a52-01c5351e67dd", "indicator--6b98c1db-9671-4f18-a1aa-0b41395a1847", "indicator--0db309b0-4d14-4279-89a4-a92458cf2253", "indicator--eef8bbdd-f9f0-4806-b598-be822f3f58da", "indicator--24dc502a-b4fa-4763-ad2d-4811a7203a14", "indicator--5ed9ad80-eca4-4cc1-9aeb-0b07a5ef7fdc", "indicator--963e6986-c4fe-4a09-84e0-7d4e0e477ccc", "indicator--7a1aa68d-f821-4ce8-902e-266b3cd13c80", "indicator--3d7094cc-8fe7-4baa-a93b-1f23e1bb5202", "indicator--dda4aa41-3fe6-420d-afd8-f902a1740934", "indicator--d074cc6f-0a76-4945-9a49-6bd66e853fa9", "indicator--86792cdd-0e13-4cc5-87fc-0922d515de70", "indicator--e6bf1f17-5177-483a-a6d2-554a72d3a7cc", "indicator--146e423e-3544-4112-8263-08579575ec77", "indicator--1fa3be11-7bda-47a4-bc7a-4db838aa4eb4", "indicator--73d9132b-e6d3-4f7f-bc9f-f7ce0b661a29", "indicator--8061f57a-a330-4aee-b6c4-8a9245d77798", "indicator--ac5d33f4-1ff0-40b8-b70f-094d18360ec8", "indicator--f8a26f70-66d0-475d-8d5f-8e14a94b47c7", "indicator--ecec8be2-7c06-416c-a96b-a6f52648f6de", "indicator--cea76065-2f45-4afe-8639-874bd75ef0d2", "indicator--3b3f49f0-ee20-4d98-833a-ebda977b253c", "indicator--79a1d0e2-4497-4a41-a2e3-a1c8457599d2", "indicator--68310d66-cd90-4ade-a047-fc38868411e8", "indicator--687dd355-4bd0-41ef-abf0-664ca50a3a38", "indicator--946c9aed-1661-4009-b1cd-fef9b1e40d41", "indicator--23315b91-e21a-4a5b-a553-41a4c315b4ab", "indicator--93a91fff-4bbf-4538-82a8-bc9359a20e22", "indicator--a86c6eae-f0a3-4d80-a087-62cb60b27ef9", "indicator--6bc52b89-b66c-47af-a5d6-dfab8a0708c9", "indicator--51f1e423-37fe-400f-b73f-b7623e882c98", "indicator--8c782b04-5a26-4bff-b791-a9ba3a3276f9", "indicator--dfbed7b0-8eb4-4ff7-8aa0-dc55e08a4fa8", "indicator--b2139a33-c59b-4cab-be9e-eadd56308865", "indicator--82bf8255-cd81-4aa7-a643-b080d336862a", "indicator--116eb1ad-6fca-4aba-b720-de4f740afc8c", "indicator--bc07a1f3-ecb8-4a3b-85dc-3dcfdaf803ae", "indicator--2d1c6039-b176-45e3-8299-2ededed5c1c0", "indicator--151523ac-8f70-43a9-abe8-247e3060db1f", "indicator--b2db617b-c553-4af3-98a7-7dcc73bdde33", "indicator--d909a9ff-9cd9-474e-85d8-9619605a279c", "indicator--59746f9b-adda-4b7d-b6e4-c282f3ce9a7c", "indicator--1a878207-275e-48d7-b404-b8aeef3fca9e", "indicator--ff7079c9-d47e-4276-9ada-4eaf14245ea4", "indicator--d96ecc36-5592-4046-bf9e-d268c7155163", "indicator--36ca4e57-7580-4b78-8649-68f46fa75c58", "indicator--5bac62ac-e7a6-4861-9eca-a37a0b1d8dc8", "indicator--1cd3fefd-f0ee-4273-8972-af1b659c699c", "indicator--74701794-8c1f-40b4-9d86-dcbaf193f0d0", "indicator--3c777c53-2050-4045-b286-8c238a30da18", "indicator--d3a312c4-9632-4733-9d2a-85d01a37f428", "indicator--6647755f-15a9-4127-8156-12392d030c07", "indicator--300fb296-ad30-4205-a7ee-02cc28318af0", "indicator--f54bc742-a695-42d1-a9ea-a08c289d2e97", "indicator--c2834d91-5806-455a-849a-19f8b9d93500", "indicator--21c0cf44-e346-4d41-8172-3e061f4e2471", "indicator--571ddc5a-6ba1-4e8a-87ad-8ba7de4df287", "indicator--e639c2d1-e356-44d8-8220-e1f09eba2000", "indicator--2f30150a-0d94-42f5-8334-743f0969648e", "indicator--697fae0b-cc82-4e5c-8f7f-03fdaf97c01e", "indicator--cd452828-cbd6-4f8e-be85-0b4469666f70", "indicator--4023a803-c5a9-4aba-a961-542f10619d6c", "indicator--5da03762-a475-4217-95c6-d2e47c6c3777", "indicator--af62598e-4002-4fb4-a907-a9c6474e02e0", "indicator--b3716e36-29ff-46c1-9882-a6869333d570", "indicator--07eb089b-e05c-44ac-980e-7e134b66bfcf", "indicator--95dcd10f-2807-4b3a-b3be-c2739985e32e", "indicator--18214d06-9bde-4161-a0f9-7554f7673ca4", "indicator--ad8a8f34-92d3-481d-8bef-37f0b52bcd01", "indicator--8e282697-17e6-4102-b037-f2aeae326eab", "indicator--6136aba8-e967-472e-9030-75aa252ee4c5", "indicator--6774ac36-e81d-44f3-810b-2a05ee13c07b", "indicator--36e2a026-45b9-4003-a031-35f176a76181", "indicator--cd2dd3fc-4ded-4306-aa2d-98fb45d42069", "indicator--dcfaf094-69ff-4899-9b77-b8985cb23ff0", "indicator--9e0b0e21-01d1-44cb-b108-ba0f54703ff8", "indicator--4c17de0c-c473-4ebe-8a6d-4ecda5a8df71", "indicator--3424be2d-82f7-41b6-afb4-e7fccca63277", "indicator--3feaaaf3-1a45-4647-9d06-34e65471da91", "indicator--c25991fa-b07f-4e30-ab44-342ce33df684", "indicator--97892d34-2cd8-4b9a-8c0e-8c47ad426606", "indicator--4a64fed0-f016-4025-ac9c-239daee007df", "indicator--ef70ef1a-4790-45f1-841d-fdb7db42486f", "indicator--e0e8d0a1-eb7e-4be4-93d2-cf92b09ebcb9", "indicator--c838d24c-414e-400b-990a-d252f6f20d2b", "indicator--9bee26fc-00e6-4484-8885-7b7def35ef67", "indicator--aaf4d2f0-df36-4a75-884b-04ec5cd57368", "indicator--a448804a-6a1e-400e-9996-48b44b4e7baa", "indicator--383859e7-2e18-4aed-b4ab-ad8718862f73", "indicator--b835323e-843d-407a-9c3a-5e6ad9fe0c98", "indicator--5b8bcb54-b6ca-4fac-a617-a7525012f315", "indicator--24496ab5-50b6-40d5-9f5e-a883775b4665", "indicator--def0a61e-42b2-49b5-b1cb-d7b63121c4e3", "indicator--60ffcc4d-a3e2-478d-8a69-3a087bf50b86", "indicator--2c0a6617-eaa0-4bc1-a41d-4d194f6d72be", "indicator--7fc56d57-9b89-4e89-b850-ed185646aef1", "indicator--0efa6f74-7f72-4c1a-b005-da6b1bfe1e78", "indicator--87bc07e0-f202-4d72-8462-18e8a1311279", "indicator--839695e4-78cf-44fc-b2c5-d45ee87e5f7c", "indicator--a4f862e5-e270-4ad9-9e09-94707b7baa5d", "indicator--486b7ece-a323-4bcb-8117-f93ccc44a954", "indicator--cd33325f-5956-4c42-871d-be8a9743139f", "indicator--6125f65f-70d9-4f94-a9ca-ff4bd487748e", "indicator--13bbec82-c55e-494e-aa73-1a116b01b663", "indicator--45348893-e430-480e-af93-b83d8cec938f", "indicator--f19abcba-fe33-4bfe-a296-8eccef4145ff", "indicator--d400735b-a4f6-4283-86f1-efed7a5b013b", "indicator--9fb8d44d-5048-4290-8ae8-1be7a5eb4b15", "indicator--63b3cc1c-ca99-4017-bb5c-ec4aec2921d1", "indicator--73a0c9f2-e713-4f6d-b8b1-1f33a2b5a411", "indicator--1fd3b477-8b8e-47b6-b932-5c838641e4ef", "indicator--f816d55b-3898-4029-96bf-c8a49519ae7f", "indicator--970f233b-8fdf-414e-b013-ced085877941", "indicator--a84996a9-bc91-42b9-96b9-08fc36efe969", "indicator--3110d940-acf6-4f21-b223-2e902b0baa28", "indicator--d555a375-b4b2-4bed-8237-27db2cf3d8db", "indicator--02e591b1-2d3d-495e-be60-e53d9fb567a4", "indicator--49dadaf2-5091-4b25-a563-ee53bafdf812", "indicator--bbf9bf30-8c35-4627-a5a7-e5ed5ddef3b0", "indicator--0d16f230-807e-47a8-ac46-391d730ed0f5", "indicator--15586205-cd79-4bb8-952d-48c36516468d", "indicator--37c57145-1f3a-448a-bc69-5a60c36cf584", "indicator--58b04133-23d0-4a57-8acd-501c156bab37", "indicator--92c216ee-f185-42bf-ba53-ffac2cad2135", "indicator--a1e2a1e9-0640-489e-960b-5868bb9d5b20", "indicator--e11b774f-a2ab-4bf6-9bd5-3ef94fd64675", "indicator--1c1e0650-7b2f-49af-a072-b0feb7201262", "indicator--d7c09c72-4dcd-467a-9efc-4cc5bd7103d8", "indicator--df78c10f-db9b-4ec7-a4f2-cc9b6aeeff35", "indicator--59d3f23d-4ec0-4b15-b87d-03f139880335", "indicator--4107eded-e05c-45b5-936b-733933a5dabf", "indicator--f3852471-87a8-4492-ac75-fa36020a79f1", "indicator--85c8da2f-91b2-4b0c-8cf9-b235e1df49a7", "indicator--912cf59a-9f65-4fa3-95ff-c6b1d5edbbc1", "indicator--e2184766-2f3a-4167-85c0-15663ccb7e55", "indicator--2c271364-101f-4ebf-9519-310a40ac2653", "indicator--be70c93e-e7af-4bca-87d7-3ccd6ee33e5f", "indicator--9178d904-4918-4022-a476-bbe96f5e210c", "indicator--52dab82c-26e4-4563-aab4-69f10aeeb160", "indicator--bcaccd3a-d239-450e-a634-1a4d2ad74623", "indicator--34a7f1f4-1eac-4ca6-8180-f5ae2ed31b23", "indicator--bf87c1af-b9f1-4fb3-b64f-11e88f8e2bb3", "indicator--34b1cb05-b96b-4c45-8e86-77565bf3c281", "indicator--4893100d-32d2-4224-88d4-02c36c458be8", "indicator--7cb2ff8d-f29b-4861-977c-58cc755d4104", "indicator--7deed357-ef0c-4bd3-a3fd-f1950c334a70", "indicator--ae6344a8-3130-4f68-a45e-9dfaf60e55ae", "indicator--54911062-98f4-4065-b737-cad1564063e1", "indicator--653095a0-96c0-4c6d-af05-583157f995a1", "indicator--78d81fc7-4327-420c-b4ba-38109d5bfe9c", "indicator--12981739-4504-43dc-aa9d-8df38e545ba6", "indicator--97bb2409-eb9e-4f97-a672-0dc831b951c0", "indicator--ee063c58-5065-4716-80ac-c37abcfeb657", "indicator--2fcb4ac7-727b-4586-88e9-b61f6bba3cea", "indicator--f579722b-4d8c-4c34-85aa-b519d262c22b", "indicator--9841c481-d466-4888-bd23-b4378d7712ba", "indicator--c5040f4b-fed1-422a-a2c6-2a1ce43a9b09", "indicator--06a86dfd-f41f-4f18-83a0-84025701044e", "indicator--4ce647c2-330b-458f-89f7-2b1463db12cb", "indicator--354bce12-6a73-4285-8a39-98c95d223aed", "indicator--84f3bcb7-4c1e-44fe-b976-02eab5f8b507", "indicator--89ffa3c2-3e13-4bbf-b3ce-374131df30cf", "indicator--1806b33f-41b4-414a-b6ea-f64db890531f", "indicator--c6f1c5d7-ce7f-4554-b10b-9a315530296e", "indicator--04bc966c-8236-4245-b699-e1222af40b3a", "indicator--a35c0ff9-6978-4aa8-b82f-afc2d93da9ed", "indicator--b5539256-f0d7-47c0-8d5e-d06c80521bf2", "indicator--373e93dc-541a-48fd-bd81-0a6a5aabe87f", "indicator--e19f0561-fb58-416b-8c29-27acfb42b254", "indicator--1e31782b-686d-4da4-8ca2-a6383f160666", "indicator--83082bba-040a-4a00-82bb-bc44891d1946", "indicator--2ebec7cf-cc7c-474d-a599-aab74e996230", "indicator--bbd0427a-ae50-4d2d-a804-9d6691ec6f4d", "indicator--c5f6687c-82bd-410b-924b-1608aa1807f6", "indicator--a028834f-8af0-42d8-8df2-29d384398576", "indicator--2dbdb0eb-0f32-4d20-8ffa-4477d848e5db", "indicator--2e5d3add-2955-4a3f-af17-b3e056a3a20e", "indicator--a0f4f904-ca3b-49ed-bd4f-c356a2d523c8", "indicator--2d697722-f477-4c05-b6c8-313b175b04d6", "indicator--3401ab2b-a8f7-4109-bf4d-691867215d09", "indicator--5a2db80b-4e6a-42ed-98f9-a4a579297c25", "indicator--e554e509-3b38-4e0c-9c2b-4a5ebc6a320e", "indicator--0c10d156-40b3-472d-ae53-3a87c682ed53", "indicator--a32bad9d-b17b-4098-a6d8-e653ee25159d", "indicator--72b6c2c6-06ee-4e5f-9559-d90d00559e57", "indicator--e15dd353-bdc1-44dc-9da3-5088315e7d5e", "indicator--29f91938-eb8b-4610-ad99-289110455ad7", "indicator--8a0edd4d-3ad3-460c-bad8-ee863ef8e338", "indicator--a1eeae1a-fe59-4af2-857b-8ddec315d9f4", "indicator--89d133b9-1f5c-4656-b001-bce67c58a10d", "indicator--e1d099ce-ebc7-44f8-a084-5e16aeda33ab", "indicator--ba17215e-eb3b-4779-b65d-8550d2add48a", "indicator--70ac80d6-832b-43ca-9822-7c3b2063eba5", "indicator--4214224b-ce4a-4d56-bd6c-9cb81d1d7cf1", "indicator--b6712c71-b035-48cc-bf7b-6cf912c3f93f", "indicator--f4857d41-87cd-4a53-9d2f-36caf9714506", "indicator--4a316f81-404b-4af8-b08b-52e55b55e887", "indicator--546ba1b7-6aba-4a8a-b567-006e0d740368", "indicator--6e55a2dc-750d-454d-910f-95a0d1a565b1", "indicator--4dd33b30-18c2-4a54-829b-24712c3b0d87", "indicator--5952f9fa-c361-47c5-830b-f69d6c85dabf", "indicator--b6611e7f-f182-4345-9a53-b1115c7fea61", "indicator--83725211-1193-42d7-9e39-e4edcaec86de", "indicator--6bfa7b39-29cd-4cd1-b1fc-d7db9d2d54b3", "indicator--d0a6da07-fe0e-4344-8dda-020c2bb8caac", "indicator--7d67807b-bf68-4e43-90ea-53b1d321fe1a", "indicator--66f56bd5-19b9-4b4d-8034-e3569949d1e1", "indicator--b010b17e-0888-47a3-8458-3d30e33c4e1a", "indicator--f5db7793-e904-4123-bab4-de3892841c35", "indicator--616662db-e1e1-4be4-815b-05a9b3b05965", "indicator--eafec12d-9ba6-4566-a7ee-302d9f2a16bb", "indicator--fb6030c8-715f-4b35-8050-07e84a6f83ff", "indicator--f6049eb8-c893-4a1f-8a78-83d177efd4ff", "indicator--d32b68de-6ef6-4bbb-a224-aaa1d07c5f3a", "indicator--690becf5-da0e-4a43-97fd-c8c94b51d20f", "indicator--d2b3864d-643a-49a8-94aa-a1e51621a650", "indicator--afb1d847-6481-43e5-95b4-54fa5b5d8d71", "indicator--c884983f-e842-4f41-a5f5-83e80138f567", "indicator--d303f22e-20e5-4f11-bc61-d1fd52700bd0", "indicator--d72d3905-f225-4af9-bcb7-d637cd4fab7e", "indicator--c0a6d449-27fa-42d9-834e-bcd5a822bb6a", "indicator--62bef4e7-58ef-4e81-a72e-43c27cacb586", "indicator--6edd1df7-fdd5-486b-bc15-eb5faa0d72b8", "indicator--63759ceb-2076-4f35-bdff-db3b20d1c77a", "indicator--f8ba182b-8b81-4eba-b7b9-dd82cb8c2d96", "indicator--31254fb6-8bbc-4490-b447-a3e7dfde0dc1", "indicator--0748715f-61fb-4730-8a29-7998387f87df", "indicator--3721e834-2060-4df6-8b0a-b251adb18b48", "indicator--60da08bd-bdd0-4f12-a3ef-00f37868e61a", "indicator--ea6af437-9b80-442e-9724-e3d5a199834d", "indicator--329b21f1-0012-41f1-b747-b3760152992a", "indicator--b295fd2a-3237-478c-a866-e911cfef9edb", "indicator--5eb5601c-1960-482e-ae53-bdc634776c0d", "indicator--0003d626-b9d6-4008-9a9a-578592435de5", "indicator--08860348-9037-4846-b3b6-ce1c5e4af7b0", "indicator--76e84910-b898-4e61-9966-912fbb153d4a", "indicator--4c507414-8f13-4cf2-b5aa-6be973d8114b", "indicator--2021bf1b-096d-4eab-9fac-5b4cf169cba6", "indicator--040ffe41-075e-4cfa-9d97-2bf76cbdf84f", "indicator--69cd91c8-d449-44f9-b6f3-dee4396e8ba4", "indicator--65363332-182d-438e-a4ce-e8dcf8b741e1", "indicator--720cc4f2-038d-4316-96f3-90f3e888117c", "indicator--e6f66191-b071-4a7f-8118-497a3275870b", "indicator--2a0366dd-f590-4b92-9519-7deb8e072bcc", "indicator--da3a23db-0b18-4dfe-8a8d-4041b9d1fa29", "indicator--79313899-2be3-4989-a514-7ee789f143a5", "indicator--dfce1bd5-63f6-4e02-8589-2d7c0fe624d3", "indicator--764327c9-832c-4d99-9458-be38b4393930", "indicator--47ee0e7e-b271-4bf6-b31c-8dd7316e5535", "indicator--3a4c0b94-da41-4faf-8e88-98452250cb5c", "indicator--0fe70195-88d3-45b7-85e1-b7aa08f88f90", "indicator--0a4274a3-a258-4133-9b6f-796800dc7cf1", "indicator--8d2fa4c7-1a8d-48dc-964f-ee42b6e90e81", "indicator--031adb7c-d2cb-4ab0-b9a0-51476dbd8f3d", "indicator--a520896b-4101-4099-be99-1b46c2394cb8", "indicator--0348cfe3-0f72-4d3c-b6cb-594c85ae7646", "indicator--e44fc556-139e-4cd0-bb87-b482b0e8b5d9", "indicator--23576ad9-cb83-47c4-9a30-7982f0ef029c", "indicator--9d57093d-edc4-42b3-9b4a-7d457395aef1", "indicator--281ef150-2b3c-4a98-aef7-6e2eee329730", "indicator--0704832a-1dde-4548-91e4-8090c87cd37a", "indicator--cf215ba3-4e6e-4bdc-aa5f-d79f7c27b232", "indicator--2265d259-abb4-42d6-b409-dfdfd1331403", "indicator--fa5bfbd7-1f9e-4444-b1ed-2deb51345aec", "indicator--022f401d-5f17-4dca-b37a-d44304133d35", "indicator--082b9c1a-709a-4008-acb3-7b9558c6291e", "indicator--f784de22-147c-4b17-838b-b1dd083df01d", "indicator--b64734a3-de42-48fb-a6c8-dbb65c8cd3b1", "indicator--38023155-5382-44a7-a377-64c9bf4698fb", "indicator--aa615528-a120-4f5f-a718-6afcdd4f6f59", "indicator--1c03482c-624f-4ea8-a0aa-9ab9145782ae", "indicator--66a71833-fb18-4544-b728-1be753e07daf", "indicator--d1a5bc88-8dbf-4cbc-bd35-5c82728500bb", "indicator--d3bb872e-2e79-45a0-b06c-6b9878ec1d65", "indicator--4aa2c9a8-7333-4eb9-bfb1-cec4fa1c8423", "indicator--f7cfbd6e-9d2a-4359-9616-9a06de20b338", "indicator--dad73380-df7a-4b25-b81e-e7b189c766f2", "indicator--27e63d1a-6200-4b04-9785-25e95fdb61ca", "indicator--363189cb-24ae-4e90-b69d-080832bf42e9", "indicator--6d254571-653e-4de7-8e3e-82c745653941", "indicator--584c19f5-ed10-4cd1-b57f-88517152eb0f", "indicator--381deea4-ed6f-49b0-b3fc-94da94cfa909", "indicator--7e8836c5-96a1-4f8b-bd6f-e9a810291099", "indicator--0e9d671b-46cb-4076-aeb9-0f9b98f2ba45", "indicator--739365eb-ec6e-4555-bb56-74fb06466dc4", "indicator--420a57c6-33c7-4d77-adfd-e6b2d00788f5", "indicator--53061ee2-a396-4614-808e-01d14f3634ce", "indicator--30df31f0-2850-44b4-89a6-9b449786c8dc", "indicator--7063388e-f36c-47e7-99ed-82018254a2e9", "indicator--397e9b6f-7381-4571-8af2-86fb6dba4c78", "indicator--bb6ba7ca-5941-48de-8e63-af77cf1355fc", "indicator--eda53e61-14e8-4b5b-a2b1-81cbdcfeb48b", "indicator--1570d21e-bb1f-40a9-ba64-31f39fd79bc5", "indicator--345594ac-deec-4745-ab7c-4561411d3b0e", "indicator--84be8e81-2a3f-4848-807b-9b6518ff998b", "indicator--58367c5a-1551-4837-8004-f6fb906c45a0", "indicator--d122f67f-e615-4cdb-b503-454a7af6ca1a", "indicator--6d59ea53-123e-41d8-a3d9-acdefa2e8e77", "indicator--47d8a0fd-bdff-4e29-95bd-975961e1aab8", "indicator--ae00c2b0-fe62-4d6f-a1fd-aef52735c2ae", "indicator--3f51bca6-41a8-4c53-97b3-72afb213a4ea", "indicator--65b172fb-4d58-446b-8d96-f45dbda99069", "indicator--c49d9ebc-4e9f-470d-875a-a53603117432", "indicator--1045b5dc-0119-4337-a1ab-9c29220aa2f4", "indicator--8c43d839-6a4e-4330-b2be-175ba3c135c4", "indicator--38a562b8-d702-4678-ba66-f428eede1c0f", "indicator--59541917-7c0a-4e9a-8fc8-09bc7efe90c6", "indicator--b2dcb917-d64d-4d24-a208-6b835850e287", "indicator--d22879c1-aea9-45f1-ba2c-8180924482d8", "indicator--d601bd4d-70b3-4ead-a753-a76d0db5ad57", "indicator--41c0b602-fd7b-4053-bbb9-08bbd5ea79ef", "indicator--61c5c7b1-3927-4957-984e-68e9eabea3fb", "indicator--e05c9cc8-4023-4b94-b81d-fadbb870c0ef", "indicator--2601e58b-edc8-4fec-8293-03416f0cd69a", "indicator--4efbd07f-9b00-4dce-8d98-0d46efca5e19", "indicator--158924e7-3efb-483c-af73-d626a955312e", "indicator--308cde88-3e2e-4746-b757-1f384bd69415", "indicator--6ab979cb-48c8-45d6-8a3a-29117db33f2c", "indicator--287bd1fa-550f-45f3-8fb1-f1dd0a6542cb", "indicator--f6cc0ccc-5cd9-49d7-803b-ea428969ba28", "indicator--ff9cab3e-353d-402b-b93a-6fb8c99a7e8c", "indicator--9fddee5a-b78d-4cd9-8ec7-481563fc26aa", "indicator--c885cfe3-a73d-48c9-b911-064327507cc7", "indicator--514156e1-6426-4428-b574-2d479af52d7b", "indicator--94f94f9b-7986-4d57-8397-337c0e0d9ad0", "indicator--281b6e7e-3e86-41e2-ad10-7ffebafce811", "indicator--935f39d1-7214-4966-9d7e-8647af1489ea", "indicator--dae2832c-1673-4dd0-bf67-0b8ddf2ef1fb", "indicator--0f653457-0ace-4ec1-82d5-347d773bc8d8", "indicator--2e25cb2b-a470-457d-8aca-286b6465c39c", "indicator--ae1dd067-7584-4aa0-abc2-cf2ff080f658", "indicator--d1fa2488-7b41-40fa-bef0-d69db0956f7d", "indicator--d93529cc-f54f-479d-a383-4b6a4a6a85a6", "indicator--e3541ed4-8a00-4914-bb1f-e97bdc450476", "indicator--399b0249-3110-4a77-84fc-99e63e26652c", "indicator--645295e2-b76e-45cc-865c-caba4de7f2ee", "indicator--0f700c9c-f9cd-4d8d-863b-4f77ca81fb7e", "indicator--2646b60f-6723-453e-bcb3-250d19538c74", "indicator--c0edb77c-bbbf-48bf-af90-c83abdc9b900", "indicator--1122f1cc-4fed-42dd-b345-2d45b84c2bbd", "indicator--931f94bd-dbb2-48d9-9ce2-1b5753606918", "indicator--1990c691-a224-4da0-a0ad-33d8bf62eb3b", "indicator--d51a641b-05e0-4000-acd5-ef7e558b6dea", "indicator--2f1be6b6-42a2-49cb-903b-12af94b00ab3", "indicator--c846f402-9ac0-4772-9dc2-9b923b3daf36", "indicator--36854511-837d-4721-8bb4-9feab3e2c198", "indicator--425e89d0-a0ad-4dfd-810a-23b56eb511de", "indicator--742b0d0e-7645-4030-a49c-86938398463e", "indicator--0b316fff-658d-4e1e-b4f0-888543208f1a", "indicator--c247e2f9-158a-40ad-b404-c0cf51dc1afd", "indicator--a6c9ea75-76b7-4018-aa66-f78d9597c6c4", "indicator--93866448-892e-4b9b-9460-240b9a3f8bee", "indicator--6156d59d-93ac-46ca-b6cf-6c0851c5b526", "indicator--10b46970-18df-4f13-ab2e-7e596f1ec0af", "indicator--ab4c76c9-10c1-4ee8-b59a-a2ba1e0875ad", "indicator--ae4bf206-da7e-4882-b282-7c6c4d7c4b03", "indicator--4407208b-a8c3-4b2e-8b6b-92a678cb7f21", "indicator--12e4bf5b-abc4-43aa-98d4-afec7df8b5d3", "indicator--dc39b69e-92e5-412c-8631-5e9d9b0e2b8b", "indicator--0022f62e-08f2-453c-926a-7aff52550df6", "indicator--f9e3c3d0-38b6-4a4c-b283-a66fb9abcb40", "indicator--a8297d56-a169-406d-9d01-2b19da4efc75", "indicator--59304ec9-0ddd-4bdb-a288-10c86abd6843", "indicator--f27e220f-e952-4a8b-822e-efff95e22959", "indicator--c46801f8-078b-4eea-b3f1-8ca092eda9b5", "indicator--ca7a4ba8-25dd-4090-81d6-10d6e1d0cdcd", "indicator--c4457e69-5570-4c76-a85d-2faabc46bdbb", "indicator--4e0dad29-9138-4c4a-bef5-9b53e3e6103e", "indicator--37b3da28-67a7-45e7-a13e-24d56d45dc50", "indicator--e6327301-526a-4682-b7f0-715c5699489f", "indicator--0b7e2b12-faa0-4538-9deb-bf98ec88ea73", "indicator--05bbd16b-dabb-44a5-a277-cd0f28a0f8a3", "indicator--9e4f338b-eb49-4fad-876b-e4418aa0b414", "indicator--715df47a-c79f-4851-b27b-d794318b0a78", "indicator--00b2cf16-575f-4d61-8449-e6407267b817", "indicator--f535bbea-3d0b-4605-8283-1c90c00ddfa7", "indicator--93066713-1a6a-402c-96f0-c8ee3bf02e07", "indicator--7b58d929-3627-445e-92bd-704653521b21", "indicator--14d0f2f6-929e-4b4c-83fd-189738d84088", "indicator--ff1babf4-37e8-4b84-a272-c2b013f7a0f1", "indicator--8bbacbf8-a299-4318-a881-0b94ad9ef6c2", "indicator--bcd7b1a8-6663-4348-a4b4-acac747d941e", "indicator--3f286cfe-b245-4fc7-b407-4dfcce1118e8", "indicator--df239504-4a92-4a07-8e1f-d579d7bcb36e", "indicator--1785eb2d-aa8c-4c5a-8685-5b80e19cb69a", "indicator--50d129db-05ac-43de-b3b7-8668e788be89", "indicator--985a1473-8e9e-4a86-9a6b-def626077104", "indicator--b23717a6-e51a-47db-9285-d8167424ad7c", "indicator--488beb51-0eee-44c3-875b-a4055fdd7c68", "indicator--292af905-85dc-47d0-9b62-0830294fc9bf", "indicator--8a04b72a-4c25-4310-a3c0-12e7ca66b784", "indicator--48db8713-5839-40b4-9235-89156ddbca6e", "indicator--053f18b4-73db-4a02-b65e-db4538f80f3b", "indicator--8789b052-1ce9-489b-a829-fb4b4c5b017f", "indicator--bea3b5f0-a3af-4b52-935c-ac27a15f613d", "indicator--01f1b25e-ff6a-4c74-83bd-f4406369aeff", "indicator--cb1c5a22-250e-4884-855c-99e98cd06703", "indicator--573a208c-8b4c-49a2-9331-9ea70c287cc8", "indicator--b04cdbb8-34a2-4c92-a8e4-fc07c1294df2", "indicator--1e930451-7b9f-42b1-8a52-9a658c0def72", "indicator--a100fe84-9abe-41d8-9500-10d6f20f3cff", "indicator--15acf48f-624b-4a43-93b6-e108ec96134c", "indicator--798f2f51-b384-43ff-a694-63f46cdfa558", "indicator--d84837df-e6d0-4c10-9259-17083220a762", "indicator--e643e740-9a48-4607-b660-729d2b109d6d", "indicator--04a5a811-dda3-4532-99e7-c69affa73d57", "indicator--296571d9-0a9b-446a-83da-64308f8e2c5e", "indicator--8e672b38-b385-43a0-8307-f0da129986fc", "indicator--943c3265-e0d6-4b2c-8556-a78056b9031a", "indicator--c4195910-0aa7-4337-9140-d52f15d35258", "indicator--6a431835-6f58-456b-b538-44c36c55dd69", "indicator--a5d70126-da3b-454a-97d2-00a70b355bfc", "indicator--d4a11e62-dbd0-4ef4-a3f3-1576822d322f", "indicator--e97986f3-79d1-421c-8c9b-feccf70fd603", "indicator--d4d2d6be-3285-421c-9ef2-f349b16f78f8", "indicator--4e08b402-fdef-4cbf-9cb0-c950f96069d5", "indicator--8d21f8c9-d47a-4dcc-bc65-b6e17c386ed2", "indicator--022d44ba-8e03-4025-9ac8-6cf2fc6703b3", "indicator--08f9494e-725b-4001-bb3c-d08f72e5a367", "indicator--e63f3a64-ffa2-4e48-96f8-72c0ca5d4793", "indicator--01f5d65c-57f8-4fd0-b01b-b02063520788", "indicator--6a2e2e4d-fdeb-4e79-a496-a10c7919c765", "indicator--89d90d56-5085-49ca-b0ce-82d79282bed6", "indicator--214d0ce0-0926-4a5a-9449-193eaa90a194", "indicator--34b3a1b9-4259-4d9f-8ae9-1b8915d483c7", "indicator--dd124595-69cd-4166-a294-7c067783396d", "indicator--98cbc974-286d-4376-97b8-f29be62c5cb7", "indicator--2916c3d6-b75e-43d0-a622-9041ec41aa45", "indicator--f4e478dc-9d6c-4417-9439-35d29bdb8bde", "indicator--87ebaa89-0ce2-4625-a8f1-30d73d387c71", "indicator--02e8981a-45a9-4226-a43d-730b75118ab2", "indicator--c92cb686-273d-4927-bec5-b1d30d44a8e7", "indicator--6b98c07c-bde7-47e3-8920-76b93efa23b2", "indicator--97d1f34d-8436-454d-9cc0-aee935efbf96", "indicator--dfe983a2-4bde-47b0-901b-798bb34c0eca", "indicator--42b7f605-c6dc-475c-ae6f-0aaa1249701c", "indicator--af887b2a-016b-4d54-bdc7-d52aee761a0e", "indicator--be301cd6-7037-4c00-a58a-697a773dc396", "indicator--32208856-8f03-4172-a7f2-839c9b526050", "indicator--9f284d61-6ad1-4979-9f14-2b4e34f4f762", "indicator--07ea2c70-5398-4f73-b1b2-4ce42907e651", "indicator--34292f2d-9688-4f8c-bfb9-7e6eb5eb669d", "indicator--f7fe722b-3f87-4217-be66-d35167f6b386", "indicator--5f2b78d5-c04e-4fb7-9cd4-f2c0b49e7790", "indicator--c757fff4-037e-4025-838f-19a2dcc72398", "indicator--bfa19179-014e-4b15-8ef7-6b96fd807279", "indicator--6b822230-10cf-48bd-a302-4b7ceb1932a7", "indicator--edf1e294-0dd0-4a9b-b3ac-b7fcdb105ec4", "indicator--e06042a7-1e37-46fe-b3da-8546ffce087e", "indicator--0ee2c801-ae71-40ab-b888-29dcc3741f61", "indicator--6438d679-9d18-4dbe-be18-1d16076d77d5", "indicator--ebbb24ab-42e2-4b5c-a713-0932219c460b", "indicator--0a93f8de-1c11-48aa-b4d2-21a3bb49d9dd", "indicator--b4cba098-09f6-4e8d-b429-8fbdd9921ef6", "indicator--00caf584-314c-4e68-af4a-1f7283264236", "indicator--4e557ba0-99f7-4332-9dd8-acf797b4b62e", "indicator--ada1516c-b4e7-42a9-9e10-d445a7e046c8", "indicator--6a02f3fc-e495-4089-b2c9-d474fbfe8efb", "indicator--6de6ade2-b078-49f2-8a0c-103c7144dd48", "indicator--32933e52-862e-484c-9b0b-89ed84075a6e", "indicator--cbb57380-a8a9-42f7-9e4e-d0511edb1f4c", "indicator--6edc9050-b932-4d37-b086-6fca71780618", "indicator--70e1fa29-eb23-474c-a959-5524740ddd18", "indicator--4f77a9b3-f825-41c6-9154-2c4994c1a8f2", "indicator--cb04c4d9-ac41-4d20-ad9c-5800c882f133", "indicator--6d265b88-39f6-4546-9ba1-73a777365337", "indicator--d9f610f8-d0cf-49aa-9b05-8ce0e3604deb", "indicator--a97e75f4-4204-400d-b6db-23bde587f7d6", "indicator--302848db-a819-4ab7-8be1-36bdb621d41b", "indicator--8d8c3a75-1db0-44d4-9a27-309d26790fcd", "indicator--afd4ee70-f773-4295-885b-f308354537d5", "indicator--eb2eaa6f-df85-489a-b277-a36e2e26a7bd", "indicator--74a93bfd-9596-4112-be43-0bed271b2320", "indicator--43d86ea7-ce2c-4c12-a6e3-8099922c954e", "indicator--94458a00-a82e-4c90-afd3-cfabec346adf", "indicator--84e3e87e-962c-4a23-b008-e1cb598ad82f", "indicator--07b9884d-adf0-48a7-b417-67bae0941439", "indicator--5be61559-6910-499c-b380-eb0ffda8cc86", "indicator--9693c641-9dae-447c-9d90-1911c7deba5d", "indicator--436dab63-ecc7-4df3-b974-c5b25e4221f6", "indicator--3859d04c-79c2-45f7-a0a1-c6aac2ec9396", "indicator--98c0c426-e6d9-4c06-be0b-84fdaa0c5178", "indicator--ddc66113-4f35-44a4-a4f5-38e5dc02b2cb", "indicator--1708288c-b2f7-4b11-b9ce-41e3cf677172", "indicator--c54c37ab-a724-4331-9dc5-21703c7bfbf3", "indicator--b6f3c044-783d-42a7-b2b4-37cc255145e9", "indicator--8cb6a4c8-3343-4fc3-8f0b-8853b0f8f5b9", "indicator--2d478a4c-886d-4d1b-b41b-770e01b8c7d6", "indicator--38724584-9c68-4cba-8c30-e09beab0f616", "indicator--896af93c-dd6e-4ec4-91ea-c28fe808b49b", "indicator--2305b6ac-4bf6-4eef-8cc8-5782a59afd23", "indicator--0f136567-151f-4e76-a7ce-7f606cf669b1", "indicator--4e9e5e7e-bf24-4e19-8e4d-191442b9772d", "indicator--ae0b4523-ab49-4d49-87aa-98c74c61c921", "indicator--eaf700fa-6ef5-4a44-8db2-4feeac255dc1", "indicator--0e4fb351-b5e5-48e8-928a-06ee8855dfd4", "indicator--4c36541a-20cc-4269-8bb7-420696eb2d6e", "indicator--c4257007-c498-4187-b22b-8685ad1cb13c", "indicator--233bbf2c-1392-4c7c-b628-eeba16c7cec7", "indicator--d36007b3-2a9a-476e-9f13-68e37bba899d", "indicator--a7e4ca19-261c-4f95-8a40-11ba7aa63728", "indicator--7f2438a9-c303-4ae9-92e4-ad228562f039", "indicator--1418c3a1-ae8f-4797-9efc-e94f82904648", "indicator--378652bb-5acd-47ed-94c8-17e75aadf80a", "indicator--479a2a55-3121-44a1-a38d-c8e565ea2be3", "indicator--45ce6a46-96f9-4d8b-a2f8-9c1ebf6da839", "indicator--3c3aff22-7625-47dc-b9b0-d5c715f29236", "indicator--b481900a-37b7-40d3-8931-344b952581b6", "indicator--8e281c20-0a38-43d2-a7e7-73ac95c641a2", "indicator--fb7cd694-726a-49bd-bb84-14d6a51a0723", "indicator--a985a692-6596-4bcb-b81b-2cf3e373c613", "indicator--34c86eeb-b65f-4930-a525-6eaef475f58f", "indicator--6b7a9a55-4591-4b84-8e7c-f22c82372699", "indicator--e2265415-a396-4234-a7ad-28a037142769", "indicator--51077682-a91e-47dd-9723-ce8854cfea3c", "indicator--a0fdcf6f-c722-4719-aa93-3a9669ff6f6b", "indicator--38c50e27-69e3-415c-9765-1beb6dd9bc34", "indicator--f2c52e07-3638-40fd-96e7-d6238cac727f", "indicator--a4f063f3-9e59-403e-ae71-4ee2118bea07", "indicator--b2afa035-d1d4-4737-b743-1cad44d690c2", "indicator--4ed736ef-f6a3-4ae5-bcb6-3f1e968de6c7", "indicator--d3fdbe25-b13d-4787-8a99-cf0ddba5079b", "indicator--f14f8627-27c3-47ce-8d28-6b784c0ace7f", "indicator--6e52492e-0df2-432a-b8b7-286fb61374ba", "indicator--61762c07-35c3-4a54-9f05-3887e85474c4", "indicator--6037bfc8-d95a-47c1-882b-e1e2def26f22", "indicator--3d3ea365-114b-4a0c-a954-a252fe90288b", "indicator--feeb7eac-7889-4257-aa5f-1667b91611f1", "indicator--fc3d7386-7d6a-4598-b449-7ca8471789e8", "indicator--1085ebee-765f-4d08-9f52-83797136a344", "indicator--ed63efd3-e366-41af-8252-65054906fa62", "indicator--50c5cd9f-a5da-486e-97c9-499ab8fed604", "indicator--2d5e5639-b321-414a-b044-d089fd051b44", "indicator--7bbf3a35-b142-49d5-9389-ac280517cad2", "indicator--e998446c-5639-46ff-955d-1e84b10f5cbe", "indicator--d45b50bf-962d-4af6-a555-1a467f428c4c", "indicator--1db2c51b-0bca-438d-ae14-eb3828063e87", "indicator--f2029d9f-cbe3-41b0-bfc8-caa9d53c2c43", "indicator--ae50ca1e-c89b-41d3-8256-f9cec211fb1a", "indicator--6aff1e97-a277-45a0-a256-5fcc83df6a66", "indicator--df18a25e-481d-4c03-98f8-c1816ea9ba66", "indicator--2dc494e3-fa27-45dc-b16e-8c42f1f27439", "indicator--bfbf6015-d321-4164-ac9e-69ba78fc4ac6", "indicator--4e7580e7-5077-4dd0-b277-683a8c0f408e", "indicator--b70c74a5-b9e5-4170-b637-bda66ccdd3d4", "indicator--7544d56f-2bab-461a-a0ce-474b72367a09", "indicator--1a8803d7-3253-4f31-99da-e13e51892a27", "indicator--35262e00-98f1-42d9-b8f0-e71edcd6478b", "indicator--69690092-d2b1-43e4-938e-09c5d625f8bd", "indicator--250ab4e7-9f9d-4c9f-bee3-ff9870d632e3", "indicator--9d389efa-86ec-48f4-98da-39b0fba6c5be", "indicator--6553fa17-1451-4877-9551-4ec5ff38ca52", "indicator--22ef145d-f48d-4992-848b-c0658f58ae93", "indicator--eafd9741-7294-45db-9874-58b6602739f3", "indicator--5e855c6e-06ed-4fb6-9c77-e058b4be3532", "indicator--96862674-57ca-4ad3-a134-cc41dc6a45d3", "indicator--68a1e363-7e12-47f2-9ed7-6f564f2dc74e", "indicator--dc755d84-bade-4417-af5c-15ec4724335c", "indicator--22a9cbdf-ca77-4bc7-97a2-e3e2e534a015", "indicator--85f0e12a-20e7-4e1e-b2c3-259c70f5c52d", "indicator--b21ba903-a0b8-47ef-9e30-0ad5301b55f6", "indicator--a4ab3faf-d513-494c-bb3b-d7ddab87e0b5", "indicator--1cf3accc-21f3-468d-9e9b-c07a52e62bd1", "indicator--31c4a4b7-bb45-475a-8560-b99e722b0a9c", "indicator--4a6a4463-a4fe-4cee-be4f-f74edee89c54", "indicator--9a1beaaa-950e-4cd2-bc1c-0b8de7799c56", "indicator--14d5f457-bb35-45f7-8b18-63730e057cb4", "indicator--7ef6d41d-708e-4fd9-946e-2d6789295cd4", "indicator--9d8ffa1a-a76f-4f45-90fe-238fb275d50e", "indicator--9e3b0ab2-61fa-4bd3-90e6-fef771c33f93", "indicator--30a02a36-5508-4e5b-9a0e-5fe20c90709b", "indicator--c51e6441-52bd-45b9-ba4a-b2d71180d500", "indicator--87d85d8a-4181-41a4-aceb-a7a9f63be782", "indicator--e834a52a-669f-4470-8d96-b24c2419d782", "indicator--163dfae0-8835-4269-a371-8ee430bd7f71", "indicator--1b2a4ba7-8af1-4af9-b215-98e6c035d84e", "indicator--a09a6b2c-8624-4fcf-af18-f7170f29bd90", "indicator--0e99a890-9312-4f35-b3f0-b9dc0cf968a6", "indicator--ae998cc9-fc6b-4817-bcbd-7b31955586ed", "indicator--2a559aa7-bdb9-4905-8882-8d8bc093dcc0", "indicator--7abff515-bcbd-4663-b3c6-97549fd7ee7d", "indicator--ad7c8e7e-b2af-49e1-8160-8f7ffa2788c6", "indicator--e0f9f865-c3b5-456a-af7d-fc93df1d0c1b", "indicator--da919f86-b23b-4282-8846-46b8a4e0a3ef", "indicator--dde6107a-3ba8-459f-9645-149eca01341f", "indicator--2db2174c-393e-41d2-8218-98b452c7ccf0", "indicator--db48ab6c-caa3-472c-af68-a04f4b1ddc35", "indicator--2e5da235-920d-4b47-aa4e-e4cae111221f", "indicator--22df9765-a10b-4567-bd22-84b27cc09f47", "indicator--e3e4a0ac-4ff8-4467-b4c1-90510ac3ae6e", "indicator--35d0319a-3c4e-4d2d-bf3a-8bd6a0232a44", "indicator--e9ec2b68-dd4f-4d81-a543-76b00c962f29", "indicator--756be7ac-b7a2-4b89-84d2-b4705ab3575a", "indicator--5a3adf5c-4047-4a90-bf42-4daef573a641", "indicator--3e4181bb-0a7d-465b-a970-9c892994af01", "indicator--0e5dbc6e-2593-4a12-8b8f-09b67359467b", "indicator--a4f4989b-909f-4039-8bc3-45abbe3e9fdd", "indicator--3262e795-a678-4370-a5b2-39da3f33e11f", "indicator--4ee7bacd-820a-455f-b491-ce989c45f464", "indicator--bf537fa7-26df-47d5-8ca7-f9cde3b3b063", "indicator--0b25c98a-ef9b-4c27-b1d0-db1a38c86bda", "indicator--dea6d531-9883-4b6c-b801-279710e023b7", "indicator--f6d9ddac-d364-4bd4-94bd-214a2d6ffa27", "indicator--6caf8339-2f9f-4bcf-baad-749c2c9ea0b2", "indicator--f0671d6d-0a6f-4d8b-947b-36aae13f374e", "indicator--89e65286-4bd1-47f3-b02d-1dfe9ec3369a", "indicator--762e5701-89b6-4669-84d8-c79c3f44c869", "indicator--bae00d6f-340f-4491-ab23-e424252f7e0e", "indicator--1c2ba771-73d4-440a-b3ba-60a8a863076e", "indicator--dde4c070-8343-46a8-9700-9cd4c082dada", "indicator--2c7bfd63-049f-460a-8bd7-3d3c7f5c557b", "indicator--ada61401-cb02-4989-8fb7-80f555e6c6d5", "indicator--57dd2fa8-f53e-483a-b9ad-d678a2db33cd", "indicator--6fd87c77-3950-44db-976d-978bf931dafe", "indicator--b0cd8df0-1381-4724-8178-f2963909c9e5", "indicator--eedf6339-3f96-4690-ac27-055d737ad67b", "indicator--ee38bd96-dec5-4f8c-ad3d-6f9486d07f24", "indicator--7ef617dd-88ba-4cff-ae0a-e9612e57e153", "indicator--6860d332-35bb-4862-9a89-b2fd11647383", "indicator--b37a558e-911a-4329-94be-b46d8cbd4d22", "indicator--1a798687-d80d-4b68-badd-92565f16bf8e", "indicator--54a52f46-6fab-4d1b-880a-2ac962c33708", "indicator--e5b2f9c6-7192-4723-a114-87d280eb05e6", "indicator--4bcb57af-97d7-49a4-bbfa-7a12e77ebd0e", "indicator--d05c7bf5-5a3d-496e-8692-e4bad5268671", "indicator--8ece0960-2e59-4ae9-861d-89d31234738e", "indicator--6ced312e-04f0-4fad-af4a-4d47d9b28ab6", "indicator--98e66f57-b5fc-4e90-b328-c7aceb9cea9e", "indicator--94e75472-89d7-463c-9a86-3e21e10c8f9c", "indicator--b24c73c0-3999-44cb-9dd5-758fe42a91b6", "indicator--d08cdd73-12d8-434a-9367-0d43257035ad", "indicator--c2f297c6-5943-4c1e-aa9e-3d38ccf69117", "indicator--588901dd-88cf-4a17-bfa6-08bd768a20af", "indicator--1d10037c-ac3e-4f39-a69e-76e2d55735db", "indicator--78bbea99-3c1a-4833-a8ec-fa9ce680ada3", "indicator--bebad155-71f2-4370-8e94-e5a7fb972ffe", "indicator--67606398-3fd9-4c6f-9a2b-087543384d74", "indicator--6b8bf67e-6e5c-49e5-bb1f-af5c4a3489de", "indicator--e451ac2e-d279-4ba9-b5ee-8a108dc9a98c", "indicator--203c10c1-4144-4252-b776-11d88ff8612d", "indicator--2fc75395-6cce-4d73-ba2f-a7d615b2a30e", "indicator--dd67a147-5f30-4626-8001-bd318b554d5d", "indicator--60851218-6576-42f4-94bf-03b924f88103", "indicator--efdf0417-a909-4384-9e5c-4f207708aaff", "indicator--f9287da5-b343-4ddf-befc-2cbb5799ed0c", "indicator--c8fdc13d-000d-4c26-a70e-112b98279337", "indicator--aa38a3cd-7339-4706-9928-4b12bbac3e50", "indicator--8705ca71-8231-44fb-a4dc-ff2d1fef0903", "indicator--49341570-b536-4f26-aa6b-117b792232a3", "indicator--252e5dd8-3f07-4a15-a7b3-b0011136eeed", "indicator--1f2a7f57-6542-4edf-8139-3767b7c6d5e7", "indicator--8dfd5435-c0ca-4c53-a021-c42c37471305", "indicator--9aac3e1e-17cc-4504-aab3-3b7fc9ca925d", "indicator--9120fdac-fd22-40bb-9176-001cd6d5fc35", "indicator--c8cab47c-9436-4d33-a6c0-be548202f37d", "indicator--29e9d453-5daf-4d8d-bb07-f9525110d565", "indicator--59ab0112-e26b-4e3d-86a9-6ddcdf740da5", "indicator--bc5d0e1d-cbab-45d3-a212-4bdb89d538db", "indicator--737da190-2383-4ed8-9426-c1645f6c7a66", "indicator--0e299b13-a9a0-434d-9ef2-a209b454a873", "indicator--994dc442-ee73-4739-97e1-987ed15eaaa7", "indicator--b54abb7d-e3b0-4bd4-8a1d-49a0f953be47", "indicator--540cc8e7-58bf-4098-8dee-b410974a4117", "indicator--b973421f-5706-4afe-ab8d-0868848da8a4", "indicator--c529da0c-5c5d-4b80-b46b-813eba35e1d5", "indicator--6271cc68-d621-446e-847c-0b15fae0546e", "indicator--16efd57c-8c07-4f33-9764-771ddd0013b3", "indicator--d1f8f29f-4be8-4a3b-a83c-2703c598f17b", "indicator--87f5d1f3-f6fb-4b02-915c-1023dde3b214", "indicator--34d08577-b77e-43d6-87c7-d8e4b281dd6c", "indicator--3d7358b0-985d-4819-a3f2-96496ffc5bbb", "indicator--5ff522c3-0d62-470f-87f3-61538c6c9f60", "indicator--ddc7e209-3525-4117-8607-98c3332dbd20", "indicator--69eca0f8-1869-4f5e-b5af-6513e52f39ea", "indicator--d7c3d536-203a-43c3-9eb5-d74e25ffd5de", "indicator--2500479b-3e6e-4697-ab9a-e611342e2f54", "indicator--a1f80590-4baf-4e74-bc8d-3bb6e234be2c", "indicator--a3b84f6c-643a-4d43-b46a-0d67109ae58f", "indicator--d2b49a65-6f12-410a-93c8-0412c48a4ad4", "indicator--354289f4-eeaa-4402-bb5e-c09145d9d35d", "indicator--017d051d-b1cb-4152-93b9-284d30a87e4d", "indicator--1c628fb3-f13f-442e-b70e-4d129abd00ed", "indicator--33ee1402-7359-4310-be6a-e1f854a6970a", "indicator--bd612dc6-c6d2-4e85-ba17-933ef50b448e", "indicator--7e7f193a-1b74-4473-b9ac-2226bb4c0fa3", "indicator--e82a2128-5bb1-4018-8590-a30c248f02e6", "indicator--2acde250-6d67-47d2-a0e7-5067623535b7", "indicator--bdbd7408-c22f-434b-ab66-e24236eda553", "indicator--669e5b8b-41c5-4cf7-a90a-f5114cade9d7", "indicator--dc9f5100-6877-425d-93fe-a26ed66011e2", "indicator--e71e813a-00fd-4127-a698-1087f5989c8b", "indicator--c87d9a8c-abd1-447e-b59a-de56cb5d5667", "indicator--5ac38b4d-230d-4027-a4a9-080c0a422c57", "indicator--c31ca9e9-fa93-4abe-8c23-fdcd65dbffd3", "indicator--fb18810b-fe56-46b0-a0be-7b5271a1c51d", "indicator--e88d056e-1c57-4096-a84a-2979fbce8472", "indicator--80c01d95-d1c1-4b4c-91bc-287592e6446e", "indicator--f96440cd-20f5-4aea-a868-dd631e135f7f", "indicator--45cd2a63-34f3-4d09-acd5-821109bb46b7", "indicator--afaae6f6-0809-41ad-b13b-f378319f3fe1", "indicator--1f960a19-868e-4094-a0fb-234a3ec5c24a", "indicator--e7ae4b32-c4a7-4b9c-8fa3-e750f4185211", "indicator--784012ce-d1e5-4c6e-bf13-6041b546c792", "indicator--01c28507-2581-4e34-b6fb-0cb085793e0a", "indicator--282aed6e-ce6e-4f81-9715-8cca927b8866", "indicator--4ebfd19a-bbed-4312-85e9-a6c630e4b99f", "indicator--273d67c7-01a7-4e51-a220-f565a1f4d892", "indicator--10fcebf2-043e-4af3-9879-5ba61884b789", "indicator--50589d36-05ea-4b1d-9433-4c23a14cc4f7", "indicator--25bcff59-bee5-4e8e-9e20-e1f1e0194165", "indicator--fa19c220-eed1-48cb-9e91-ae9eb0d03832", "indicator--c333294b-c2e7-4f78-b49c-ee8e5ae4599d", "indicator--d6e81555-033c-4df4-ac35-50cdb37a0641", "indicator--432a354f-ddbd-4a84-b1d8-6d0319f59eb6", "indicator--7c92ee02-12d8-43fd-9181-897bc2b5e298", "indicator--68cc79e1-4b4e-4496-b283-8a1335ef4c19", "indicator--bbbbe893-4b29-42ed-9ffa-394493f81139", "indicator--4f0df32c-5c06-419d-b982-2434044170aa", "indicator--052fa5d4-71eb-4f4f-a666-e09f84b3d0af", "indicator--a2946d6e-2d35-4594-8a4a-2a9b87ff49b4", "indicator--a750d161-4eef-46e5-a1cd-2ca7b18b748c", "indicator--53941b92-3622-44d8-9e0a-f9f893fc1bab", "indicator--56d6e919-f556-412c-af66-09b5e50ca19f", "indicator--f1ebad54-7c01-4038-b8a8-db2b44a92dbc", "indicator--645e4f3b-3e96-4a9b-b8de-ddd81f1214d2", "indicator--28706096-3bf5-4c1d-8dec-66682dcc6500", "indicator--172c3c22-13f9-4de4-9b3f-028586af4ad0", "indicator--d4da1c11-f409-446d-ab5e-af3720b40e83", "indicator--eed073d6-322e-4a6c-bfe8-ffd07d9419e2", "indicator--c14a24cf-294c-48cb-bb1e-4a6f95707c95", "indicator--00812255-94f8-4d86-b228-5ded6cc9bf9e", "indicator--3ef39b43-51d3-4d1c-92ff-570f2b3fb481", "indicator--b0625449-4fd7-44de-aa2c-ceb3013da176", "indicator--c120660d-1ad1-4129-af4b-1f88d2d065ad", "indicator--5618b9c7-6daf-4171-b75e-8fb32b9b9719", "indicator--48b87a95-8fad-4560-8944-78840dae3a15", "indicator--ff0d13da-cb7d-4d67-9fe9-370674e64eda", "indicator--ae398b02-790c-4252-a23c-09c7a5e10acd", "indicator--cffc9cad-4015-4a60-a6c2-a7e0eb42ea67", "indicator--26cfdb61-5dfb-425b-81a8-0394780cc263", "indicator--3afdb64d-bd45-42a8-b168-166e865d2524", "indicator--e1bdfd4b-3e46-46d6-816d-6552c2114fb5", "indicator--18b1de24-f7b5-46a9-be4e-00d9eb51ac1b", "indicator--6a4ad9ff-1f71-4842-b41b-c94a1ef720fc", "indicator--a9d2242d-9837-4e03-a9e4-e51f1ff273e9", "indicator--22433a15-1236-46dd-a342-22f185fd57d6", "indicator--1eef3bb3-119f-4a3c-8d60-ad49ee39625a", "indicator--8800f179-26cd-481c-bee1-d64c430304c5", "indicator--642f9978-0559-4724-8c79-64edc6571033", "indicator--46bb5836-3bb7-4fd1-86e5-4713553a594b", "indicator--f46ad4a4-ea17-44a1-aa70-a6fbcd10bc4f", "indicator--8280757e-c4b1-4632-864f-9036c21b568a", "indicator--248777f8-7290-4827-bb77-0526a761b031", "indicator--9cc76e22-f985-4d2f-97fa-723ea84e3c44", "indicator--6c6db7c3-aa09-410c-a178-59c39f4bedec", "indicator--875103b0-9d41-4148-960c-2ee71ebc6c2b", "indicator--1690704d-47c0-4e21-91a8-878c2877cc72", "indicator--72a5e45d-d6d1-4cfe-b1c6-52aebf5fed14", "indicator--816fe8e1-e708-44b5-a7da-852f0952921c", "indicator--e0717a58-b2cb-40ad-b496-e11fefeeab9a", "indicator--596f93cd-cb34-45e4-8d70-e1e4e7bc46b5", "indicator--564d8c3c-63a9-4ab4-9068-e0977ef35218", "indicator--f72cd069-f4b2-41c7-b5a0-d5c86733c141", "indicator--012a6e4f-2845-4c58-98e5-f7f29813ccb0", "indicator--e77beb1c-519d-47a8-9bb0-b463263a47d8", "indicator--4b45d52c-cdab-47b9-971f-4c5ae19fd032", "indicator--00f8602d-9ec9-415e-95e9-500f007d8f87", "indicator--ef4669d8-c709-4caf-84e6-55f7e75e813e", "indicator--a9f0e63c-d181-4eab-8650-b5404bad07dd", "indicator--d293f290-9139-494e-a403-3e79758327a1", "indicator--4f7de127-700b-47a1-aef3-d1d7839ecf28", "indicator--7a25434e-bebd-4fa9-8da1-1422ca3a0f9b", "indicator--0d66349e-32b2-4b45-a4fe-3ce143f5a08e", "indicator--5c4b13ef-a390-4494-a398-82687443e6cb", "indicator--0c246a8f-9cb8-4e35-9f81-240270b1322e", "indicator--18b983fa-61e7-4d12-8471-557683fd32dc", "indicator--5eff51d0-7472-4efa-95ff-e052f30358c1", "indicator--fd8929f9-6145-4e1d-a234-b76313d0bc25", "indicator--97373565-4534-40ab-a85e-0e28d421e296", "indicator--57b26c85-d20e-49d2-875f-222e1bb6ef3b", "indicator--d40ff482-cef3-4e15-bfa6-ccdd25191c45", "indicator--c5677e2f-cb5a-4d03-8718-08f62e5752ac", "indicator--354c10af-6287-4c99-bb12-ec463e1bf6e6", "indicator--ea87c58e-ba91-45e3-a188-86faef44b9c9", "indicator--4af85349-9e6b-4495-a26e-fe6321d25c73", "indicator--08f12596-a91b-45ca-9968-4f99e1a4b0b2", "indicator--654dee13-b07e-4fcb-b7a7-a5d599feb443", "indicator--4477df3f-3bdc-469c-a0b3-66408a046d9a", "indicator--2eb02b7b-e631-4def-b364-a443e65f7037", "indicator--41fde95d-d051-42c6-bb21-0209dc731def", "indicator--4f06c917-afef-4af1-9d8d-72d588a901e4", "indicator--53ce7836-f810-4cb7-a470-39e0dc2938ae", "indicator--400dfded-f5fb-4a0a-9dc2-a89b2e38fad2", "indicator--713696c7-3600-4585-89f9-7ed9976f1721", "indicator--38daa311-f530-465a-a0e9-d8064c33586a", "indicator--c1c71c6c-91f1-4e71-b614-e95491846538", "indicator--eeb68c3b-7d46-4164-a4d7-8512ef704933", "indicator--49610720-67de-4b93-8bc2-53101bd29cd9", "indicator--5136f967-8662-44e3-8bb4-13178e66faa0", "indicator--2f0271f3-c682-4ba8-8d87-f52d8d47e2f6", "indicator--920190c0-8a9f-4a96-a472-2fcfb177ff03", "indicator--8abd1cf4-40e3-444a-8149-c17af3d2741e", "indicator--9e749fa2-d19f-499a-af7c-6833e479914a", "indicator--fee1e1ff-ba01-4422-8eba-eb4be8a885b6", "indicator--347ee796-c946-4d94-9518-c9d5d4957a1c", "indicator--066e47ad-e1fd-4338-8ec9-6c300eb37374", "indicator--2b669eb2-1903-42c0-b4b9-c14fcba9ba36", "indicator--ed4ef0b1-3942-4d47-b73b-36138635f8f7", "indicator--01a95d47-cc46-4cac-97ce-88b2db583d5f", "indicator--d2e5db21-4676-4619-9d6a-c9c015eea321", "indicator--7db6fcbc-6323-4ee0-8828-b7867278f1b6", "indicator--a24a5d43-ce4a-436c-97e7-52edc55999b8", "indicator--d370a767-876b-422b-aa8d-6f97b16a318f", "indicator--71e26afc-9c34-4dcf-808b-4f9a9a03e6c2", "indicator--e1fadda8-85e1-4af2-aa8a-ff50279f1b1c", "indicator--93de6b80-e928-4744-a243-e21a06cda627", "indicator--c32b087f-2051-406c-992b-53c1eaa1ee5c", "indicator--c1d2a466-708b-4776-b20f-f19606e9013c", "indicator--0dcdaebe-b988-444f-9b0b-d2a3c4515f69", "indicator--6ec782c5-8a37-4266-a58e-9bacdd28aa23", "indicator--40a422da-ff8f-43f5-8fce-defd77f94900", "indicator--f7eb75ba-dbdd-4ad3-8b4a-b09518e1da7c", "indicator--00e55e89-817f-42a6-bd6b-4ab421302b81", "indicator--4a2e7766-9162-40ce-b8fb-d5d02fd27a95", "indicator--970397a6-8567-477a-959a-2d5f36c4c2d2", "indicator--b182fad3-3241-433e-b43b-242232548940", "indicator--5f273a83-95c8-4bba-80bd-5a29032f4c00", "indicator--43ecf18b-7860-450a-8c01-5faca75de8a9", "indicator--5e4457ac-0f94-4dfb-8c5e-8da72aa2ccc9", "indicator--1a9f9ce7-2e56-456e-b4d3-995345d42c4f", "indicator--346018c4-bbe6-4212-8e48-9ff00ab1aa00", "indicator--b08b8b92-c38e-4af7-bd8d-2fc65526b803", "indicator--22bae0a8-c31a-45c7-b2ce-24c2b0701635", "indicator--4839ea60-d6b5-4ac4-9069-a324dab8c63b", "indicator--242511dd-3966-4fbe-aef2-9b751ffd2784", "indicator--3df92b20-d918-4c0e-95ca-0ac11ce38b10", "indicator--4120fb3c-b539-4fc9-93b4-1e11196fefcf", "indicator--bc1161cc-a457-4448-8630-42fcec100910", "indicator--4154db22-67e0-4187-b4b7-bd3e24e3fc9b", "indicator--f83926b7-175c-4a5a-aae3-f7c0e47f4c47", "indicator--34a84856-8337-4bef-9105-b1ff0f5f00f0", "indicator--d716840b-b879-4123-8b4d-c2416f8ed699", "indicator--c059f415-ffd3-4225-b809-03a02d265942", "indicator--3fc4e639-7f15-4cd7-9e6f-e3c024348051", "indicator--cf909049-eb29-4074-b0b2-b6744fbeaf03", "indicator--25eac215-fdc9-4f95-bfce-3f31d7275ce5", "indicator--bee0963f-cc7a-4f69-92f7-794ed4f0fb62", "indicator--2ce5716a-29f9-4f35-b952-912d2575ee9f", "indicator--4d1e91cd-95e5-4d5b-98ca-2c53dd02a392", "indicator--1d193d45-5bdb-4a31-ae4c-f91db6b7c78e", "indicator--bbf974c7-c4e6-47bf-99f8-2a3e899ba428", "indicator--527c73da-b03d-4a47-a045-5d8508886115", "indicator--08ed7651-fccc-475f-94ad-b6e6999b120e", "indicator--113eab9b-9a49-4c85-a574-edb6dddea90c", "indicator--d02c25fe-cc01-49bb-b649-331e0737d003", "indicator--b5c427e5-5b69-47fd-a010-30e057b6c816", "indicator--9c5ce87a-da75-4ed7-9be2-4a96f9a3e439", "indicator--d8c927c6-77b9-41e8-8c30-3b8d7f8c069c", "indicator--f20a7a35-2a31-4111-925a-eb12553c52f3", "indicator--642faee5-31be-49f2-b520-6f26b51df7b2", "indicator--2c65e392-3e66-49ed-9511-f1caf124184c", "indicator--898e01d9-f718-423b-9539-5b3fb536e577", "indicator--91d9ebc9-72e1-43d9-afa0-12ca1a81e38d", "indicator--bc271657-cca3-4b0d-a40a-aa04695ce36b", "indicator--b7d83e55-c7fc-41d4-9d74-2149a1565b26", "indicator--bf1f2c1c-e460-4018-93a2-9efea05f414b", "indicator--bb891fe1-15a7-401e-8129-67c9bc7e7692", "indicator--209a1a54-3d75-4015-9217-45f8ee2dca50", "indicator--0c4b9139-df60-4442-8ae6-77b0380d3550", "indicator--892ebee4-12a0-444f-900e-0f968ba39313", "indicator--c988d890-05f1-49a4-8edf-7dc0e2364448", "indicator--f4e3763a-5cd4-4d03-999f-b8f53f7abe01", "indicator--364a1218-32db-41b7-9f78-db77338fc3bc", "indicator--f685d797-c128-4b8b-a3c5-88c5c17617e5", "indicator--470e7e1e-e6a1-41d9-b76d-4fd06879e57b", "indicator--90e080d7-78a0-4475-9da7-5f0454dd93ab", "indicator--07870c67-a4b5-4cc6-bf98-0951dc5fe77e", "indicator--c7791d6b-2b96-4bf4-9ab6-38b870324cc4", "indicator--316af215-b647-4e7f-a3ce-55994940d16e", "indicator--41a7098a-c930-4e22-8348-9e83fbd8f055", "indicator--6b3ea915-01d5-43b0-83b9-65a5d840e388", "indicator--01cc0e99-e1a3-4235-8f20-0a2377591e00", "indicator--fb6fb7e1-a48a-4c65-8bee-07e08898235c", "indicator--02dcddeb-fd2d-4ef8-8530-abb4a3a03163", "indicator--54426c69-62f0-4824-bda8-9fbcc0c2cb04", "indicator--02de2f07-47bf-443c-9188-d19eba2f073c", "indicator--6307f297-3285-4238-b9c0-44ccd0e712f9", "indicator--11d0561d-5fe1-4aeb-bce2-85ed0380a64f", "indicator--7309283f-5893-463f-bc42-8f88bd4ad4c7", "indicator--ef7e4619-a7d6-4b86-a49f-b798c2da3be3", "indicator--69ffd8e2-d87a-4bc0-808f-1d680b719ce2", "indicator--faa5c216-cca3-4781-b9b0-69d241d18f1b", "indicator--d77e8d79-cf4f-4480-a27c-65ade845d3d7", "indicator--1b6130c8-3935-4012-97cf-3671dc7fdbd7", "indicator--cfe76101-e4b0-4ada-8b60-a374d3436151", "indicator--0659b723-2025-4485-9255-121020d749ac", "indicator--6fc18227-a4df-421a-b96e-b8523221674d", "indicator--b294437a-2f1d-492a-83a5-6850c9df57d7", "indicator--33211076-7f47-4873-ade7-ee4f57c01d6f", "indicator--c49eff5d-a548-40cc-840f-62c17505850a", "indicator--67bc70cd-32d0-4cfc-9b34-5f83d19de3da", "indicator--c90af921-b47f-4ed2-a328-94aa53d489df", "indicator--3d0bc9ed-9c08-4ea0-a1dd-37dec6112b81", "indicator--e2d2296e-80b1-4dc5-82a0-d071765081ff", "indicator--a88a8768-8918-4e27-869a-b2410f02ff8a", "indicator--7022344e-3588-491e-b181-9be6eb5b0628", "indicator--406fd5db-1e57-4a07-85e8-9ae4766de291", "indicator--1c1988d9-60f3-41d9-9ad3-491b84333330", "indicator--afeb4163-93a4-4f0e-8662-ee26c6c835f0", "indicator--9a6540c0-6422-4e1d-b365-bfacd6e85503", "indicator--04db1e5c-18ae-47de-ac4f-99b122fe3e5f", "indicator--db2bee23-4a4b-41a5-818e-19dc90ffdd42", "indicator--06bd4960-fa76-469a-b974-e8ca2418d6c6", "indicator--2343f5da-1929-4b2b-843c-b15fa140e48b", "indicator--88331dc8-4ef2-4f99-b2e6-17d45caf5288", "indicator--02936802-62a1-4956-b5f2-5721855ec7b2", "indicator--9939364b-33e0-4839-a32a-72b730c60021", "indicator--c2b445b7-52a9-4cc0-b446-79a5e16bee19", "indicator--c8834807-8769-4ff4-a8f3-d7c6be7018cc", "indicator--dfb83803-aa9e-4fef-ab1e-75ff021cf5e3", "indicator--680ff834-35a2-4180-8aa9-6c55532fa4ea", "indicator--32a59770-deb4-4d7e-9757-70bc994208f6", "indicator--c1379fc2-703e-45ab-9316-cb9ad8ffc496", "indicator--4ddd2144-a25e-4b8c-ad59-b818ad2bc91b", "indicator--c2ca3628-70b9-4a93-b385-12e7c653cd1e", "indicator--543dceff-a161-4985-bcf7-8b8b980ff256", "indicator--6cfb197d-0cb3-4d81-84d6-3fdc7e837aef", "indicator--964c48e8-61b8-425b-b507-0d803a357b3a", "indicator--aec1f461-74ce-4709-80f2-a9345eab89c4", "indicator--40ff00a3-bb49-4310-bfc4-f28555f8eb81", "indicator--1e32cbc1-8781-460f-86fe-c5642d3b19a4", "indicator--d49f5a0c-84a4-4f91-ac55-22d7a0f8c74d", "indicator--4a08650a-cd10-458e-8c13-66b89ba191c5", "indicator--13056d22-5359-4ff3-9475-ca050fad469d", "indicator--e0f8a52e-c176-47cd-8c03-b140deec32b0", "indicator--aba2ec90-6de5-4efa-925b-a62c9d6072e9", "indicator--d547d9d2-1cee-4809-8085-12a8d6172f54", "indicator--da63fbc2-fdf4-48f6-ac75-c42600b51eae", "indicator--bdfaff59-92c5-4062-ac09-b5b92dfba469", "indicator--db57efae-8b6a-4695-9484-4a159225182c", "indicator--8dff7cf9-8cbd-4dd3-8cdf-8029e25e7a43", "indicator--84e40c34-2676-4808-86ea-c4599752ca9c", "indicator--b7b8e940-c8a5-4130-bd27-e9012488dfd3", "indicator--28edebde-b759-468e-ab3b-1b549a1b0367", "indicator--d45481b6-7b2a-4416-9b3d-73bafe7f28d0", "indicator--cc981160-6057-43c1-9059-e5b3111baab5", "indicator--c80e5d2b-d9a6-4dbb-b048-abef4adc21cf", "indicator--638bfbb3-7e13-4a3e-b787-71652614aa03", "indicator--06e9c2b6-f34f-4ad8-a2dd-d2da664fdcfa", "indicator--debebed2-9146-426b-af7f-3208f1c37c91", "indicator--a26ccd5a-07c9-4712-bd34-8640c05c8e36", "indicator--e076977b-9d0a-409d-bca7-a6a61765fa09", "indicator--371e23e6-d91d-4f22-a4c7-391f673451be", "indicator--b0367ab1-39db-4148-97eb-414398211f6b", "indicator--f1cd5f74-ffb3-4ef1-bd3d-64ad1986c950", "indicator--61a8f98a-fa18-4430-9c91-5a783106d811", "indicator--7fbefea3-00ec-4a0f-8a20-8a648cd63f2e", "indicator--aa6d2690-e0d9-4d03-8a48-5c9937d60645", "indicator--5f245dcf-01bd-4218-8b60-b44ac2dc8340", "indicator--cf9c9330-0c8f-4dca-9418-2459eff0398f", "indicator--85bf5980-8485-4358-85e3-2bb8b20a2f54", "indicator--fa9acdd5-4588-4cb9-a0db-0a8041342d7e", "indicator--3988a99f-a0aa-4657-8ca8-4b3767eb579a", "indicator--e8823e11-65db-4f1f-8208-7b14467127e4", "indicator--3d59a84d-3ad8-4188-88da-d79450ab27a5", "indicator--ed6a1c2b-bfdf-46ae-8f2d-6af578044f3f", "indicator--5902da9d-da71-484b-8094-04e42ed99cde", "indicator--3d44bc1f-0801-4946-975b-10dab34215c3", "indicator--fceaedaa-0cce-4073-ab58-305fb08f532e", "indicator--b5e0c77b-9df2-429a-93ed-725c57a81eb0", "indicator--2ba9387e-9d65-4789-aa3d-c1234755eed3", "indicator--d6a459c3-1764-46e8-b552-b049be1aa5e1", "indicator--74988970-fa2c-4d96-99a2-c92b3653023a", "indicator--e6f946d0-43a5-4e3f-874f-a99a77d3efdc", "indicator--a0f40445-f956-470a-bf03-46f4aa05d033", "indicator--d8d49738-9aea-4aa9-a646-04a63a88a498", "indicator--4ea8821a-c73e-4d8f-ac99-06c9d2b504dc", "indicator--9e3de33a-bf83-4dc8-8673-31bafd2c9f58", "indicator--dbefb3a7-fbe5-44bf-9c81-4a905ae95429", "indicator--630a8104-5973-4c6f-976a-dccd2cbd3be7", "indicator--ade5d9ab-2ff3-46c1-b7ee-75a59d3a4d84", "indicator--51fba5c6-d602-4d2a-abfd-8852f13ea03a", "indicator--62cd4663-39a0-4a3b-970b-439e35f9daea", "indicator--54e702dc-d579-40dc-b464-34dc7e559444", "indicator--485abeeb-71c8-4802-ae39-ee51caba81f0", "indicator--5dd6117a-a620-4ca5-b658-0b7ba077bcf9", "indicator--1308d77c-835c-41d7-be76-c77329d216d5", "indicator--ec919827-0929-4eeb-ac05-ee5ae32d27eb", "indicator--9a27533d-7380-4287-bf82-9ce4ab23bf62", "indicator--ce9c06ed-fc82-408b-b78a-bc0970ce853d", "indicator--525f5fe0-b4ab-42cc-a0a2-fd3e0016ee13", "indicator--4dabb501-a058-4363-8e04-9d5331b19b2a", "indicator--03e98b17-f4e0-4cbb-9513-92ae948a3b6e", "indicator--bbab6bdc-a62c-4a8b-8cfa-6f249ebba32d", "indicator--781036d9-3481-48f0-958d-380f121ba91a", "indicator--2a3bfc75-d157-4def-801f-6ede5b43e4d8", "indicator--281930a3-585a-424a-80ae-341df7e45c79", "indicator--0e441592-d9dc-459e-8cf2-cb52446b15e7", "indicator--3eeec4a8-56a2-4ba1-8628-74bf84f0205e", "indicator--df63f9e8-87da-4a57-93d6-f9617e72b4b4", "indicator--66441a8e-9785-4ba7-a3c6-9a4de5d08ae1", "indicator--7eea1f27-38b4-4d9b-980b-6dffb1667950", "indicator--696deeae-f72b-4f83-98a3-7f91a5623ae7", "indicator--2470361b-96af-497d-8c70-477347c7cbba", "indicator--3010be5f-97f0-490a-8849-4a646f413904", "indicator--3dadc468-ce8e-4eb4-add1-a562802c1942", "indicator--56a5b0d0-9fd7-4ad5-b865-03f2f181d377", "indicator--1348eca2-e047-4327-b406-6edc395e3360", "indicator--9c8898e4-1cf6-476f-81eb-480ec8125c75", "indicator--08f7d80e-a072-4fc1-94d1-83fe68884534", "indicator--de41481f-8803-4401-8d5f-d32cb3f27f9c", "indicator--59260879-66b8-40d5-84b7-7476ecb97bf4", "indicator--29a95ea2-1ec5-43b5-99ec-bddac45701d4", "indicator--a44e98c1-1b45-4a07-81e8-49535b9873da", "indicator--26ae847e-58a3-400e-b132-24367dc7b502", "indicator--15dc292f-5fc0-411f-a4c1-65e1a2501785", "indicator--806d20dc-490f-4389-abd2-19db83ed60ad", "indicator--7d1f89bb-6c37-4ec5-a37b-b38ecf3f5307", "indicator--9145f193-11c0-4a77-907a-5075ca86dc19", "indicator--08cf3096-9668-4d1d-aa85-25bcf0fcf8c4", "indicator--ae8fd91e-a35e-425a-99b5-2555f774a9e0", "indicator--7bda3ae4-43c9-41b7-b0fb-5a5eb99ed5cd", "indicator--828e946c-5314-4dff-9b58-51d9ca80e825", "indicator--1699f48a-1232-4916-bd20-7926856e2cd8", "indicator--db657c2c-9823-49ee-a7a3-9fcbb7adbf07", "indicator--4277a5b5-11f8-4cf3-841f-75d0b11f1574", "indicator--a5a68c4c-0d02-4537-870c-c0211035c501", "indicator--5c3ab8a0-aa12-49f8-9072-1ec0d04ff270", "indicator--b00dec67-f8f0-463c-91f8-5e0f93515abd", "indicator--845d9972-069a-4e4e-9993-7469c116af5c", "indicator--6cfcf328-f014-4666-9e93-0682b1557c48", "indicator--73bfeac0-1381-4dc6-aa2c-b479e0416623", "indicator--c41f361d-9ffd-4373-988f-c8fd3426b128", "indicator--a5f3e27f-36ae-4e1a-90a6-9ccb1fe5362b", "indicator--19d52780-1835-4e87-b541-d103421bed09", "indicator--336fa1a3-7d8f-496a-b9c7-3745d586c8fa", "indicator--4460c1c4-e1f1-46f8-889e-6b599839fb0b", "indicator--436d04eb-0c2d-484d-a62e-2a7875c1b110", "indicator--d2e09e7b-7ef6-4405-a625-55a334148f0b", "indicator--f7c918ac-9295-4805-add0-490a4df02512", "indicator--d47616e7-67d6-437a-aae7-238f14fe185d", "indicator--cb0a8ae5-18fc-4e31-a09d-0fbb23a297bc", "indicator--ea8bb5a1-7e13-4108-b2f9-443719dddccb", "indicator--a04d34ee-e1bb-4c91-988d-dabe4210e31d", "indicator--a495f724-38dc-4bc0-873f-62cece6e1a4e", "indicator--f2d12627-7625-4417-a56a-a9b6279152de", "indicator--4e2c6ef4-041f-45e0-9a9c-6684d5983cdd", "indicator--bbe34646-99cb-43f1-b563-3d7827cf54bd", "indicator--b88d00b8-bb53-4306-8f95-b8db17944907", "indicator--7cf29650-e291-4f68-944a-f497df3daa97", "indicator--3f1325a6-0ce4-4cb7-a022-a7df4272792f", "indicator--e6746a76-0df2-48d3-b1a8-954963103b77", "indicator--0d149012-4c50-4ba6-b1a5-0c931f7a4743", "indicator--75e67b02-a2c0-4172-83f4-8e09ea870de0", "indicator--96507405-8f5a-4b20-86cd-a937dd14be8d", "indicator--897a1e5e-348d-4ebb-a989-d3d0290199dc", "indicator--c01fa3ed-0c95-468c-a3ff-1b3a58db92ea", "indicator--8a975331-efe4-4551-8d63-17a4e8e22e2b", "indicator--6f3e4abd-02cd-481b-8bfc-9ffc5fd46b5f", "indicator--85379207-adc6-4a32-b5dd-cf9764fb125d", "indicator--1db90c90-6df5-4ad6-be17-0f288147fda5", "indicator--a254bc84-acd0-4493-9d8f-e0066a0ccd42", "indicator--390c2b17-ef6a-4147-9694-ae14348bf740", "indicator--f3ff7a02-aea1-47b1-8b90-b1ddf236fe95", "indicator--d684c147-6feb-4c8d-a3d9-b0b573d1fedd", "indicator--e42e51a8-eec0-4cb1-ad7e-6a4d259b3668", "indicator--e1a9df30-e42b-4c0e-a64e-f550501f360e", "indicator--c9022ea0-266b-4bd2-848e-2182b82ce271", "indicator--865c59a7-0c10-4a71-896a-da7aaeb3c0c6", "indicator--1a7fb291-599b-414b-aef1-86041a590ccd", "indicator--ccb8e4f9-ebb8-47c9-b57e-c4a5fb6baa2d", "indicator--42b52d38-c2d5-4f86-9cc5-8b607df5f620", "indicator--101d43c8-b5ea-40af-942c-c96a1e05a5c5", "indicator--4c1e21a3-4f9c-4ed7-8b02-5594b9f83acb", "indicator--bf426b5b-c9dc-4d47-8fc2-761cff91e952", "indicator--ada3bf3e-82d1-4361-86e3-54ae4e4f7833", "indicator--5683a97e-ea92-4ee5-890b-6e73b2477f03", "indicator--e41f7b03-2c28-4e1c-a2b3-3183760c9e46", "indicator--816abd7a-91a0-4d0a-a6b8-b4df83c8ac7d", "indicator--48696b95-bb1e-44f8-b6d8-b6adbe30c1fb", "indicator--e0cf1fd2-a4ff-4d9a-91cf-3fb5b58add3e", "indicator--8650d103-12bc-48d9-b970-feee0a1198d8", "indicator--589cc7ad-2257-4fa4-bffd-3770232debcd", "indicator--ff59eb7d-973b-4377-9c0a-605e98ac9432", "indicator--f851c643-41af-40d2-8d17-0c3eaf84ccb4", "indicator--768834bc-4a60-47a0-871a-97ab4aea4bdf", "indicator--da85b7ab-03b1-4b6b-9b7f-a3fa84bb4bb3", "indicator--29389947-0444-4372-81eb-3861e15381cd", "indicator--0160f2fa-3f9e-4a20-a5c6-45cdd279044a", "indicator--362ca0c1-8d9f-4863-9e14-1e259b71213b", "indicator--50525050-348e-4431-9f02-18e4557c3306", "indicator--18131076-125d-4671-8c46-ba525e19bd77", "indicator--951b23df-dea8-4641-801d-58fbc8bb60c8", "indicator--5aa5cb6d-83f2-441c-b734-8e91bb526616", "indicator--8aba42f4-6b9f-43d5-8e7c-d262b64c0f32", "indicator--6d97e73d-ff46-4ff6-89c2-1be8bcb57585", "indicator--ed2057b2-0b98-471e-a063-c9bc2e27badf", "indicator--fd275036-9623-4c28-b4e7-11f6ab662e20", "indicator--9e459b54-3c2e-494c-b5af-c70151b42443", "indicator--391c70b8-fe92-4e11-9698-fd9a4b2c4f59", "indicator--aef7aa47-13cd-4c6b-806c-341089aa6e6b", "indicator--99c880e8-433b-4005-b3c2-66bde1133a33", "indicator--1182e479-6390-4e0e-99e5-2f4c69d1baf8", "indicator--d07fc6c7-d771-4846-9df5-34eeac0150c4", "indicator--a3ed0896-a559-4261-80f7-d489026c6732", "indicator--44a39297-6ee4-4c82-a0b3-77c3f72a016c", "indicator--6a3e6e1a-1f2f-4805-aa8e-7b6e26179573", "indicator--fe773def-250e-4a8d-882d-a751d087a614", "indicator--4d6dbfac-9f22-4c48-aed8-93b8f4ea74d3", "indicator--4ed507ae-a4d2-42e3-a5bb-78a4b199dfb0", "indicator--ccd2f8e5-4e8c-4284-bd15-c9351510c8aa", "indicator--cd4984c9-5cf4-4729-a6f4-68fc82ba7c99", "indicator--840b160f-fe77-419c-9aa6-1fe650218e65", "indicator--5b38c8dc-92b3-4891-936b-a6589a2d34ec", "indicator--51656304-0b0e-4e85-9ea6-c47ba5c97dba", "indicator--f60fbd81-d492-418e-800f-93c2670a7a24", "indicator--c542750b-1b83-4571-8eb2-aecfc2f3aa23", "indicator--56ca3559-8d2f-4301-a09e-ac9796695379", "indicator--8e005866-72da-4a08-9112-7f21a669d58a", "indicator--a4d5f725-cfaa-4cb4-bb9d-11fe855152ab", "indicator--aae27f0c-1129-49b4-a16a-0345e71cd4ca", "indicator--02fc7cc4-79b4-4864-ae59-41e964483dbf", "indicator--c159eb91-1839-43b2-8160-279d9ccf3582", "indicator--a06ea08e-451c-49fd-a20c-ee1afe71b9d0", "indicator--c0e18107-99bc-40ca-92be-cb02cf2d4f44", "indicator--116a0d78-ab73-4018-8c14-3c707dc4fe31", "indicator--cf841e3a-197e-44e6-8e6b-89491bca2113", "indicator--4225174a-2673-4db7-9512-cb6afcc300e3", "indicator--79c23f34-664e-4a2a-901a-632ad7a7d168", "indicator--d20ba45b-78dc-4cde-9d65-ef0112a13132", "indicator--f5b79683-6bc3-4e9a-8861-874971d006b5", "indicator--c8f41fab-afaa-4b11-85c8-ab4def0325b0", "indicator--9fb623a0-25a3-497e-b707-525c3a6bfe88", "indicator--645d7957-f688-4ff1-9a7e-974545d77bf1", "indicator--ab872cc8-ae00-4d87-9c3d-a393935309db", "indicator--f8823301-21f6-4d82-9d3a-f599ac74ae6d", "indicator--a2bcd4c6-a4e4-49f0-8ae7-893392cc4228", "indicator--3fa8593f-8b8c-4d24-8b50-2d4440082133", "indicator--4963bfe8-6cb3-4c1f-ae9d-7904b6366bfd", "indicator--3a04f751-842c-4315-a7f7-a3f76239d248", "indicator--f1f98b19-327a-498d-ab36-bcbe102ecd3c", "indicator--73143d62-7c01-4ebb-b3ec-f4b2ea80c39f", "indicator--b42181ab-2b7d-4213-b98a-0e6cb7e85cbe", "indicator--aef65e71-ac1e-4e9f-abcd-aa971c7851b8", "indicator--23ca6563-aa90-44fa-a4e1-1b302e171467", "indicator--81c6ae9f-e4c2-42d8-bcc4-77b7300d83af", "indicator--e7dcf1aa-8b61-4781-b963-0e491b52ea12", "indicator--9f3f11b6-6127-4f46-a38e-f020048cf0d2", "indicator--52bd793a-6b7e-43b8-9b2c-314430af0c6d", "indicator--959ac270-c005-410a-a645-9aaad01dcd0d", "indicator--328e86c2-e91a-48b1-ad62-999de97346e1", "indicator--7a9b9c7e-ec38-4700-a57c-2ea867b8edeb", "indicator--4ec7f62f-86b1-4913-855a-8d12a640344b", "indicator--5d426995-e34d-4030-a682-33916248ab52", "indicator--4706e95a-3803-4873-ad78-3ccd94f9c0b5", "indicator--9c92e2be-e144-4768-9cd0-08d40e73b61a", "indicator--d532311d-7af7-4288-babe-dcb9928f94ba", "indicator--f6d1d41e-9a60-4fcb-a3b5-a434bf05bb64", "indicator--a16217a3-4cc3-48e9-92e7-9a51eb4afe5b", "indicator--9e243e6d-8bb6-4677-b91e-43b141fcd5e0", "indicator--9e373d71-e62c-454a-9d5d-f4ce2a43dd46", "indicator--9d4922f3-116e-4081-a934-3c1ea2693358", "indicator--ad48af14-5201-45b2-bb21-4e49d8f154ae", "indicator--20a31aeb-331a-452c-9f11-ae8d30f79cec", "indicator--815e5965-2d0d-4d35-a9cc-c4c63ba421d8", "indicator--76304cf7-b8a6-4346-a160-aba4bce72ed4", "indicator--f16aa947-fe81-4f0c-908d-05c24625a66d", "indicator--d531b4ff-508f-4536-bb1c-806e4c5338cd", "indicator--38124e24-8818-4569-b1a0-6c56833d80bb", "indicator--d3bfdf6a-dd4b-419d-a462-704ff276e344", "indicator--ee9a4859-5646-482f-8b44-557c656e36b5", "indicator--d810f917-7203-4a76-a645-3d082d650236", "indicator--49175393-7de1-4681-959d-da666ab5f28c", "indicator--a5681faa-bcee-4b40-bcb3-f6ac6b3c2e4f", "indicator--24e95bc5-b38d-46bc-9d66-eb0a516505b3", "indicator--37eb1a7d-b539-4548-8d51-3f6df16de80f", "indicator--9790d912-e7cb-4560-b71e-86f7f5bdc49a", "indicator--1e66c1f2-9691-4722-9bdd-f2dcce084636", "indicator--afca3589-83fd-4b2e-8693-03724b8c4d1a", "indicator--a6d2adf3-e8ab-4416-95ee-8f1c54a9274e", "indicator--1160bcab-98fc-40d5-8369-1d9c56c33179", "indicator--df81a814-d5dd-409b-9913-d91340f9caeb", "indicator--4d57122d-8522-43e3-bb2c-ba8d1c9bab6f", "indicator--04d92f51-6d8e-4335-864b-24cc59bcc57b", "indicator--830be855-acd0-4846-9057-a63060d8bc3a", "indicator--6cdbf29c-bbc8-4d2f-9506-62d7c826e238", "indicator--fbfaeb8e-6676-440d-bcec-0cf1b36ba3df", "indicator--e0e7896e-74b9-4f03-aea7-8627027a6fc9", "indicator--1213c89a-723c-4cac-8f0d-b75a76d46c00", "indicator--38e54ec8-0575-4f9e-bb63-88862905a3e0", "indicator--0d1c9c33-5818-4dc3-a1ce-a96c37f5f283", "indicator--9d56aea1-7cf8-4522-8425-69408194deb1", "indicator--87a9d53e-8ea2-4349-ac96-134a526db30d", "indicator--43351e43-07e8-4801-92c1-d282f3d93c8e", "indicator--e0ee2ec9-00fd-4373-b296-16a67a699b5f", "indicator--b87d6676-895a-4109-b259-e80bebf0b1ac", "indicator--5c125879-5404-4f13-935e-f13dd352515c", "indicator--8c707ddc-ee4b-4982-b80d-c4b14cc8fc68", "indicator--5e7e7ed1-1493-4177-a247-01ffdf3a340a", "indicator--6ac0efd5-f93d-47ac-901f-5d5d9a9ce244", "indicator--781ca297-6ded-4526-a040-1119de6db83a", "indicator--60f03340-f093-4990-97cf-7faa8923e0ba", "indicator--1a069112-9807-4fb4-8d0d-fa6330dfa2d9", "indicator--6a198b02-23ef-438d-a8a6-ea37385e8e98", "indicator--a19fab5e-8d1e-4423-9748-76160b98f495", "indicator--9d6ac0df-67d6-4a03-8650-a774fa5c1866", "indicator--584e255b-5915-4617-b4bc-c124599a2f73", "indicator--b20d62ff-9a9b-436b-af2c-2ca7e6cfdb26", "indicator--6bf3444a-3cd5-4438-b7ea-7bb7dfc90bee", "indicator--c819b841-6395-4c8b-bd9b-76e2f2050569", "indicator--4fcce3e6-9e1a-443c-a22f-1c324e02594a", "indicator--d3a98142-a652-4273-b6dd-02a0e94ef564", "indicator--4717bb90-8e90-4773-bb3f-6320620dca44", "indicator--6b66dad2-0500-4849-bf9f-c3d97225c62f", "indicator--c1d6237e-6684-4080-81f8-f772801608da", "indicator--a0ed0282-caf0-48b4-b65a-99d613bfda1c", "indicator--eb0b471e-a929-4ee2-9885-4fe3373df0ee", "indicator--8bac26d0-62d6-4be5-b54b-158375ad4c2b", "indicator--7423adee-8229-4540-b032-f0dcc8d376d1", "indicator--906cd8ca-7a07-49bb-a94d-454ea2ee6dbf", "indicator--d40ea27c-b569-4ea7-b5d3-e2be42a096a7", "indicator--ef628f89-8dfd-44eb-a887-1384aee74678", "indicator--0aeb74bd-d7c4-40e9-9497-b0661e0e719c", "indicator--2997c0ec-4cd2-4353-ba17-e9cfca690987", "indicator--39f1cadc-b66e-4353-92a5-f1b408d04303", "indicator--c1568df3-1943-4b89-9c2c-72b24c802281", "indicator--b38c8c43-b91b-452d-952b-f7f29d3f35fe", "indicator--4ab30699-07e7-4616-ac40-e488a9b1236b", "indicator--faecfbda-3f96-44b6-8fe3-4038e10cc74e", "indicator--32101de4-b063-4560-ad81-b7310b3d9131", "indicator--5b059715-d5c0-40ab-98de-c43f8e2e2703", "indicator--064c8372-b715-4eef-a37c-79d730103d46", "indicator--e9d80f90-66b4-448d-a19c-a0c39c127bf9", "indicator--fe3b66a1-8942-4818-bc5f-97c13fac2113", "indicator--884c060a-d212-47a1-b20e-3721d7aa8758", "indicator--bbafcbc9-e223-4f2b-bcae-6c3fb442b390", "indicator--dc3e0d81-4bdd-420e-bef9-59144cc4fde7", "indicator--b493fe69-7744-4dcb-ac8a-e0c85320a5e2", "indicator--3429008c-7793-4aab-9af1-9dc9846d3c92", "indicator--a6cedeb4-f5e8-4bf3-a740-ba1f659b8706", "indicator--bd0ba36c-eedb-46cf-9ea9-95c08baad03c", "indicator--4e136cdf-8067-4cf4-94c2-1036e8bc4f62", "indicator--6e1a4bc2-7ed3-4ee0-b753-e4c77a1611d3", "indicator--5548d3e5-bc08-42ac-9712-b28abb306521", "indicator--483d26d7-d9b1-4086-b598-3efef758c978", "indicator--d3fc52e2-3ee7-496a-896d-250b010c5275", "indicator--747b5c24-ddd3-4672-9c06-256c6ede34d7", "indicator--812f7b51-a1eb-4214-97c7-0dd57108bce0", "indicator--75315228-6203-4df9-8510-997b38e42fa8", "indicator--548c4b56-93d1-41db-849a-3a55c57002f4", "indicator--eeb0e4cf-9a5e-49dd-92c9-0855ffff5723", "indicator--03bf9761-482d-4bbe-a30e-ec3a74d42ce1", "indicator--6742d552-74c2-4e9c-a965-a06362a578e0", "indicator--1758617a-20d6-4668-b8e5-4819b43cfbcc", "indicator--6edd00ba-2925-4fdb-bb39-8c2f55ddd0bd", "indicator--6ef0ac33-eb9f-4f96-a55f-6db20786a5b1", "indicator--d4be3fed-5b48-461d-9420-33506a0fe835", "indicator--a99e8792-d191-4159-a0af-2728a6104129", "indicator--b4163a40-ece8-426a-9646-1aaa38aa9595", "indicator--74d02c3f-783a-445e-b85c-779b078b1cb2", "indicator--bc125750-176d-463d-816d-394f6c7715d5", "indicator--cd02e9e1-ad14-4877-9aaf-204104309dee", "indicator--2431ccf2-7fb2-4527-af48-dfd0489cadb0", "indicator--8974def0-f178-4e2b-8bb9-0920c12d6710", "indicator--169f6205-614d-4836-8ebf-9f1db4c3a8bf", "indicator--82de5544-1523-469e-aa7c-c21e72a23844", "indicator--e8b41740-1f40-48cf-9eb7-c08bbdf27f02", "indicator--702a519c-93bb-4a81-be31-ac401ae276ec", "indicator--cdd91b8b-a2a7-468f-92c0-e772c1c77358", "indicator--ccf25e0a-d099-495f-a414-a2dbcbb583a4", "indicator--1f7b59b3-ac14-43e7-99fb-e9eb0ad8198c", "indicator--c25d7820-5938-4adc-af90-5d6d7088ff95", "indicator--920089de-e816-4a45-8af5-8dedf79decaf", "indicator--f94be82e-de81-4bcd-bfd8-27ce4427285d", "indicator--c96fe559-90d3-402e-8123-c40d776668fc", "indicator--3145125f-7ea2-4a66-a641-918ca2bd60a2", "indicator--b288bac3-27c2-47bb-acfa-b26e2808110a", "indicator--0a0eaff3-900d-4cb3-9743-0f71444f1c40", "indicator--2cf15cc1-ec49-4ad7-803e-c74aca97caac", "indicator--dbff8acf-64cc-41b0-b449-78215953132f", "indicator--387bcfa6-d419-460a-bfa1-46f0d760ad4d", "indicator--5c4ac47f-f1a2-4759-9823-149895a2b7e8", "indicator--dbbaf6c7-319a-44cd-8ced-4b496a53697a", "indicator--cdb5b1e1-5a37-4a52-85d8-a94b43b506f8", "indicator--a98b115f-f8fe-45cd-ab78-ce9527235bf1", "indicator--84a0b895-2664-4377-a097-2373f56d92ae", "indicator--101c5f57-094f-4d4e-8c86-af0c5d66d737", "indicator--1b05d41f-c343-4244-be3c-15a09b123719", "indicator--f9fb5f46-bbc5-4899-b393-9124ee9dc01c", "indicator--77c683f4-fd54-4ce1-a3e4-bd99109a4e32", "indicator--feaa9ee7-85b9-4600-af65-2a7e110688de", "indicator--3ebb45b2-460f-4048-bba7-b276153c096a", "indicator--6c1c0c52-f6c3-4f1f-930d-bdf60facfad4", "indicator--06fe2be2-d71c-4d2c-9acf-49b94b81393c", "indicator--52577670-7b7c-487f-809d-43ff3e688d1d", "indicator--29656508-10d8-420c-a7a9-60076ae94af0", "indicator--42f162d1-f164-48e6-a82d-f09fbab3f7b9", "indicator--711908a7-d546-41ae-96ea-c92c91d4b947", "indicator--e01e1994-e21e-47fb-88d0-701ed573d76e", "indicator--886e99a5-2639-4c1d-8ee5-bd8dfc929eac", "indicator--41e69cab-f9dc-4a6b-a9ca-1ba297b5cce9", "indicator--adefcd84-cefc-4403-a639-dcbace5d0279", "indicator--699f0c92-1afe-44cb-9d43-0cdfd18abcc8", "indicator--55dacc90-5845-4fc2-b6bc-cd966a4ce9fd", "indicator--b0a05122-4939-4775-b549-539764823364", "indicator--2e02cec0-60e2-4eeb-ad73-5ac9b062599e", "indicator--6053c02a-98e2-4619-8e12-b45b20d423cd", "indicator--812c145b-1c60-4267-be5d-aaefa820be74", "indicator--f3fb534e-86cc-46ed-8f0f-bf33e48afb28", "indicator--6e960c63-b4da-42f3-a790-63432e299a08", "indicator--a0d5025b-224a-455f-b976-0f57131aaf47", "indicator--113421f1-171b-4643-ae9f-3b3288cff182", "indicator--cc3834dc-c421-44e7-ac74-29267f674e6d", "indicator--18c9d092-5eeb-4f93-85d9-8511a2ff12c5", "indicator--f6ca47e2-4562-4a5d-9487-894591335865", "indicator--057228e2-2a54-4d9c-8bb9-fd6a28d88390", "indicator--999d5dd1-b15c-489b-be52-70e22b3955dd", "indicator--24d296af-1f10-4b42-97df-3626c5ff09e8", "indicator--6c340b0e-3be0-4f43-ad33-15303c39fefe", "indicator--a0c46d7d-b3e3-432d-b1ce-e87f52e64280", "indicator--bbd3daee-4cd5-48ea-ae2c-eb292379a979", "indicator--486ffa6a-9cc4-4e22-83f6-8c919b121d01", "indicator--c6d99a9e-1af2-441b-8008-13481dbc4b2b", "indicator--0cad2332-b36d-4fe4-8513-ada1da20e98f", "indicator--a0cceab2-9087-4e4f-9444-6999bdec5e08", "indicator--d0b91d71-33c2-4661-aaaf-b02769fa8caf", "indicator--278cefa8-72ea-44cf-ae2d-ae161ec6896d", "indicator--6faa693f-279d-4cdb-b4a5-25614c792dbb", "indicator--88e07d1d-95f4-493f-ad87-2e5a090f093d", "indicator--f766dc2e-0504-4434-92f3-cc1894675c70", "indicator--30bb6db6-640c-45a1-a587-bbe73438ba84", "indicator--a5a1516f-74fd-4dbd-84a0-ac5187638f20", "indicator--6db28409-6ecd-4ae8-adae-e43d7a3e3a18", "indicator--7277943b-2e88-4bec-843d-3c8c1163f0f4", "indicator--bc100ec9-385a-4ad6-a24e-38eb36c4c830", "indicator--b156fcd7-9ae2-467a-b25b-0cc909460a6f", "indicator--a5733ce0-ca80-4b84-ae24-3c504b3732d5", "indicator--61a39416-958d-486a-952e-2cc00bbb3fdd", "indicator--a69ee83b-470e-497e-bc92-df1c50c7b263", "indicator--8bfe081a-afb7-40d3-8323-0ade015ffdbb", "indicator--4245962e-d585-4fb9-8d20-6da280de105e", "indicator--6fbde6d1-f2fc-48cc-9066-5c86bdbe40ab", "indicator--c20aa199-876c-45f0-ad8f-0f3130fa8e4a", "indicator--a6f113fe-9fd3-4aad-864f-f237da07d15e", "indicator--f5659576-2f8c-4ef8-ac6b-c5795a904bb1", "indicator--ca6143d7-1c4e-48f4-9328-5c6a67f508c2", "indicator--cfca9a73-10f9-41fe-abab-dcc8ac4c495b", "indicator--7425258f-8b20-42eb-ac85-9aa39ff7482c", "indicator--e38aaa24-e04f-42f8-8e73-027cbad6727b", "indicator--75923da3-d751-49aa-87c3-44027d803fcb", "indicator--ff70fe3f-2c5f-4c6b-a054-92baab53eeb4", "indicator--7712b489-8a0d-46e5-bcb4-ced6811c109b", "indicator--d478239b-4e6a-427d-ba9b-54ab391ab1fa", "indicator--379fc763-07d5-4d63-adba-712c5161a28c", "indicator--b62a7b32-7b3e-4e4d-b30a-59d24497c498", "indicator--f582fda5-ac55-4841-bb15-ff5a735b8581", "indicator--edb8245d-efa2-4692-ac0f-4f010847497b", "indicator--7614589b-fba6-46ab-b01b-0c746e7c5b48", "indicator--8802956f-6bcf-4ac6-b239-a8ed37d9938e", "indicator--7950f6b3-fa5c-4b76-9a97-a1c5359f383c", "indicator--327bbbc7-1db4-4d59-be1e-6a7da6f7ec53", "indicator--1f0023ab-2707-42e0-b1cf-bf3ae4dbde88", "indicator--a6290f74-e903-40d2-84ab-34a17223629b", "indicator--e89ffcaf-9eb8-427a-a2e2-4aee0c846544", "indicator--d14d3dd3-e640-428e-ad4b-49c3e3bfab26", "indicator--0e5b7b68-5d59-44ad-b663-401bfafc6fa9", "indicator--e8f0e258-27a8-4a5d-9c69-8145af8ef5f7", "indicator--68420d2f-11e4-48cd-8868-d66a542b3f9d", "indicator--1ebf56e9-2119-4807-b949-ae528f7a1b0e", "indicator--5202edec-9507-488b-9a14-2ca214e2e4a9", "indicator--c8989096-fe07-4ce6-b81a-50fb7c665168", "indicator--3042ea3b-349a-45e7-8dbc-5518749b1001", "indicator--036f4a62-ee9b-4be3-b32d-58d260c5f654", "indicator--f357da67-a816-49c7-b87a-bd21d58dfa8a", "indicator--146449b5-f606-4af1-b936-2cbd0089b62e", "indicator--1c66ad4e-47b5-4130-ae88-3fa2162264ec", "indicator--959f1b7a-a45e-4387-9b95-ecfdeeb4b34b", "indicator--285ff520-209d-4a3f-b9df-368e4012fdb9", "indicator--c40635cc-c0e9-497b-b91b-0a4b12c687c3", "indicator--8521b960-5ce9-4b9c-a563-e38708f20796", "indicator--8308b489-cec1-4771-9d08-38934650c78f", "indicator--94fff70f-aaaa-428e-878e-881e1aa5f033", "indicator--36f4aa2f-83ca-48f0-b048-65c91a34ea95", "indicator--1a598f2d-a3a0-461c-b227-d956ca289f54", "indicator--a37475d0-9f44-477a-9d17-b3267256041a", "indicator--75b27bb5-0e26-4ee7-bc6b-2b3f54f557c6", "indicator--4052dddd-2908-4708-b875-0f2ff18b2eb6", "indicator--274d4ca3-b26e-4881-8436-663657d21277", "indicator--12f01f9e-ef9f-4461-b902-db57b9ed2072", "indicator--7a39d988-49f2-438c-8fa1-b706c4bb74ab", "indicator--d62db2e0-4c56-49d9-971a-1bbc1d1bcf8d", "indicator--f891755b-5dd8-4b3b-9c38-645bb1d0087e", "indicator--ea9cce96-a64d-42dd-a305-aa31a21f6f9a", "indicator--19048d1e-935b-49f4-be24-882c02a05129", "indicator--f0db8857-5139-46b8-a91d-63ee2a4e1b9c", "indicator--8db6768b-1710-4a6c-afef-da3d8849301c", "indicator--4241349c-8f77-4e3b-9d42-2540c8b74303", "indicator--d1f49d73-9068-4d02-9a74-25ee42b0f4df", "indicator--4234f720-475c-4a3a-80a9-2a53a7886c4b", "indicator--6a9e054f-58c5-4477-b3f6-d2605d3e5dd2", "indicator--01949d9d-a214-43a3-85a1-fd4ec829a85f", "indicator--c38dc817-ffb8-47f8-ac17-816332cf8326", "indicator--48cdf2e2-e8a2-453e-8333-9e28d30261b1", "indicator--d03ec6bf-32d5-4235-93b5-5e7692b2de8f", "indicator--8c25aa70-8731-4651-855e-23f4e551d8db", "indicator--3ac8c711-d897-4ddd-ac48-3cc287ceb492", "indicator--9c99fd71-6324-4c6a-95fe-138d69104b46", "indicator--fe770203-2a4d-4a3a-a06b-cde0a7d075d6", "indicator--e67f902e-2b31-4f4f-bb36-64781a3fc582", "indicator--f5803eed-f098-4c1b-bb67-35761a472b20", "indicator--34042445-0f9e-4879-9932-d6d5a93d7d77", "indicator--d26b7f87-9b4a-4f1f-93d0-d8eb2961cef3", "indicator--9de9b2c5-8d1c-497e-9f86-8dff583cbb92", "indicator--4f8ab274-a1b9-4196-9c0d-6333b6a4c0c8", "indicator--ca18a7e7-07a5-42f1-b312-3513b446a41d", "indicator--ed70c016-0624-4cb9-aa79-7b9880aeeebc", "indicator--14921c4b-66c3-4d22-a0c8-a42ff8254909", "indicator--0c432096-75da-4e51-9f9a-538d46a2fef3", "indicator--39807d1c-ced9-473c-9c0a-bb8a61e6b261", "indicator--30a027e5-a61b-4642-9743-a9e6581d859e", "indicator--332e197f-61bd-4daf-8af4-a725dbca28a1", "indicator--2bd6e51f-6f4e-44d9-b564-9d7ef3635b9b", "indicator--c9ffeee7-4501-4a4c-ba00-ae706efaf60d", "indicator--d4f70111-8782-49da-8ed1-b83140b19e59", "indicator--fb846d2b-ddbc-4871-acea-6e13030e21a8", "indicator--1b8a89f3-aeb0-4c58-a0c5-bdb6d6d998ac", "indicator--21335e2b-3be9-4b34-9fa8-ad2cdf617f19", "indicator--3b71ad24-40e2-4fcd-abaa-349f986382f9", "indicator--a37c1ea2-b4a2-4638-8fde-2c10ea44ff70", "indicator--b4b7b93b-8f3b-49a9-9068-2967d44b1d34", "indicator--2da68edc-4869-4746-86bc-ee66f718a0c5", "indicator--556888eb-3d5b-4b9a-ade3-5014cfa94e54", "indicator--fed16242-6627-4d74-9a5c-bad68f0f0250", "indicator--bdb85e63-aac1-424a-80e8-45a92e709760", "indicator--a89d892e-c554-4ec9-8b90-4c3f2e29d8a2", "indicator--ca923269-b586-447f-a307-d6dadbfd7af0", "indicator--7039c348-b88d-4c32-bff7-fc5544e5f23e", "indicator--ae2f9c9d-c2e2-4ffb-a34e-969595b85a2c", "indicator--d3eae537-7b15-4f45-a2be-55b497eccc68", "indicator--0dd79d4a-0b45-47ce-8e0f-1041904b257b", "indicator--344598ed-de09-41d9-b043-5b8666c05f04", "indicator--623d2384-00f0-405d-aae4-4b704e2ce813", "indicator--34966b7b-8334-410b-9e9c-5c72ca077d06", "indicator--a8d5dd6f-9602-4dc3-8371-ed7b811c6503", "indicator--f2c334c5-eddd-4a8c-8c3c-43b7290bf008", "indicator--0f023a22-4b0d-49db-a0cb-b3659fddf7fb", "indicator--fcb49f00-f0e6-44de-a8af-6890ebc0bfc9", "indicator--504aef18-4d1f-4f73-89a9-718293582c66", "indicator--2b1203ad-d018-4368-b8c2-2ac05c02ba7f", "indicator--3b12d1cf-1edf-4528-aab8-b656bcf913ac", "indicator--de66ae92-f44d-4592-8223-3edf3c3376bd", "indicator--20535e8e-720d-4a29-a39c-7b1fdcc6a2ed", "indicator--6bac1f7b-406a-4968-8161-5ac0a6ad25fa", "indicator--8eb8b7bc-1464-4ab3-b106-530e76af86e4", "indicator--9c96f0ec-7ba4-4859-80e4-7be9f5fdfb29", "indicator--c01cfc34-105a-4b82-b619-fe2f7c667312", "indicator--b7367836-9706-494a-8e03-e82d9a7fe712", "indicator--08b6e383-de20-4ffc-ad91-e177658fe6a9", "indicator--0fc2ee17-ddbe-42e8-9273-b075f10acfa3", "indicator--90e92e20-9015-4b13-bd30-1288de046e9c", "indicator--6f125ad1-501b-4794-9117-740cf3022d48", "indicator--a4837e3b-dea6-400a-9e63-f6bdbecd148b", "indicator--cd74f2c3-f78e-46ae-8d3e-88b195adfa50", "indicator--fb6cf81e-02b9-4952-b552-4e5a3b227a4f", "indicator--7902aaa1-b95e-49e8-8fa1-e8a7544f4aac", "indicator--d30af37e-7218-4f9f-a5de-0c7360af55e5", "indicator--82e09964-9573-48ee-8f4e-d3a0821e40be", "indicator--ff5a4f11-ac78-40bc-bbd0-68cbfc8c1e09", "indicator--d8a5159a-ea37-46d2-9dba-594e4dd55d20", "indicator--1cbc961d-87ea-40a9-a939-73420a009458", "indicator--69f7be9f-ef60-46bf-b17a-89c8c2826218", "indicator--6b6fbabd-7320-4b27-a94d-a49059a70cc6", "indicator--673753a1-989c-422f-9a0f-0ea8d8c1f1d9", "indicator--76884386-edf3-47dc-966e-c73a22fae059", "indicator--8f7f0d9f-d5a9-4191-9c48-798e871c64bf", "indicator--ccaa4e03-9242-4f51-91df-c1a108c8c3e9", "indicator--39afa219-6704-4cd3-885d-3eeb271548d3", "indicator--22d82967-c561-4797-8728-4269d4a91065", "indicator--e48f5df6-8372-4ef2-b29f-18bae4cfb75e", "indicator--9af944f7-6266-45b6-ae66-493083be5b3d", "indicator--92d74d7f-9bd4-4f14-bfb6-c759c77dc04e", "indicator--014dc9d6-4ef9-4968-89a9-68d72756ef88", "indicator--ae855c71-e14a-4a35-8578-8bda5c10fabb", "indicator--4d528ac7-e80a-4aea-bc8d-5f7d2d93b2c3", "indicator--775827c3-d0e2-494d-964f-bb92d77d0949", "indicator--c67ad6a2-62ef-4eaf-98c8-2b4e1025129c", "indicator--6c847a8e-5461-434a-a485-ad4ca9dff984", "indicator--92713b8e-1c63-4a22-ac14-25306b0b3f03", "indicator--2e6427bc-1eca-4b80-b601-80e4ab8991cb", "indicator--c3ecb406-aea4-41ed-b906-1c5b3dbdeed1", "indicator--b8492d53-b015-4611-b2e7-52dadba9793d", "indicator--7400581e-fb5b-41d6-acb1-c2a1723019da", "indicator--69debfc9-d8c7-4e5b-90bb-13bcae0803df", "indicator--b93cbe65-5c18-4d92-9251-802761380b44", "indicator--9e974f49-afd9-4b16-a127-46ca56fa3dbe", "indicator--f9b3dd16-d677-4d88-a85d-3e1dc505091f", "indicator--4636504c-0e33-4c4f-9358-37864f7858bf", "indicator--fea056ce-c15e-47cc-b372-7e164ea1c6d6", "indicator--f2247185-c1f1-444d-931d-a85ff98fb2d9", "indicator--168c5d3c-bec4-499b-bdc1-a5bd71abdc44", "indicator--c0c244ed-d6ba-427b-a287-9f281251472b", "indicator--3ed6c3a4-1204-4f67-bc58-a1f5fe2c30f5", "indicator--97d60365-ec44-454f-8a85-95a3ecb1eb5c", "indicator--682f4a15-5a2c-41e2-bd86-785c1befe9a9", "indicator--de7b272e-0981-4ba4-b2ab-5c5ffc303778", "indicator--a7d8011e-3435-4b23-b10c-ca1cd9aa9e28", "indicator--27880f12-f80c-459a-a038-bdb2f6da4e28", "indicator--4a9151eb-27e1-475f-ad5b-9111562adf49", "indicator--50b42943-ba2e-46cf-8682-253fb0e1f323", "indicator--daf2451b-b366-4a6d-970d-50eb5b05ac4d", "indicator--5566cddf-0e7d-48bc-a461-dfbadb64c89d", "indicator--30351110-e87e-476a-b7c0-7c17b7531947", "indicator--35f716b7-3589-48f3-a102-00925e3aba1c", "indicator--91324534-7cd3-48b1-a8e9-84b176fd4075", "indicator--1cd7a9ff-37fc-4ebf-b44a-cf347b4a1ee9", "indicator--ff51c0e0-59c1-498d-8f21-baba45cddb98", "indicator--85e7ec27-9844-43ff-95e0-dc22923e2003", "indicator--c3bb368e-5d1e-494d-bf6c-b113a761bb89", "indicator--ee3e6f70-bdd1-4a47-80a0-239408da2880", "indicator--2ff8ea4a-b06c-4a61-a34d-8f3111230653", "indicator--904fca3d-c83c-443c-bb8b-8be276e99a7b", "indicator--32fefc60-e5db-4e2d-ad28-e758f72a821a", "indicator--950835c9-b985-4306-a97f-1eea638f8ec5", "indicator--ee4a60b6-09ef-47be-899f-740fc8277d27", "indicator--b3798ff4-37a5-4546-821f-eeaeb4bfd755", "indicator--edced2ce-5512-412a-be0a-ac4303f3f77a", "indicator--6f94cb5a-4fd4-4cc6-8a18-ae01576e155b", "indicator--1740099c-e003-4333-a31e-e92e995e0a71", "indicator--ae5c6d18-f1a0-482d-9db3-1bfe1e14a9fa", "indicator--adb5ee14-c588-4126-b8b6-281b3114521d", "indicator--f14a69ca-4dea-4cb8-981b-b0c2bb77f3f8", "indicator--b9650f39-efe7-44c9-8c52-cdd28dd24b15", "indicator--f95ca2cc-50b4-4298-b0f9-14f1738dfb5c", "indicator--cf9d3518-b547-418e-9e51-62fecefdcb47", "indicator--59cccf4d-79d6-4b1e-b105-b98aab7487d0", "indicator--6975511b-83c5-44c0-8c1e-392528f4790e", "indicator--bae83798-48de-46e3-8472-546bb592f651", "indicator--18ebfc29-522f-4391-b25d-6c0288044b3e", "indicator--a6615cc8-0d86-463e-a7ac-f2f8b988a7c3", "indicator--7bc6508c-00bb-4d94-9b52-26366e070acc", "indicator--1781b5f3-384b-4213-9398-ee5a8757ec8b", "indicator--e3c8c4bc-815e-4066-8f23-db5cb53ccdb7", "indicator--f1ec75fb-d616-402c-a805-a1b4d091e07b", "indicator--e809e47c-76dc-48ce-bdcf-d90452ea4c9b", "indicator--f3f3ae5a-c6c0-4f87-8d7d-04eadfa4ddab", "indicator--347afc4b-90fe-4e34-97cf-375a8eb7016f", "indicator--e42a981d-ec21-492a-b5d7-24520c58f1ab", "indicator--9feaed20-beb9-49ff-b7d3-fc1692b48d72", "indicator--42309606-83e6-4840-b1fe-a39c20219453", "indicator--cc682f34-6c69-4a4b-a5f7-9c118c59c0dd", "indicator--f7a64131-bb38-426c-a928-814cb900b6ed", "indicator--66297504-fc9d-45ce-8967-5f8c1ea7348e", "indicator--9cd6444e-cad7-43de-8c34-d702ba9dbf62", "indicator--82b01930-eac8-4fa2-b82b-c2be4c81eb34", "indicator--3dc7c2ce-f7ae-4ce2-a07e-8f400b25489f", "indicator--68b0974a-4c83-45d6-856a-20bea4b19f31", "indicator--2bc0a2ea-12d0-4c90-971b-bb788d0d595b", "indicator--1640d05e-fc4c-4ee2-9868-a6829405dede", "indicator--c0ff00c1-69e9-4768-8121-bf5c740195cc", "indicator--a719d267-a2e2-4878-9dec-af55fffe1f3e", "indicator--09f98973-4117-4949-bd44-d344f67d32c1", "indicator--0a1068f2-2470-4678-80fc-abb788fbae9f", "indicator--5f05e956-d3ac-4011-893d-aab0d27c135f", "indicator--26efed1d-e43f-4c04-b5cc-0db18199af45", "indicator--12050330-684d-4029-8b2c-dd22562213e1", "indicator--79fba39d-250c-470c-8794-e2d7bf4058ba", "indicator--a4162910-f5f1-4832-ad0c-682917ea05f5", "indicator--246cc080-9fc2-4828-a3da-f4661665fa4b", "indicator--03eac996-1d94-4939-998b-fb1c8ad1431f", "indicator--a82946db-c4de-403b-87df-8190539a8c57", "indicator--2ef5564d-2376-40b0-b629-53da85f558b7", "indicator--cb39ef80-7042-4f5a-87b4-14a238b5efb3", "indicator--c253c8b7-f3d8-42a9-b627-3fe1fb201f4e", "indicator--0b5dbf88-0def-40ac-bf20-1955fe1bb105", "indicator--2f558cde-192a-474f-9326-284f86f0be81", "indicator--38460749-b3c5-43a7-821a-d4857cce2830", "indicator--0714ddd3-ff79-4953-97dc-12ee0770390c", "indicator--545e32fd-5093-4817-ac4e-e8dc47c8d24c", "indicator--9feb6ce9-d231-4c5e-be7b-698c27d93807", "indicator--06e8a84f-df1f-4322-a24c-4e13abd7fab0", "indicator--04f04507-5388-4cf6-b003-c55188f32030", "indicator--b2adf4f5-fffb-437d-814e-3dff075efc67", "indicator--b0193e36-cac5-472d-8b47-c278811983a8", "indicator--187b4b96-70cd-46c7-b4f3-3d49488485a5", "indicator--ebc9bcd7-2544-4154-9bc3-76fa75cea68f", "indicator--68226520-e494-484d-a837-d65dff788f2c", "indicator--35c45397-fee5-4de3-bcdc-7e6c62cb25df", "indicator--d5217cd0-b18d-410b-802b-f847d48b7a5f", "indicator--8b069787-17ab-49a5-bc89-f1fb39ee06e9", "indicator--645e5222-9e9d-43f3-aa32-99845a91ffb0", "indicator--7bbb5639-938d-44a5-9a27-d58166f730de", "indicator--8c2036d2-08e0-4d92-9cb0-2f561a47aac1", "indicator--94dc4e30-808a-4082-9eb9-e5d5f2ff2f40", "indicator--d06e0df6-abd4-470c-8921-15dd7e15d871", "indicator--42799763-e629-44a6-b67b-525e6bf64015", "indicator--b14681f8-0c48-4b7f-949a-12789a13d3c3", "indicator--c7431a93-2c92-4a66-9eb2-83fe0deb3a52", "indicator--22c256ed-c09d-4e25-a148-9e3a23aa1e2d", "indicator--2c9818e4-ea8d-4047-a922-cde8a2d01a63", "indicator--2d492bfd-1588-4fd3-a12d-48d245614fe0", "indicator--35b1263c-8427-40d0-ba0b-dd58ec31dff4", "indicator--b4cdd95b-f4ba-42fb-a1fc-3c5bb7e99411", "indicator--a45f1a87-0078-4b3f-bdbc-65cc7aba9996", "indicator--d77b8be8-ac5d-4d30-b225-f111b2307811", "indicator--afe8ca3b-6ed6-48f1-8cf0-92e41f408ab1", "indicator--11ea5ce9-b143-40cf-a57c-9de26dc7a4e6", "indicator--879c7888-67fd-456f-a8c5-087264eb1625", "indicator--af6cda25-f4f4-4347-9863-d242e13209ed", "indicator--4753505a-9dd4-4ca0-afde-3cd327259d0e", "indicator--7c5ec34f-0c36-49c0-b32a-a32e0df74742", "indicator--a6382247-0fac-4e36-a035-71769f9215af", "indicator--e226c67d-3ee0-410f-b297-1a40dd221713", "indicator--6d5e38d3-af74-431b-b522-cad646c5c9b1", "indicator--7239d5ac-0ea1-47fd-8ac6-30370879b50b", "indicator--28a6107c-7520-4f11-86ec-30cc689be973", "indicator--53c458d8-ef52-4535-86aa-a788df6275b0", "indicator--90e1963f-ef2d-4b74-bb9f-734f0d9de427", "indicator--0b0159ce-571c-49e0-9cd0-a05caf3fe9e1", "indicator--6920e826-aa43-4d3b-b88b-01f1ea1f94eb", "indicator--10d8189a-de8c-49bf-a8d2-d37a304724df", "indicator--5ccc9dbf-42b7-4491-a6f2-45fe8b59ef5d", "indicator--13f63e39-75d3-4716-ae1b-236a0b60525f", "indicator--7e12ea3a-865e-414b-ad84-0b428dc46099", "indicator--075fe5ed-78cc-469d-b2df-a1a5af3b6a61", "indicator--3a8b033c-cc65-4425-9780-da2ed63f6203", "indicator--f0136125-7f56-4ac9-806a-f977c5c83b3b", "indicator--9327a8ff-0013-4fec-9be9-6c10c9bd48b5", "indicator--08182038-6ac6-4b79-b3d0-43998aaa9421", "indicator--99887874-3593-46f4-a16c-e009891fc947", "indicator--97f7f75a-f12f-4300-bb59-adbde7f3964b", "indicator--6e52227b-0e83-4757-8195-76b4f30f4cb0", "indicator--29465ff8-9413-4ada-827d-5c6a8d01d9f9", "indicator--8e269f47-d975-4b80-bda5-29908c5c1002", "indicator--a1429a74-406f-4a64-965a-9f84962a7605", "indicator--d4058412-c12c-42c4-b857-0b8918d70597", "indicator--b79ef2e9-e97d-46b1-970a-5fd2b0150b03", "indicator--ab8db678-34aa-4f73-954a-0bb0240d8bda", "indicator--17479078-e67b-4b33-a14a-54618b757661", "indicator--5e7cf6a7-d101-4bea-9ea7-4e59c44d50de", "indicator--face94af-a199-4e16-878f-c6c23062739a", "indicator--e7ad7f44-e20c-467f-afdd-d8f26bf91549", "indicator--ec297027-abc2-4ecc-8756-a96afb071229", "indicator--7f7745ad-d62d-4e2e-a142-14abfeb580ed", "indicator--53b68479-f165-4367-b159-02455b2a3603", "indicator--fc88f5b4-8a6b-49f8-89a3-a73dc7d11ca2", "indicator--839ec578-84d8-4923-bdd8-e5f5842e4307", "indicator--92c47cd7-2111-41cc-bfe7-db6399a4269a", "indicator--f05b164d-6084-405c-848d-3d8c19c10d7a", "indicator--8a6fab4e-ab53-493d-b362-a5bb8897b9a7", "indicator--2b654f31-97de-47cb-956a-bc2c2f7a828c", "indicator--cbafdcba-6a33-4456-9e10-7b3f0bccbf0d", "indicator--1244b4b3-06f0-4327-b205-d74397f2625d", "indicator--3a9e04de-ddd5-4f12-9434-cbaffb5a18ab", "indicator--bde5c22e-d4c1-43f4-99ce-6dae5db4187f", "indicator--21f475f2-8fd4-45a2-a46b-fcc7ea5447c1", "indicator--e4bdfaf1-05b3-438e-a4c5-e307c791c195", "indicator--08d0776c-759f-4586-af9c-0b8a08b60736", "indicator--4ea90087-ae0f-4d78-b443-6544a58ecfb0", "indicator--ad42293b-1e1d-42f6-a3e3-6a670ff60d8e", "indicator--e1546723-f866-4538-b493-609b042ffa46", "indicator--4d161bcc-0e2d-4aaa-9214-b92ebb975b8a", "indicator--ac330805-961c-406f-b7d2-18ab044d2a9d", "indicator--32ca3d31-f777-4eaf-9514-4326f46be2c8", "indicator--155f5e78-c8ce-49d9-9f37-33c4d845bea7", "indicator--ede9234b-6e4b-4f74-b239-75fbb1421822", "indicator--da85a324-42ec-4ae7-8445-669ea3ccdd2c", "indicator--6ab672b6-f66f-418d-b11f-0102269c2cf8", "indicator--c095a580-e072-4788-8f96-38fff5e6f743", "indicator--36b367ea-f55c-4627-bdf2-5195f613e221", "indicator--bec1fde4-e6ef-482c-9af6-92d8466a2d47", "indicator--33750cd3-4cb6-47da-8ae3-8de905275fa0", "indicator--1033503c-074d-4e74-b25f-fbaf11598f08", "indicator--c1f6a5de-173a-404a-afeb-f8ea51394bfc", "indicator--38f92c1c-cdcd-4ffb-8e40-cb254b0fa20b", "indicator--5f3139e5-977e-4c4d-95ca-a6e6a69f944d", "indicator--17593990-740c-4777-b128-3a5fef1f88a2", "indicator--6d7dc4ac-ccad-4b60-b596-ae573c06beaf", "indicator--6f94f73a-7c36-4a6c-a1e7-1f9f5b0b10b9", "indicator--23c4f5f1-68ec-47ef-935e-9f38b04778c2", "indicator--c90c5b34-1c98-4f97-b4b7-98913972c11f", "indicator--f8c3667f-ca2d-41b0-8575-a2c721ec2c1d", "indicator--9184b139-6f65-4cea-acba-31426f2f304e", "indicator--867250bb-93c5-496f-86d0-c0138f28788b", "indicator--430be727-8e44-4b85-967b-7e45b423ae33", "indicator--a4ce02fa-97f0-4893-8bc6-706de19937f2", "indicator--5bd7847c-0fb2-49a3-99dc-660133ed641d", "indicator--8b544305-be2d-4e2b-ae4e-f3f7fd8a1177", "indicator--3763d49c-e938-4579-9f43-e0598e12e8a1", "indicator--8a78b60d-5190-4df9-940b-2afc9e87fa7c", "indicator--684cdd97-84f2-4bb4-9a7d-b7e908111334", "indicator--fcc41768-acf4-495e-b496-1b74aaef0d6e", "indicator--3a2c57b7-4d06-4c19-8cee-4b0cefd32d31", "indicator--e856d0b3-5e42-48ec-bc95-5c85f0cad23c", "indicator--b772358f-668c-430c-b7e3-26c74bbef6b5", "indicator--ddbccb8e-6ce2-4360-af2e-4a70f2aac553", "indicator--b7fd255e-ee16-4314-a7cc-70808367eb71", "indicator--8fc3fa9b-0dda-4a80-a584-7dd01459d5d3", "indicator--6c02d40d-09fc-4d42-8241-33d5bbb542e5", "indicator--f806020c-a3df-41ee-9f15-79d46e4f5ded", "indicator--68d95ff8-7c08-4497-8746-dbab19380153", "indicator--c2c96d52-df6d-4960-9be4-700630c85bf7", "indicator--b27ae580-ab44-4095-81ac-45ab2efd0b9a", "indicator--58cd749f-a62f-46f9-814d-34867b1a7395", "indicator--5ecf9c29-cf4a-4d81-851b-ef35ef5b1db4", "indicator--fa7ba28b-37f7-40d5-b608-74324ed16734", "indicator--0edcc93d-1fe9-4da9-a956-64581df5de62", "indicator--13e4a10a-7ff7-4924-9715-7ae636390c9f", "indicator--cb0aaf14-1769-4609-ad4b-af25b4561042", "indicator--71e47577-91b1-4669-a9c6-a24907ed06ff", "indicator--eb50ffec-fde6-46c4-8874-1ca0999e14aa", "indicator--353755fa-2d95-4b5d-adb1-b323035f4d1b", "indicator--057d6784-f28a-4fd2-aaa6-4fc073260e08", "indicator--f77cb2b1-b30a-4d37-91d8-23bd31886532", "indicator--01273a05-b25a-48a2-a44d-a33f0007f770", "indicator--a1472fcd-38b8-4d0c-bbb0-7e47aded33f0", "indicator--ab4f38e1-8626-4995-a11d-734b9ef11adb", "indicator--c7aa08b8-0f20-4c91-9721-092dad029c5e", "indicator--2d14e0cc-329f-45db-9d9e-5fcafcd26589", "indicator--d1d96252-a4e1-48e5-89eb-0eace770966d", "indicator--1b7324af-c85b-4cd3-85fb-f03032cb2149", "indicator--93094c62-431d-4d2e-a35b-94616df5d144", "indicator--ae474974-a771-49cb-a121-1889cc90f51a", "indicator--15b8247a-e024-46ef-bf5a-53d8c0afcb6d", "indicator--682d6c2f-f0b4-49d2-8549-aa88048fa66d", "indicator--68c56aa5-e0ed-42d6-8c94-8716afa913d6", "indicator--56bd7cf6-6fab-4831-85d6-9b33b1fceb16", "indicator--4c3360ee-f728-49f8-a057-0db864eb2c34", "indicator--da7dbefb-96b7-426c-a77d-5485f5114451", "indicator--13779ef1-79bf-420f-8945-78142f5859c5", "indicator--90022800-4db6-4959-bff7-37c9306a1003", "indicator--b8bb7c57-b098-4cbe-b636-57c52d31f560", "indicator--0f7ed26c-b46c-4e94-ae91-ac088e14178c", "indicator--a53f4d9d-0ff5-4c01-8797-5b9f76a31fd2", "indicator--bc88fc81-80b3-422f-a47e-767d8c6d3153", "indicator--1cb9417c-79d8-49c1-9769-f59c0120c4d7", "indicator--18b371b4-e954-4eab-b8c3-795de5e9c66a", "indicator--040f2184-24c7-476c-917e-fa3360c991f0", "indicator--811fbc84-b40f-488a-b424-9d5a412dcbf6", "indicator--10d809f3-a20d-464d-b881-899baa8e8677", "indicator--648db4d9-4bd8-4cc4-a3c6-7ada3c7a6df2", "indicator--c348963f-c6e2-47ca-9c67-3cae71669caf", "indicator--355a6201-937c-4e28-a02f-e237614e0e01", "indicator--62649ed9-bd2d-4d3e-9e5b-8967d9d1b8e6", "indicator--6e2c466f-e8c7-4f65-a5e8-b9e9ceb46f4e", "indicator--74f21470-e30a-4310-ac5a-9c50f51c997b", "indicator--3cd31275-2b1d-4a87-b432-204385051323", "indicator--6b14dab0-1334-47f1-a1f4-c76c7c90a431", "indicator--e267fa0c-0fb4-4549-bafb-22fd0e14aa9a", "indicator--605c098c-7b7c-4b22-adad-72a95bee4558", "indicator--cf6ba4ca-8836-4cbb-b197-2240659a7030", "indicator--d6ef777f-dd8a-415b-8b20-08f0359260b8", "indicator--ef972510-bd36-4a02-9db7-93e0100ecfe6", "indicator--5af2e601-0f96-46a6-a7e2-07f04783c562", "indicator--a23f3fa3-3a75-4548-af9f-46ec18f34eff", "indicator--d640bbdc-1255-49f0-96e5-17ca30c814f3", "indicator--8beecdb8-0f08-498a-be6c-671bfe6ae5e7", "indicator--952ef3ac-0820-4dfe-9fee-4caa806f4626", "indicator--bc5970fa-e549-4363-b0de-c3594671f25a", "indicator--34c74bf5-7db5-4cf9-bce4-82aeba0aa42d", "indicator--601b06f8-84ac-4e8c-bd59-599b740bd3d4", "indicator--5774a06b-254a-4d78-9278-5e66b171338d", "indicator--af42746e-3da0-4e37-9659-adb3ed6cd6e8", "indicator--d7684be9-b867-4c17-a05a-cb39fad96f64", "indicator--66549810-f1df-4434-8228-b148c85d9872", "indicator--4ab9faca-cc10-4580-aa40-8289614b3a6e", "indicator--0ff35fbe-2b7c-47d1-a20f-54d37feac9c1", "indicator--79b67c0d-36ae-4c88-b1f7-7c975d91d32f", "indicator--c9c7e498-8789-4676-b8e1-be0d1c218b05", "indicator--4371e074-c7eb-4895-bac6-a4a8bfa3efb8", "indicator--50c4531d-b09a-4374-9008-12047997e2b0", "indicator--ef27fe5d-28c3-4020-a15d-cd2025a87306", "indicator--b1a25175-ce8f-4be2-97fa-770395b2e118", "indicator--4132843b-ec4f-4678-b6f5-635fb627d9e4", "indicator--757345c1-70f7-40f3-97f3-be686b14fd6d", "indicator--0f4252f6-6780-452f-bd7e-22451e7c2307", "indicator--026d9568-df89-4cd5-b8b4-a83252fd087f", "indicator--39f0a330-417d-45fe-83b2-97d84d5d7f7a", "indicator--4078fcdd-b23b-48ed-845f-53e436ddc678", "indicator--7e328fac-0249-4370-af4c-a4abc8936488", "indicator--21299858-497a-4256-a63b-dc065e611830", "indicator--4c367e4e-7f01-49d3-b299-6592f1892531", "indicator--0c3364c9-432b-432b-82a0-050f8ef6bee7", "indicator--245cb5cc-2887-43a4-9f21-d03316556d5c", "indicator--32c65918-a5f4-4c6f-99d3-4df4d84c021d", "indicator--3331abd9-a137-4476-a0a2-fc98ebb6946a", "indicator--07306b83-7b85-4c33-a055-365efbd8c857", "indicator--10fb659b-29b6-49b8-a1c1-26bc810ee6a0", "indicator--59dd4ee7-73c0-428d-a941-082ef981e4f3", "indicator--b0e46a36-c70d-44bd-9bed-33665c798bb1", "indicator--0c19cced-34cc-4775-8130-3d9027987732", "indicator--1098a604-b6b2-4395-8eb7-6932763ca0aa", "indicator--bbfbb365-58e5-4f58-b0f9-fea1f0ee9bfb", "indicator--dd91dcec-6f15-43a8-944b-04c1c87729ed", "indicator--4bef9afb-0461-4572-82bc-2380ee979e7b", "indicator--1502bdc2-6c79-48ea-a1a5-c2e4f6f28891", "indicator--b028558c-2270-4228-8b69-7030cf50936e", "indicator--62e739e8-0b74-47d0-90c2-c1e0fbe6e16b", "indicator--16b3c188-3884-4abb-8c8e-4bf1f144bf4b", "indicator--5c61179c-5ff2-4734-83a5-6a1c17178e10", "indicator--e6874cf0-a332-46a7-acda-09e696e42fec", "indicator--548e56c1-cc8d-44eb-8682-e8acc4060b0a", "indicator--edfe4d70-ec91-487a-9329-ba0953fc3988", "indicator--3e688317-cd01-42d9-bd2e-0c8a0c0fd38d", "indicator--39332d98-0717-492a-81f1-035d5845cb9e", "indicator--06ce9026-b36e-48bb-bdf1-69860ec2e102", "indicator--94bd8692-e76e-4d79-95d2-cc00999538fc", "indicator--0aec340e-05a4-45df-babf-befe76e21954", "indicator--8588d827-7099-4799-aab7-5edfefc253fd", "indicator--f2a09716-0143-4734-93b1-53177a95f5b7", "indicator--5f741787-ff37-4ad7-8434-7f4df955efbb", "indicator--47784bf1-0adf-47bb-ad31-2708f291fae3", "indicator--45cb3260-f388-436f-a508-1741a94a6a6a", "indicator--9659b869-ad2e-44c0-af9d-83924fb4e2ba", "indicator--f40868d6-35bb-4ec0-b15f-7fdf605e07ff", "indicator--afb58e3a-85b9-4888-977a-742bd242ccce", "indicator--bb41c03a-061e-423a-80c1-2d3257b43578", "indicator--5f6a06e1-4923-46ee-bbda-b7654437de6d", "indicator--1ac4f515-f663-49b3-a4a1-e7542bfbf69b", "indicator--3f67813e-cd8a-4124-b3bd-2e9dfba46510", "indicator--67df7e9f-1e88-4806-a98d-6b219b654ac6", "indicator--ec387f4f-5721-4af4-bb72-f41aabee9572", "indicator--1da8781f-753a-44ea-aeed-15a768d1364d", "indicator--87985f02-7ef8-40e2-89d6-12359cd982a4", "indicator--ad351d9b-fbd7-44dd-b16e-87ed2b583f6e", "indicator--0f90e5d6-265a-44a5-8f4b-e1e3122db1bf", "indicator--32770533-f4db-4a82-9fa3-6aa9c6620e9a", "indicator--3656e95b-e81b-474f-b6a4-8b3f6d08cb9c", "indicator--90bb8c4d-72f5-478e-88e1-b876cc2f88ce", "indicator--204fb70e-4d51-4ad8-95d2-d91221326093", "indicator--ba1cf63a-d4ce-4ebc-b59b-1cecf6a14c3c", "indicator--a90adc1f-b54f-409f-a71b-575dc3ab0704", "indicator--85a100cf-26ac-4246-8524-1e5493cdf8a6", "indicator--97968f87-c843-4d92-a3dd-d4bab1bffc1a", "indicator--c64e3a25-0ff2-4e06-a2a2-0aea0bde9589", "indicator--6798cd97-639a-48d7-a52f-e03fb631b044", "indicator--75f73797-e473-442f-aae3-c07ce29f9145", "indicator--5f1d9629-fd53-4bc8-9539-d03bdcffb2aa", "indicator--0a922894-93c8-4dc4-912c-73c0a9c55785", "indicator--0338c90a-55b0-4ac5-ab17-8a0a7e9068d0", "indicator--26a4e4e8-6c37-489f-a311-98db236b92c7", "indicator--9975728e-863b-427d-91ee-da6c60748a6a", "indicator--7e6290d1-d86c-494c-a3bc-c6f7f1ae6c25", "indicator--91f9a403-7016-4a1c-92a9-ef49cf17051f", "indicator--5a28840c-81f0-4cf3-83fa-e43d8a16cb36", "indicator--4ff6f8d1-d74a-48d4-b0f0-f81bd05dc48c", "indicator--06d80e89-14ce-4858-9c88-d169505bd777", "indicator--4146a0f4-b2fa-42b7-828d-0c1b884c0fac", "indicator--0eb8f87f-229a-4a11-8e2b-8b8aef5f4389", "indicator--c3b1992c-78ab-4775-a29e-fc2180edbb1c", "indicator--6e95cfb0-45f7-4922-81fb-5fd1c1db1657", "indicator--f9436932-33d6-4389-b467-4480b599e75b", "indicator--69ef5d58-63c9-4479-bd5a-1581add4742c", "indicator--0b1386f7-ce0f-4a62-adba-53547279a82a", "indicator--1edc2ff2-bfc1-48be-9e57-c5a85ab6f68a", "indicator--4d400452-a7c9-4cc4-9bda-2a68f8d3bbe1", "indicator--82e8c91d-8e38-4c7c-9bd5-d1a2901d7631", "indicator--34770614-780e-45a4-a7bc-f4884444e56f", "indicator--7e0c8b03-9160-4170-8d8b-0a9b83c517e2", "indicator--9bde4945-00c6-4c2a-bd3a-cfe04a09e076", "indicator--d8a38f50-a713-4709-9cab-225f25b4f9aa", "indicator--edd8d1da-da00-42f2-a887-f58769001bb2", "indicator--3466a4a2-fc38-46ad-8f22-1a6ef07e82b6", "indicator--ca4718d2-6552-4aef-921a-020d644d49ee", "indicator--5897db52-b968-4bb7-8136-57de64a87a17", "indicator--5b261da9-d37c-426c-a056-c362bb8b4e72", "indicator--cd3fc980-e185-4274-83b0-7fba04cff1a3", "indicator--0981fc69-226b-4215-9ff5-5f1d4831501f", "indicator--9c2c08bc-dc8e-4d30-99bb-f1c0ccf40cbb", "indicator--93df7c68-342f-4f4c-a2e1-ae5d1371340d", "indicator--2aeb8df1-de03-4cd0-bd38-5e86d2ee1086", "indicator--4aa9bc42-d5ce-4c14-8975-8d00e6a09638", "indicator--8dfa9a84-36c8-4cb8-89b6-75b953e78686", "indicator--6d47f7d2-5d16-414d-b764-86b218824782", "indicator--a5c07fd3-9790-4513-8025-a7b018e9c9ee", "indicator--852a9098-3673-4de1-b8c2-a535c7c49f44", "indicator--41993030-46aa-4d3a-a625-01639ca12d80", "indicator--d33b5bbf-49c2-4f8c-803c-3ef0f09a4e29", "indicator--8bf44dea-4291-4e7b-bbc5-080516d97faa", "indicator--50654c3e-ef47-489e-96d6-af7489a50938", "indicator--e2da661d-2b07-4906-85f4-972d6da1bf2a", "indicator--03873220-6211-449b-a554-3498afbec962", "indicator--3626253b-e010-4d90-a469-3b43f367b6d8", "indicator--9f353cb5-4630-4bff-8923-b2f745d2e4da", "indicator--780d8dc5-bb40-4d50-9ae2-10fd167b3ad1", "indicator--e22af31d-e2d4-4553-a87b-758ca79f3bf1", "indicator--1b251f73-8a1b-469c-b357-45293fe593ed", "indicator--b5e492a1-25ff-4a00-9b14-7656cf0aa447", "indicator--54425a75-157a-45ef-b942-afc893fe80e1", "indicator--2985bbaf-68ec-479e-a6d0-87c033feeb55", "indicator--6d6c2305-46ed-4b5f-ae94-9a35d78a8e2f", "indicator--ba7a3bbc-b589-4966-83ec-6927fa5d1b63", "indicator--4835d9e1-d32a-4606-bc85-cb5471431be0", "indicator--7df262c8-6c3b-46a9-8fc1-bf8d29ab74d4", "indicator--809cfbe4-a682-437a-872e-eebcfd962543", "indicator--11df3994-1daf-4b18-803b-e666a1df7201", "indicator--3c2f9601-e715-40d0-8f17-6ed8461f640d", "indicator--998880d4-607d-4d22-bae1-348923abb9c6", "indicator--603836be-2b08-4c36-827e-4b61565cd0d3", "indicator--15e34496-e5cb-4fb1-be03-bff47b2fc264", "indicator--a8385daa-b0a4-4f61-a226-2d36493b345b", "indicator--c78cea41-92fd-4428-adb9-d6af444a0435", "indicator--b7b6d660-bc7f-4ed4-9cfd-977f50fdd831", "indicator--2aa42090-13e7-42bc-b176-52653a0ff897", "indicator--474a4b50-4582-482d-b892-de931fcd38fa", "indicator--16e58d5e-634c-468c-bbed-10eb7b149fc9", "indicator--c15ae751-fe91-4f24-9f03-df962e5aeb8a", "indicator--bfb9d90b-8c86-440e-aa29-b8e00dbaa886", "indicator--60c9a31e-e2e2-4fcb-8cc6-d6b53dec9810", "indicator--ba043ac5-880b-424d-9be2-d1724eafe953", "indicator--911ed771-df85-4c15-8717-7026c68929f3", "indicator--a3e30ecd-2df7-4fdd-9678-cf3a1aa484a2", "indicator--c1ccade2-665b-4602-92ea-1af4e24c5ac1", "indicator--ee7f16bb-0472-4ce4-ac24-f9a0c9f4c01c", "indicator--456ec9bb-6d80-4c38-b3ba-d53fd139ad16", "indicator--083a2123-d71f-406f-8b1f-533f452831c1", "indicator--35f6cce3-0d97-4fbd-a1c6-ddde7b10d983", "indicator--039a3336-0b48-4b1c-bdda-5648eff6b878", "indicator--75f20c2e-9755-4a1d-826f-fb5bd5870b1c", "indicator--afe0d01e-6a36-44a5-a638-998c2d86b34d", "indicator--c250711f-b851-412d-8e0e-2d29fff43390", "indicator--9cf46abb-0822-44d0-a3f6-1be3b4b34902", "indicator--933c26f2-802b-4e06-a583-3847addcdfcf", "indicator--e5e1a736-f5fd-489f-aeec-c0211ec5b684", "indicator--c26eb9c3-2736-47f0-8ff1-9ec91be8e822", "indicator--4148d9d0-4f5c-4340-ab46-0c9dc621f8c1", "indicator--5fb8e675-0102-401a-ba4f-b16499b6c93a", "indicator--cfe6f456-2fae-4fd1-9275-a3652afa2d6a", "indicator--b6fa464e-1f33-48be-b219-2c7123fd61e6", "indicator--c7731b56-a0f1-4be3-b3d1-d1b9afc4eb77", "indicator--59fbd70b-2d32-46aa-a532-db1088c54432", "indicator--9cbbe3bf-6b80-4d98-97e4-a90305b452b5", "indicator--9a302fc1-0dfb-4ec4-98ec-87bd0538d0af", "indicator--a3d74bed-7f55-4592-bc62-76abdab151a0", "indicator--164be550-9d01-46a8-af75-1ba0a7fd1cbd", "indicator--b13f273e-fc48-4e5b-aed3-5a88b92aedf5", "indicator--5ec9230e-cd92-4f78-a9df-ab8429c3999e", "indicator--6527c74f-80d0-4f59-9bf6-10e1171073ab", "indicator--0bf8afba-325e-4849-81b7-7d4808f6bc1a", "indicator--88d6b138-d348-4f21-b5b2-a82b84fb3fec", "indicator--6f742273-30d0-4fc3-8cad-6d49ed90e7e0", "indicator--a80164d1-551b-4f88-9897-cdc5e7e7d17b", "indicator--6764f781-e76d-43ce-9cf3-a45cec395646", "indicator--75afbd28-519a-404a-8034-2c4cf46529a9", "indicator--0edec0d9-787a-4a9f-bcc0-dcb203b082f2", "indicator--2fe440b3-4860-478c-968b-774808cf980c", "indicator--0fb56d6d-f6af-4e06-a752-b0e9ce55c8bd", "indicator--0c854228-fbac-4204-8f50-9e9fd2b67a16", "indicator--b37148d7-2ad9-4af8-8b4b-45427543a093", "indicator--13f1790a-5bd1-4e2b-bab6-a2c7a1f218c1", "indicator--0d7cde5c-7d03-4c7c-b318-38de74574096", "indicator--ac57037c-9665-4d05-97d0-dc18ea86fa81", "indicator--fe2cda25-64a8-4e06-afe2-c7ab67f587ba", "indicator--e561badb-880a-4dd7-a1fd-48a207e618fe", "indicator--d1d5f0ee-e915-4d61-944a-9c1926def29d", "indicator--154df4d5-56a0-455f-9bb1-f954b42e8a21", "indicator--427a9405-c689-4379-a69b-6965c34a2bb3", "indicator--ed9fba0d-6ef4-4795-92e1-aa837f19f84f", "indicator--e8019703-cf31-47cc-a0fe-64fa0cd22476", "indicator--e4bf9d70-aad2-49d1-ab0b-25e47fd95ef9", "indicator--d8455e84-eef5-41d0-8f50-ce33ed57cdeb", "indicator--bf73793d-4f3e-4ae6-bcbe-e22958506e15", "indicator--49519d74-a876-4d92-8399-7b33c0f02a47", "indicator--3fe8c772-f9ce-4bed-9c24-d3ff327a005a", "indicator--c87e1914-fa78-4dc2-b003-ac33223bfe6c", "indicator--73ee2882-e4f3-4ad9-bfce-02b0b4654026", "indicator--d45b8875-3aff-43e9-9a20-f326f960f9f0", "indicator--d0a9c0b5-a996-40a0-aedf-a3aa1ca5504e", "indicator--00011d4a-13a4-4424-b8d5-3184389fa63a", "indicator--e05f00f8-139e-4b0c-b74a-d871a4254f38", "indicator--f75bbf5e-9592-42d2-84f8-25254b1212e5", "indicator--7aa1ec51-6063-477d-8234-97a89be192d1", "indicator--efb10cae-a6b8-4ae0-87b0-23881468e0d4", "indicator--1e99642d-9188-4558-99e3-19f1c2044ffd", "indicator--5ae4a608-47a6-4cff-970f-6eba063dc36a", "indicator--e5d35ef7-2c5e-44a4-92af-55fa0ca180d5", "indicator--25d9c5d7-9e14-469c-8347-3e570afa48e8", "indicator--4abc838e-5a3b-426e-a666-2ff365c3f861", "indicator--c433aa4f-7d33-406f-ad0d-c200013dabdd", "indicator--3d544234-2386-406c-b12a-136c718157dc", "indicator--402f75c7-f428-494d-a79e-61d192e1e359", "indicator--d48a8174-dc7a-46d7-b01b-1995bb181d7b", "indicator--448d629e-c47b-4654-be50-deeab9b89e69", "indicator--e470abb1-791f-4441-81ab-e053ada6ea2e", "indicator--64dc9518-a2da-425c-b52b-91521bd7d3e3", "indicator--b98c5b11-bc49-4633-93c3-e61fc2094e03", "indicator--4a13ccf2-1d67-40db-b5a1-3658f84c063f", "indicator--200939fa-e059-44c7-8c6f-b26f2d757106", "indicator--cf59c097-6233-49f9-a045-9e9ea5c6e59c", "indicator--54410c3b-3547-482a-b5ef-c60ed9e79a96", "indicator--bb3c7b94-cac1-49af-93ec-17f28f52761a", "indicator--4779f16d-35b0-415e-b4db-2e73cd1448df", "indicator--7eb17e21-c090-4747-9895-740173969ccc", "indicator--441cbd61-43e4-47cc-84d5-2a46eaff5f29", "indicator--0bc788a1-774a-4883-b124-541c9097a501", "indicator--d7cf1a9f-ea0d-48f3-aaeb-2748b4202a7f", "indicator--f38cf8f7-4e30-484b-aae3-c54bfe38b83f", "indicator--e2073b38-6772-4168-9aef-11ee6500f25d", "indicator--890729c9-2a8c-4ea4-a3b8-2ba709502847", "indicator--7211456c-41d5-4dad-a565-41bd541ea620", "indicator--2f14426e-d4f2-4269-a850-73df1d69e607", "indicator--55752ba9-9f6e-4a87-ab0d-56bfa39cc8af", "indicator--1e6e91d1-75bd-41a0-a1ab-33789eeb7b92", "indicator--021dee4e-94a7-4a51-9ac0-ccfbc2e388b7", "indicator--4b60cebc-e875-4c1a-bfe9-37d01bf79a5d", "indicator--2ec232f7-9b6b-4dd9-8da8-61ab391baf02", "indicator--9c48d6ed-a26d-42b6-aab3-1305edf81f48", "indicator--1c186f8e-a53a-448f-b6a5-bf93e1e90b4b", "indicator--526db939-2bcf-4d32-9efa-172ee468c705", "indicator--681900ec-62e8-408b-9897-8ae3cdcc4e53", "indicator--39508757-b304-4cd2-a50f-b4d9d23b1565", "indicator--3cc1e611-be2c-4e86-aa5c-c60d8d2c296b", "indicator--713a30b4-51aa-4e02-8a3c-57269bc2602b", "indicator--aaace3ac-625f-41a0-a67e-23b55a0cdf31", "indicator--ffbf6637-08f4-42ec-a71c-491ea76b6e14", "indicator--56b6b491-088e-443c-910d-5b81d3d34e09", "indicator--f2cb8822-6ba4-40dd-bba8-ff201fcd3332", "indicator--c81509a2-98c1-4f47-abbe-3aab1da72266", "indicator--6bebe421-fb23-4d46-9670-399103dd351f", "indicator--3c66bb3c-7b0c-467d-b2ca-22c9fc9e6788", "indicator--50151043-da62-40ce-8651-dbd06d3b6fb8", "indicator--7f0bdc57-8af5-4ef0-8e23-eabbce3d5590", "indicator--03bae830-1f56-4e97-901f-e77d01d1afff", "indicator--74e44409-8488-4ccf-85e6-7380dde9fbf1", "indicator--fb35cc44-0cb3-471b-9f71-1dbde34be4ec", "indicator--b080f333-cfd4-430d-8eeb-6d3542c6ae43", "indicator--d94a15e4-1f16-47ec-a0b1-8e1e6e45afc0", "indicator--65560b5f-0bad-42a6-ae88-2344813cedd3", "indicator--7636b26d-f0ae-48ed-8886-b2cb45f9b45d", "indicator--454ce06b-dfc6-404c-ad17-ed5efc4bdea3", "indicator--e6c9613f-7012-4e68-8581-979b309c5d58", "indicator--08065bb8-c4ce-4bd5-bf8d-5e9fc2c35b5e", "indicator--e64e74e9-ca9f-4f7a-8d53-e283743c3499", "indicator--2e80a47b-f1f9-4a6c-a322-fdbd7981e06e", "indicator--1f45c6f7-bc61-4477-aff1-f5f82ef312fc", "indicator--fd2a2b6f-f6c6-46e3-8374-3db77a0792d4", "indicator--21de7fc3-92bc-4fe0-92b9-f22f6f4ab32b", "indicator--88efc645-2b58-4c76-b6d2-720ed3aec1ad", "indicator--3e4b7d8f-919e-44ce-883b-0e40de349c45", "indicator--d123f0ee-23e3-4c4f-a59a-ae3432252067", "indicator--11ad1923-502d-4859-b7b9-d23928b6a3e0", "indicator--e35de945-2c60-4931-a6d5-517c67133814", "indicator--be94999b-8f30-4185-9f4a-109563bbc9b7", "indicator--313ccb6e-0387-4ce0-87d1-8d6f9d4df0a2", "indicator--71e4062a-ab4b-4527-9133-523081f84f83", "indicator--86afe9ad-4417-49bd-b2c9-effb20469061", "indicator--ffc0e428-020d-4078-907a-09f3a3254f16", "indicator--edcee7d2-00c7-4dbf-9143-17f92bc34d71", "indicator--a4359910-f5af-4dba-81f0-9f2634da37eb", "indicator--f167bf8a-32cc-4c8f-b344-c0a7bc715120", "indicator--4bb4a4ae-b6b4-4ad5-84a0-fa2b83fe2a58", "indicator--53898364-c737-4581-bd52-87645989966c", "indicator--9c6afca5-5c6a-49bf-b77a-973a1114b3e4", "indicator--816faf55-412b-48ee-8d02-83824284a673", "indicator--9a1dc9db-43e4-431c-b259-217f03fcf412", "indicator--4b004fb9-aea0-4911-b945-71c2bd69af68", "indicator--71d4146d-0ade-4056-9ca7-69ae58a443da", "indicator--56134c4e-4bc3-4c48-854a-72f8451cdf04", "indicator--f7d816cc-b15f-49d3-b6d4-202e896cd33d", "indicator--c762d982-25df-46c2-8c4e-1c625392fa25", "indicator--c6eb189e-a55b-45d4-b2d0-6a8af33a19bc", "indicator--a073fe32-7e2d-4267-9c9b-2443b0795d89", "indicator--fadb884f-ce9e-458a-8977-15d5894f3716", "indicator--e3523143-fdb7-4f47-8fa8-4498231c585c", "indicator--0da1c4a1-de16-46ba-879e-c8fb860cfe36", "indicator--b700bbcf-1668-49a1-a351-f85362806924", "indicator--f4d8b3e3-570c-40e8-be2a-026530c7e6bf", "indicator--2795d144-c5ed-43ae-bdce-dd102fa744e4", "indicator--408f852a-482e-43d3-95f9-b73fa9153958", "indicator--c89253d5-e770-4bdb-a444-5a116bd4018a", "indicator--79f48aed-8bee-407a-aa7c-b587bd53c1da", "indicator--21d34deb-50ff-4bf6-ac26-65a26f81efa9", "indicator--2871b771-efaf-4d97-893b-e7fd4d2a4b9b", "indicator--28468be9-e1f3-441e-b360-d04bb4d7613a", "indicator--3c76098b-bdae-45f7-b92a-3d0ee4d44ec7", "indicator--2effe42a-fb61-4f26-a500-5b6154be6d76", "indicator--3e2008dd-500b-4c9c-bd5d-9b31208f5342", "indicator--defe1548-e1fe-45d5-bb61-842219489deb", "indicator--b40b26b4-d05f-4b01-933e-11eb444edb01", "indicator--ae267f2c-5556-49f0-92be-131e3a96f51c", "indicator--492830d5-1d23-4521-bbce-4084eb9b7891", "indicator--d5ee3371-2ffe-482a-8ce6-54e54a841605", "indicator--30c3ffeb-40a1-411a-a54b-4db88050a5f5", "indicator--cf52c7d0-9db2-4574-82ba-4b79f59d3039", "indicator--e6dc5f74-e0c1-45f5-88ee-53300f4a09e3", "indicator--2e1dcc07-616f-4409-af8c-7d15b422c665", "indicator--91a0ca88-2a93-4e35-a13c-1ad3ca48bd83", "indicator--399ff2ca-8730-4383-988c-ca8024cc3b9b", "indicator--41484a04-2831-4b41-b4f2-4cb24eac3e7e", "indicator--ac214799-15c6-46f2-85a9-36ffe39aaad6", "indicator--5e869856-d3f4-4086-8bc2-6149fbcd64bb", "indicator--71acf100-1002-4b4c-84fc-e8ebb060a260", "indicator--5f57836c-ecc7-426d-bd50-c38cddeec683", "indicator--9d12b2e4-5773-46ce-90ed-c7aca0d0bcb0", "indicator--d82573f7-362f-48cc-a0c9-2c3e51867650", "indicator--9517c642-85c1-4ff1-a195-d5caa37b032f", "indicator--cc8c650c-74ca-4ad5-858b-0cd254e6344b", "indicator--d3ec4a1a-e127-42e0-bf0d-baf4b0d7870e", "indicator--83eca74a-0daf-403a-984b-072bac3a497c", "indicator--ad263a32-6023-4026-bedd-723652ad7bf2", "indicator--03575c05-8c50-40f8-98c7-c9a8f4394f25", "indicator--95ca6079-9b46-4bb7-93b3-64f4d75534d5", "indicator--2816d9f5-9015-4f14-9c9b-4fd4533371eb", "indicator--37b6e807-c785-47c1-9f09-c4a6fb0d4064", "indicator--ab18c94e-60ee-4e5e-9e3c-9da6edccc9e1", "indicator--d576d6cd-f343-47e4-b92d-72f305e58092", "indicator--53456f19-73f8-467a-9156-d5303e36a234", "indicator--fa290e58-9ccd-4208-9772-03ccf69e7665", "indicator--da909e0c-6eab-4d64-9c7e-01ada41435f4", "indicator--cb3fdcd0-7c61-49ad-bba0-e9a79117d59a", "indicator--5c03a9f7-8430-4808-8b7a-e66352c5aeaa", "indicator--d5a6889d-7c5a-425e-8185-463c5a780e47", "indicator--9517feea-13a5-4208-879b-26ac0f899151", "indicator--5518dac1-0d71-446e-8a46-d91fe7889eaa", "indicator--8a58b944-1cd6-4680-82a5-627f2f37a951", "indicator--895d8011-b1b5-4735-8b6b-3231544ed130", "indicator--36ba25c6-e14e-482a-bef5-58de1d4ac101", "indicator--f866c7fd-0bf9-4508-8dfe-bebfecd8f34a", "indicator--8cd2994c-6b81-4f3d-aa86-900041538524", "indicator--41259aa1-fca6-4bb0-8ba0-b2b6a09eb00c", "indicator--6bea0cb1-8308-41af-81f0-a057f0be1421", "indicator--48f99ce1-13d1-4dc6-86fe-dc6b162f9369", "indicator--31ddbb87-a2a1-4cc7-9aea-275d4ebb3931", "indicator--daeb727d-29dd-451a-947c-1184a5e467b6", "indicator--776f4136-99f9-41f9-86a2-36afe52d99c9", "indicator--c9680b30-922a-4958-8380-dc0d3a8ec297", "indicator--971bc143-6c4b-4a42-a924-9ca312dd592a", "indicator--dee5dc97-0fdf-4b6e-9a6e-5e8a8011fc54", "indicator--58399601-e89d-4808-b715-6711fcb57e03", "indicator--200dac61-ad7d-463a-a16c-c3f5de6cfbe6", "indicator--a99ccc09-1dfb-4f93-9792-94791cf97f0a", "indicator--6b24d600-290e-4c0c-88fc-b80de9dc80df", "indicator--5c9fd2dd-cf3f-4b96-86fb-aa0538147edb", "indicator--6cd139c3-88f8-4b22-9caa-ee4db3108b9c", "indicator--f7b1f51e-5ff6-4fb8-9b5c-9d196f80558a", "indicator--99993f3b-5be1-48be-9357-f677eea6fa7e", "indicator--02300d1d-75b7-47a1-81ae-02d9bdf4be00", "indicator--1f300167-e43b-46cc-81ce-eb279b9ffacc", "indicator--52a22366-a292-4793-8f6d-8aab329e7952", "indicator--d2e3b356-7385-4946-bfb8-33c74b1e67c8", "indicator--f75ebc16-6d70-49ff-a315-a8fb6cd2d3d6", "indicator--9d3c743e-0146-4691-b3f3-012fa2b4c949", "indicator--ae4f1dc8-9edc-43be-b3a0-8e1bfce3a73f", "indicator--c2428024-84e2-478e-8e73-7b2a06bd5755", "indicator--9287b500-dabb-46ba-ac48-eae8365c593a", "indicator--643ef1d3-1347-486c-9337-9bdd31c480af", "indicator--c51bb24c-ff3d-4475-8e80-3091bf1bba53", "indicator--ea03eee9-6e5e-4edb-90c1-8c71694f092d", "indicator--d9cf9bca-719e-43d4-a5c4-5f500f1981ca", "indicator--8819867f-0cd3-40eb-8a1e-faf306780995", "indicator--67020de6-2441-4209-8a9d-871f56c5075d", "indicator--6bd4629e-c33d-4c9b-84be-b9c2a608cce9", "indicator--ac9aa68c-02b9-4ba1-aadc-9e9460fce642", "indicator--06d01213-702a-4e4b-8cc5-fcfdbbcbe3a5", "indicator--717464db-0e05-4873-934f-251baf531109", "indicator--0f2eead4-1a27-4f0f-b58e-7f83cd6f3a1f", "indicator--626e6ab6-f794-467b-89b1-a93edccc4c8c", "indicator--91e36b41-b77d-41bb-b6c5-cd94d0c8b670", "indicator--ab51f6dc-1ddb-44e2-9499-cc9e20d4ec02", "indicator--0bacd1b2-9393-43e0-b56d-c04af139b999", "indicator--21464b7c-1f47-4abf-9365-21462c687f13", "indicator--b5d3a52c-1f28-41bf-ab63-895a25b04cd7", "indicator--373a7640-87a1-4f4e-9e3d-7d15466393db", "indicator--3edc70b6-0048-455b-91f4-733c66f72822", "indicator--f5348571-2b31-48e6-9a3e-ce69dedf5b9c", "indicator--fd32042c-a6be-4ba8-aeb2-88aa736191fd", "indicator--4b100e66-dad7-4210-b635-0f28c6fd9fcc", "indicator--09eec30b-a615-42ac-b646-24e726691df8", "indicator--ab1407fa-3a4f-4a52-9199-6e64084a3c59", "indicator--b3a34f4d-2da6-491a-84df-6f292194860b", "indicator--1981b2dd-2350-486c-8848-924e98a3814a", "indicator--123084c8-5d49-447e-939b-d84e80281a5e", "indicator--1e0f90f0-bf7c-4d1e-b1de-99c46bf01dd7", "indicator--89804674-0734-4308-84a1-c1760f36e894", "indicator--5d768eae-0957-43ca-896c-c999629a7904", "indicator--058a07b7-2c68-4c35-8950-09e7715dc1dc", "indicator--ece18687-51d1-4cb4-b6d7-474b1cbb9182", "indicator--9458292c-4b63-4b37-9ffa-7375f8e2256e", "indicator--a09b4e01-7ba2-49cb-91f8-67a0aa783e02", "indicator--25f1a844-df7c-4b32-a49e-108835ee89a0", "indicator--04767174-f20a-475a-981d-8fcd5a793a8d", "indicator--07087522-a904-4df8-8269-c76d9849b6f5", "indicator--cd242ec7-1c74-4e1e-b43c-f842d5582ac1", "indicator--99ac0f6f-958f-48f3-b854-5edde14c33e5", "indicator--dccb5ce6-251e-4827-9213-985f823e2e34", "indicator--4df3172e-b583-40b3-ae4a-81570b11b32f", "indicator--f4f12eab-f731-48dd-a0aa-0a7e7b6461ba", "indicator--22305550-e49b-4864-b230-988dabaaf7e5", "indicator--339a2c0b-8f14-4123-aeff-bad32310c8ad", "indicator--48b1282c-9913-4f3b-a70a-52b265158a11", "indicator--a6ae32af-246c-4efb-bcb0-9a032d646400", "indicator--90da6a43-4879-41b5-9615-0afbf20dde79", "indicator--f6429f34-8b18-4be6-9156-13b98adc405e", "indicator--cfbc1675-7ac8-4e88-b560-d2fde2a66ac9", "indicator--e154488f-f72c-4c86-a822-cc7cf18e376e", "indicator--04707cca-35ea-4345-9663-b9cb0416e053", "indicator--ca57a3db-1e19-4b56-b49f-4de07f69f693", "indicator--67e1f7b4-a19c-4fc4-a2aa-397f4bc0b5ec", "indicator--5f0df7e1-e615-434a-9481-391decb42dff", "indicator--9de9a4b2-d974-47ae-a0f9-bda8a4d90f7c", "indicator--d99857cb-6380-4996-a0db-f068afa77ba1", "indicator--0eef027f-8725-43bc-b2b7-c39c647e1798", "indicator--a06b7ab0-b789-422d-8e3f-7add84d51915", "indicator--9de3ae24-acc6-449a-a220-86032e7f9af1", "indicator--d734701b-ce74-4420-9f2b-6e6f66896ef5", "indicator--d3b8b518-e172-44fd-89ac-e7e9c3350427", "indicator--2104fc88-115b-4528-9366-c106114dea31", "indicator--0e9a918c-be7a-46b2-9c72-f03c64314049", "indicator--fa981eac-f975-449c-8f78-66b9640072dd", "indicator--e08c2c31-767d-422d-a4b5-7bca4bbb554a", "indicator--18ab308e-4d78-4a9e-9e81-14775190d824", "indicator--64151327-2b43-4eb2-acdb-0ba3dfe37def", "indicator--21297606-16e2-4857-9127-9f028becb419", "indicator--de7d25de-cb1f-4b42-b421-6ffc8db193a0", "indicator--1f0345e1-eb90-4634-b941-3c52a88d5340", "indicator--268c1fb8-f9a3-4dee-8fb0-3291270ea958", "indicator--c03f6805-1f41-403f-917e-33e20e38aa06", "indicator--109aeec9-25f8-4d8e-9a5c-f8236a378b52", "indicator--7829f79e-4dca-4091-997f-2f061c2bf62f", "indicator--c44280dc-f85c-4061-abd5-a71f4dedf0dd", "indicator--72463c18-7132-459b-adaf-a57df39e0e4a", "indicator--1a19f71c-7d77-456e-92be-11da9927468d", "indicator--2af60ddf-f751-4855-a500-2b81b4be31c9", "indicator--9f84d8c5-eb11-4b5a-b71d-6fd501afa9dd", "indicator--78d83286-5b88-45b1-a2da-540f0bd41fce", "indicator--ddcdb73d-3b10-4cad-97ba-eeec212c7bc3", "indicator--104602d9-cbd8-44c2-9979-25d30cd92733", "indicator--ffc33bab-a40c-48ae-ae97-331ef6f231a0", "indicator--c082b205-d1b7-426a-8e9b-1685b1593a16", "indicator--73be95c8-ddf8-4906-a2aa-4145df43a6b8", "indicator--c2455acf-8626-4ec3-bced-baa560e03a6f", "indicator--13211bb4-5fc6-4425-bbc0-060a35650006", "indicator--fa7a20e3-7a82-401e-bf99-392c9ff3559c", "indicator--45efecbd-fcf5-4118-bfcb-57478a2f32b2", "indicator--e34e8587-f87c-45a4-9977-d7cc951284ea", "indicator--39befacc-f404-415e-abd8-727c502e01c7", "indicator--39a352b8-50ec-47b4-a9ab-ad3343782481", "indicator--5e53e284-493a-4cf1-9795-4b521a1f28f1", "indicator--c669c507-a451-4338-9f5b-0233bef5518a", "indicator--7d0bb960-3813-4f51-890e-c6ca87461f66", "indicator--14f62578-5910-4645-a89c-676f823136f3", "indicator--25d05758-e797-4784-b831-2bfc77cb76cf", "indicator--93a99d36-4b11-49a1-baa5-1d38778177ea", "indicator--f988fc1d-2a4e-48c1-9c10-78f53b401c17", "indicator--6ecd8ca2-eaaf-4075-8334-b210d3c38e33", "indicator--e4ed4c2b-d770-4aad-aa21-105ab51eaf87", "indicator--1f227343-68b7-4590-8aa5-3c8ffe5f83de", "indicator--b8a69e68-9423-4912-8830-4539734ed9f5", "indicator--433e78de-545c-458d-a4b8-7a2830dcd6bc", "indicator--d7a3ebfc-60ec-484b-98ef-09a1c0e69945", "indicator--cceb58ca-3a24-4c5f-aa0d-1da91cf7276d", "indicator--958adf64-378c-4011-ae7a-5a89b5c4742f", "indicator--0324a8e6-82fc-417b-afff-628a06e51f91", "indicator--808b9732-b02b-4b06-9110-0e9afedd903a", "indicator--9590d828-857b-49b8-8df5-cd58e603a590", "indicator--c3852ff7-131c-44d4-9f32-1f884b46b28e", "indicator--abe14b16-c2c6-4997-8812-549c7a8198d6", "indicator--6bc73d23-4329-4441-b800-6f8b3cbb3b45", "indicator--474b4f56-1a5e-4a4a-a7ea-489d56368755", "indicator--561f0ae7-7e61-4962-bdaa-28a734a4d110", "indicator--5e7f76e8-935b-40ab-96de-f04b83272735", "indicator--20adb51d-bd64-44dc-8af0-86c87a246600", "indicator--26b3ccb3-0058-4617-8119-ff3774891501", "indicator--0fef3037-2cf2-497f-b37e-dd658e35df89", "indicator--14048e3e-25f2-4f46-a4db-8ed1ed35180e", "indicator--0fa2a14f-652c-4f0f-ae5f-d103b4bffb3f", "indicator--351e379f-1af0-4a16-9f9a-d662f8059d1c", "indicator--c3952bb6-371c-4fd0-b8a5-ee3f0cda1530", "indicator--7c81b006-c8a7-4ef5-8f75-520078b715a4", "indicator--0dbf9f8b-e3f4-4c7d-8560-128467d860cf", "indicator--c4eb0ab6-1365-4f01-9dc4-b95676b480bf", "indicator--a14831ed-94db-4a22-89b4-23d094f4193d", "indicator--9a3ddda0-f18f-4162-9bcc-7b6c1ef22ee0", "indicator--1059c42d-3661-4372-bdfa-1ca370c4f8f6", "indicator--f91b8c4b-2d1e-4a40-9cdc-e556e4dbf0b5", "indicator--829feb68-0a07-4a57-b35f-a4103b8d918b", "indicator--bf7515c8-f3fc-4cad-a1d3-fd17c644c051", "indicator--bfb28aae-b5f3-436c-8883-1acad0db0ce8", "indicator--e9b7b2ea-ce3a-4635-bd6d-f15999b16c24", "indicator--78d58804-850a-462f-83e0-681c640683fd", "indicator--3dbaf1e1-ba08-4a06-b33e-3af1429e121f", "indicator--f95a3736-b762-4afd-b5f8-0ca8484097ef", "indicator--769ff602-47fd-47f3-8868-c7aa51a2e33e", "indicator--d0dd5b17-981f-48da-9465-4fa1f4a222a3", "indicator--d84d682d-08b0-4f0c-8e19-bdec39f142d0", "indicator--96711c50-9322-43b4-bd48-6d673849dd70", "indicator--3cd2f15a-dd79-4f42-91e4-edae4eb0998a", "indicator--30db6b30-084c-4fbf-ac05-a5b3893c9290", "indicator--88ff4983-d5b6-4107-94c8-f357ffc3d553", "indicator--44e18b9f-8c18-4e94-97fc-266b0998bc2a", "indicator--a1acff74-c890-44f1-8cbc-5d9c66ed4338", "indicator--07f43193-c1c3-4748-9f30-4bff18db64ff", "indicator--f4af8684-ee81-4ff8-a51e-7c68e4b90583", "indicator--467bf831-0649-48a8-97eb-9a3f4d97e2a1", "indicator--06ddd412-bf75-4844-8242-55df3af82868", "indicator--7a968555-ae54-4954-986b-492ee0ba4809", "indicator--445b5250-a344-430d-900d-22cdd812ba0a", "indicator--073b85ef-f711-42b4-a8b4-f1bd5362d7ae", "indicator--018f630a-527d-4e4c-8f06-52b4b50741a5", "indicator--6a698e03-71fa-460e-af37-bfe6d39e9fc2", "indicator--74867a7a-c804-4583-a8a6-e358695257b0", "indicator--54136c24-81fe-4d92-a6d0-905b88c7a6d3", "indicator--5af0f76a-041c-4644-92de-aeef97b08139", "indicator--c9878c8e-bf0f-4fc0-8ea2-98a8f042d9ab", "indicator--63625fc6-2a95-4c47-be00-5c8476942d10", "indicator--7f17fff1-af4d-43e8-b098-78ec14897ab8", "indicator--47eaab10-14b6-4727-a89a-d18bd1b03268", "indicator--ab2d1512-f56b-440b-b6ab-5b13f3b876fe", "indicator--584e993d-9b3b-429e-bcce-7d67e10f396e", "indicator--2352fb08-7b6b-4671-84be-794f94cc1a20", "indicator--33a18348-47aa-42e4-9cb0-cff28f48fa07", "indicator--93f82522-8856-4a0a-bf3a-66c461947933", "indicator--4876d8fe-0cf0-47d4-b354-ba039f2be198", "indicator--7426af34-8fa0-4cf6-9c1e-db039b8a707f", "indicator--f115cf2e-9045-4ed3-91ad-ae3183ef5c75", "indicator--917cd624-0ee3-45a3-ba1c-18b61a593556", "indicator--88d61f1f-2efe-46ea-a937-1ba64dad8d99", "indicator--66c1f42d-1fca-4e16-8dc4-b41072ed8e9c", "indicator--34b60164-52f8-4473-a067-81c019303a64", "indicator--99176ac2-9651-46f3-b53a-12f0ac078d90", "indicator--6a2aa935-8509-4114-a0a5-5e1557f00a5d", "indicator--d8fa55ce-2788-4fc2-ab86-576941579cd8", "indicator--fab00b8e-c452-42e7-843c-9443340070d0", "indicator--9fd0a127-31f4-4fc1-9c49-63defd3d75a5", "indicator--ede8c5b7-23d7-4b76-a0cd-41408dc22fb3", "indicator--5cc21902-fb89-4242-b3a9-dd714e0f37ed", "indicator--31e16387-a15d-4089-b217-66f6860e1762", "indicator--0bb59d89-2962-4538-90d6-c25e5c15a99a", "indicator--6e2ab067-a675-4004-a2c1-4badb5b36dd8", "indicator--6701364f-121a-4e5f-b928-ac1c87595b74", "indicator--5908ab8d-84dc-4172-a321-bb2df45c863f", "indicator--76c8b822-939e-4a61-9c36-6c3a45059434", "indicator--bd0410ca-e629-4c9c-9715-3e6cb34edee8", "indicator--3a958647-c052-40b3-86cc-826c6fbdf67c", "indicator--cce683f8-96c2-476c-ae83-4e6c79b49b23", "indicator--f80c794d-d06a-44a8-bc8c-08f1ea733a41", "indicator--1ff99e09-687f-40e0-9d13-257dba78c60f", "indicator--ff3b1746-6bf8-481c-9da8-0076d447180c", "indicator--4bea7c51-e2bc-4b31-8de2-39699165b5a5", "indicator--551d6c06-9638-4785-b341-9c59b768e081", "indicator--6557816a-5b51-4fac-b30c-711ea6bad7ae", "indicator--f6c5b244-a58f-4bc7-943a-6a72a297f553", "indicator--19aecff4-26e0-4647-bbd1-97aefc3c63b0", "indicator--c85c41e3-03b3-437e-8b23-af581feb5d09", "indicator--a11949fb-301f-4cb8-973c-69385dff00fa", "indicator--f947c63e-c446-4cab-8a9e-bb0136c302de", "indicator--bd5b300d-b91d-4819-b46c-5bd3851520ab", "indicator--15b57bcb-8813-4044-b088-324688fd2ee2", "indicator--aecd84e1-0680-4cd3-a81d-10e923f60076", "indicator--9cb7b81d-d02a-4a99-b00d-988a71531a4b", "indicator--33051bec-3780-4e62-95fd-1bb6a19c6bf2", "indicator--fd196c80-b8b0-4122-9b7c-1fdfb7012a95", "indicator--c08abf6b-1209-4976-91f3-b1999f8e9c5d", "indicator--4ff20c93-4650-4b19-9daf-5507a8bfe93f", "indicator--c8f3a2f9-3108-4fc3-b386-22d8483efc6b", "indicator--56b85da9-0d08-405a-b716-1a8bbe3f07a8", "indicator--fb2a87de-3ebd-4248-a74a-1a55e2034369", "indicator--cd11c8d5-e0d7-4e50-a660-d4809a107211", "indicator--7805abb0-fdb6-4968-aeea-9cf653479af6", "indicator--615db115-8083-406b-a6c7-5f4433bec836", "indicator--0eb7ce46-548b-443c-8ae0-ed223d804252", "indicator--574e1195-fb8a-457a-8801-0e8f49c3699b", "indicator--36322346-361f-4bfc-b198-b9780de7fc02", "indicator--2ff6e35c-bb41-4b86-9cf4-116576f121cc", "indicator--99a2efcd-682c-4a0b-8ef2-b03ec70aa483", "indicator--ee93f1cc-b9c8-49c0-9a3e-d53db5fd6468", "indicator--9b5a2953-682c-43b5-9357-662901cbc309", "indicator--912f39ca-c9a5-4457-83b9-42be4a4ce238", "indicator--d5803dfd-fdbf-494b-aa15-81027b6ea721", "indicator--b8c19ddd-a758-496c-adbe-75fa9441d186", "indicator--0d456b9f-b165-419d-bf71-6431e299579a", "indicator--838d61d7-2c0d-4fde-8542-c8c45a3de4c8", "indicator--260e41c9-3105-48c2-97f9-8640d65ca617", "indicator--88877d6e-0591-4250-b1b1-2e0ad484b625", "indicator--fdd69850-000b-46f3-b423-687c08c635e0", "indicator--a0d691b1-da18-4bc6-93e3-eecc433422e9", "indicator--3ac3d8fa-22eb-48cc-a22c-ab41b77817b9", "indicator--50e62712-c940-4234-a3ed-e2f327627558", "indicator--7eb4292e-0275-460e-8222-14a3fc39a6f3", "indicator--444c17a5-a0db-4be5-97ae-19495315570a", "indicator--d4487528-3427-47a0-851b-a6abd0b1fd8c", "indicator--b5cf5e1f-9c87-4f66-afc4-86d7a1f27c03", "indicator--ef8ec0fa-b951-471a-a574-de1b32934f08", "indicator--42e378f0-efa5-4bee-95d4-b29c733437cd", "indicator--681d022b-30d8-49d8-a85a-1695110e0e1c", "indicator--c893d288-9cb8-426d-90d0-75a88e6487ab", "indicator--92bc35fe-6cb2-402f-afdf-0f68e13b782a", "indicator--25000fd5-be4b-4854-86e6-73a0a6cd71a4", "indicator--806da8a0-d01e-4c9a-8dd2-f90d59ca91e9", "indicator--866d03a8-59b4-4035-8756-239e4928208a", "indicator--107dc008-8c9b-4df7-b1b4-b12b7dba50b3", "indicator--62bfacad-da9e-4cca-84d4-0ea1547336c3", "indicator--2c52b11d-6a68-4428-9423-6ed0669bf144", "indicator--6d4b5879-0873-47cd-98a4-47c0639719ab", "indicator--4a0d59c7-721c-4563-9b9f-fd283b0beca1", "indicator--1c49aa76-5975-4ba2-9b10-10ff290d29ec", "indicator--07e01540-d3e8-448a-9803-e996e890a319", "indicator--ec4a4679-08d6-4823-befd-e04783c225cc", "indicator--4741873d-01b4-40fb-a1a1-1846519280ff", "indicator--855ba953-04f3-4acf-b33c-cad882927270", "indicator--1fb81d1d-08d1-48b0-ae35-5a36c79a56b9", "indicator--6ac9bb04-9a78-4486-9182-4179707412eb", "indicator--502a9b32-def5-425f-924a-e42660af2ad3", "indicator--daea3665-74aa-4b44-aa16-d68b505ff6a5", "indicator--6842c99d-91ba-4b0a-866d-3d24c04de72a", "indicator--b9624c81-5736-4c81-8d87-6b8598aeb474", "indicator--84305855-edd2-4380-a577-d241a79d25a0", "indicator--6d10f18f-677e-4cff-8088-01d851da795b", "indicator--cc27f52e-a22c-4fe7-80e3-273c96f07ba7", "indicator--a2803fba-907d-499c-92f5-09eb6f9ada46", "indicator--1e8085f3-4d7b-4c8a-b915-4128c4cf714b", "indicator--b6e26b6d-9230-41e7-8f95-f5e410d9add6", "indicator--d17ab817-6efc-4f73-90d5-0854b854638d", "indicator--7795a979-3b86-4ead-873f-0a30c84c7937", "indicator--751ab5ee-2c8e-4598-b325-26e5eb237561", "indicator--cb483e64-aa59-4dce-9b16-47f661b2de47", "indicator--89474e59-bd58-4690-9251-80aa3789e7cb", "indicator--3685f8d8-407f-4c3a-8696-370459ce27d7", "indicator--6b19df9e-9485-4940-9f0e-c6e671163ceb", "indicator--0555584f-6ce9-4efe-8d48-46d5b3687c24", "indicator--290f0864-8ee4-48df-b5db-a184cb83a171", "indicator--e1d7f3ec-df9a-4a3a-86bf-98d74d657ed0", "indicator--a65a5134-b593-4937-a11b-296c87e3b832", "indicator--d84717c1-d147-4f41-a026-239fe603d3c8", "indicator--8cba1910-2cae-4964-8f80-18ffce51b6e2", "indicator--e4b3e1c2-b947-4e8c-90bd-d38d1cd41e81", "indicator--4d54bbb1-e9d3-4392-9405-bd061a0f607f", "indicator--156bcb7d-8223-4f02-8a39-27d0c602cd9e", "indicator--20ebaf32-4003-43ac-b437-9d8990ed6b4f", "indicator--5ea5b5ee-cd82-42dd-9baa-34011fb37ca8", "indicator--c8f2c6bc-6e6f-4c24-9959-a8a7d2c97c88", "indicator--d5169636-f76b-410e-a76a-fa270279e888", "indicator--d7c4f610-b826-4282-ba8f-87855a909715", "indicator--727afe9e-92e4-4923-9770-b937a27d738c", "indicator--c34945ef-5647-48ca-93ec-af08fca30ca4", "indicator--6ea774f7-8198-4aac-8cc0-b30fd01813a3", "indicator--b219408a-ff4a-4010-8610-a7e21d7d17f9", "indicator--629d6bae-d2d7-4f26-a29f-bfd19addcd7a", "indicator--99192778-e22f-4375-81e6-497f2f11e237", "indicator--bc9f1daa-6b4a-41d3-85b9-8bd6f5a90a43", "indicator--c4ee89fa-38d2-41d5-a441-ce8904d1ad6d", "indicator--dbae1f39-665e-466f-b484-cb246c0961b2", "indicator--ff8de9ec-941c-4ea6-81c6-551944133c8d", "indicator--04414432-ce93-4bdc-a63f-0665d80ea84c", "indicator--98f20d4d-87cf-4ca1-9aa3-473ce5515546", "indicator--e2fce238-959c-4294-97f9-8ee62c1ff47c", "indicator--dd739734-66f5-4743-9ed7-088df1500cfb", "indicator--fdb11387-71fb-4630-8249-7b51e138eacf", "indicator--2a88897b-4100-48d8-ba3c-60b456b4f879", "indicator--9ca38d0c-61a0-43d6-9627-fbcfd1fa70be", "indicator--5aa6f6f2-fede-431f-abd7-71436dfab86d", "indicator--032845e4-3ffe-46e8-8b38-1594ba96ac91", "indicator--c2b359ac-e40b-48e8-a3f3-93ed5a97f1e1", "indicator--bc74d0d5-54fd-46a3-a341-b412ed832974", "indicator--f45718b3-bca2-4cb8-976d-9b71b1ce3fda", "indicator--27cbd71a-e1bb-4e4f-bb00-b3fed2b6eeda", "indicator--30cc2fac-8132-4f26-a8e8-d9eaca838fc7", "indicator--3ef233de-7de5-4a7f-b5a0-1ceec95b5161", "indicator--f15453a2-123a-4f7c-a03d-603e3b168055", "indicator--e01bb67d-f82f-4e29-94b7-8f6cdcff9f4c", "indicator--56bff21e-f6ba-4fa6-a289-f70d6f6f0f0d", "indicator--ef9562ae-1f37-41a7-89d4-556f2b151b09", "indicator--a2e3ecf9-ea6d-4c50-bd3a-53d65427c8da", "indicator--5dd45c9c-1c86-4a5a-a75e-418ddf22fdcf", "indicator--bafea509-f330-4b12-9e3d-202802d71784", "indicator--c1208e3e-7a84-4ba6-8b1e-e660ff903096", "indicator--a8e68360-42fb-4b91-b0d0-0333b5ed11dc", "indicator--f575c896-e67a-40eb-95db-2f07cb7af3e0", "indicator--1e37c402-7c72-4e4c-a848-4b65c5458619", "indicator--8215535e-7353-4369-9969-fc4612b649b8", "indicator--075fa8d2-9428-4210-9455-8a27bbcbb74c", "indicator--6deaedd8-b91e-4d36-845c-2273be3fe278", "indicator--e935b186-8b60-4d9d-8210-2d13cb060cc5", "indicator--e04f7317-76d0-48a5-af76-d0dbde96d15f", "indicator--fa508cec-c74e-4157-9e18-c32d9cfe2f83", "indicator--347309ae-60db-4f59-a9ce-703fae0f1206", "indicator--2b02f3a6-d19a-4889-a72c-1b9cab39b014", "indicator--baf658c1-3a5a-4ecd-9519-6917e16b1abd", "indicator--2d604023-c543-4b0e-87ff-e32e4d7ded3b", "indicator--9fc43c3f-ce47-4765-90bf-d6ecff426957", "indicator--3b5cbc0a-1239-404d-a8b9-85e2cd8794bf", "indicator--9238c68d-e013-4d57-84c7-cd38838d0490", "indicator--a26697e8-c387-46b0-9240-87d2f95d57f6", "indicator--a2d68848-b51b-4605-a0e0-d32633c4fe91", "indicator--6dc21250-c0a4-431d-b289-fb546b17d14a", "indicator--6a25bae9-4711-4031-8d78-33c9273aca4e", "indicator--1b3abc2e-2237-4a73-9d15-cdfe33461406", "relationship--39d4df3f-5de6-409d-969e-35029e37795a", "indicator--6fce715c-1223-42f5-a3d7-61e5b31028ce", "indicator--2bf40df7-6a40-45bb-be71-0e84732c2464", "indicator--f2a5ec97-f588-40a1-8830-93040d9b80ab", "indicator--5d2a7348-4078-4b44-8202-b931393844ab", "indicator--0a5c45a6-71e7-45ca-bad9-09db854564cf", "indicator--98758591-716a-4959-a3be-9a67013504a2", "indicator--d7627ff7-9d9c-418e-b579-bf3d33501141", "indicator--9ca277b2-6057-4299-94c3-b20edaa53878", "indicator--aa381245-2097-4827-b871-96118482b417", "indicator--196cc367-fa91-41fa-a03d-0484f3cba4ce", "indicator--fa3950fd-6410-4fbd-baf9-3e69e954b9d4", "indicator--6fd29083-4909-4ddd-a344-44c4c4718dbc", "indicator--798b591c-cdd5-4c9e-98e4-b3e5644a6f0f", "indicator--628c6870-d588-470c-ab76-2184c1097926", "indicator--b4db2277-6a00-446b-b639-98e78f342acf", "indicator--9f6ed0fb-5718-4a27-8660-30f310d947a3", "indicator--dddbf373-5e3a-44f5-b583-63f80643ec2a", "indicator--6f118751-b1fe-4cea-b173-0dd7dbcd7f71", "indicator--f5cd7f58-0714-4f92-8d26-2f2715d18541", "indicator--86a87cc0-93bf-4323-9209-ea12868f2000", "indicator--fa7ba6fe-6788-418c-9b4a-a3eddd023588", "indicator--bfb3a513-5a48-47dd-b6a2-9b5e10bbd192", "indicator--78e4ce1d-8817-42f4-bf4a-91684a48b285", "indicator--3a3622f6-56b2-446a-9360-49fd642ccce9", "indicator--8d47f237-a370-4eb3-ac7d-1e03f21ab73d", "indicator--82a46d73-c7d7-44df-9b4c-366092b39e71", "indicator--77feff6b-418b-48b0-b447-34b049ed16ed", "indicator--aea08717-ce2f-4ab6-9bfa-504656476f96", "indicator--e9a742ad-1f9d-456e-81d3-5f13e6936a16", "indicator--c4d783dd-13c1-4659-a7ae-bd8f240cb158", "indicator--38e0508e-cc2f-4f36-9343-08df69a21722", "indicator--b57074cb-34e4-49c2-a7c3-f5a0c47fedca", "indicator--9ef37c13-ee04-4034-9124-47c7954fe14b", "indicator--0a277685-630c-4b8f-a6fe-f98ce66c48c7", "indicator--658f98de-2ca9-46fe-85cd-b4a473e1eda8", "indicator--6bb683e2-ed24-4a84-a3d8-b05cce3e9a11", "indicator--8db265a3-0576-485b-9993-f001810b868b", "indicator--997697b7-64dc-4ca3-8cb0-18d53189e1ee", "indicator--8309f0b7-ba6e-4713-a784-fa3f0c99f81b", "indicator--637a9042-38f9-47a3-88e4-baa4a6094fb7", "indicator--65d0cb82-a65e-4134-96cf-2f51bbd5e9f3", "indicator--fe3636b0-4613-4e61-9858-aa1e0ed7a938", "indicator--0ca17750-a2b4-453c-9952-b2f157adbd23", "indicator--a06f1a8e-71b5-4005-9215-b0f462a8e688", "indicator--fa1fec1f-3cd0-4bb9-b8aa-7b02b3cc408b", "indicator--adbb7fba-6a6f-40d0-a1e6-9143f0237e80", "indicator--b40a164d-8470-4af0-8289-37cf796c3c6d", "indicator--ed911867-adbb-4167-ba1f-6e33f1e209d6", "indicator--4209c32f-f7aa-4861-9ab6-7add3c3671ae", "indicator--d4e713be-e6d5-435b-afdf-cf936523b03c", "indicator--88b3e519-d2c3-4be1-9e70-2e3e9966844e", "indicator--e751b41e-0d7f-4742-bc70-bfe1659f31cd", "indicator--f6aefef2-b2b7-42e1-9c48-d8b88a46c608", "indicator--9d117a34-b3f0-48f8-995d-5c217c07eda2", "indicator--9432279c-9d92-4e3d-afd7-e10c3a4a2979", "indicator--31f12ecb-02bf-4b86-a5af-a3c6fd40e2da", "indicator--8d15787b-d7de-40dd-9987-f5a0fd30d8bc", "indicator--944c2720-4af8-47a1-af40-9a9b02a9f567", "indicator--45e8e4c5-c598-4864-a6a8-678f5641974a", "indicator--fcba4438-1c89-4e20-83c3-96c7174b8ed8", "indicator--2e678c6a-ac2c-46b2-a85c-5349ed9a3cd4", "indicator--c4c26a82-6f5a-497d-997a-a36ac08b7ece", "indicator--a19a3883-2bbb-4881-b5f5-846f5c769f41", "indicator--1d1fb006-fb4e-4149-962c-7c3448eeed15", "indicator--360265af-8766-40ed-87ed-192b1ac60872", "indicator--fc641448-699d-435a-9f01-5ae8b8d70ed5", "indicator--ea8d5e2e-75aa-4adf-a341-6fa401ef1048", "indicator--4d16dce6-94fc-434c-bfc1-59997d871540", "indicator--9b865800-593a-44df-8741-9f0ed9a6ec2e", "indicator--8855ee79-d1d3-48b8-9257-24e273c60994", "indicator--066e26f6-7147-48d5-909e-40923345e69a", "indicator--d877b66e-c44d-446e-961e-20da938fada1", "indicator--3761a57f-6829-4c36-9eb3-4649656fd15c", "indicator--1af7ee8b-ab7a-446f-9db6-5cc3f26923ec", "indicator--cc146cf4-ebbc-4c33-a56c-d3020a5ba0eb", "indicator--e60e52cb-219b-4471-82a8-f51c2aca09e1", "indicator--6e0e25e3-3c5b-4169-8475-1ee50f4c66c6", "indicator--d9986ace-13d3-4d09-b791-bb2404f2abbd", "indicator--b8f224c3-9b71-4695-a2c3-f5f392999e8f", "indicator--c9e77362-c42d-4e29-b47a-a9c0d308538f", "indicator--85bbd88d-57b5-4401-9370-2ea865046eea", "indicator--e0228c87-18ae-47c9-9600-c22b814dc8d1", "indicator--60b1e558-146c-4a18-a369-0ad18a7683ca", "indicator--6acf1e4b-f867-41c6-86e7-9612179091fc", "indicator--bc3c355e-ef6f-404c-b677-85daf38dee75", "indicator--736a0671-db43-4db1-9fa5-495d0f5f8e58", "indicator--faadadb8-bd72-44d9-8b10-77c2e04cf694", "indicator--78e037d9-8efb-4490-be9a-2f8fd6b68844", "indicator--6b2ee498-03f8-4920-86f8-52c3a1617ad5", "indicator--7f880374-f9af-48ad-9c66-989faca7a5a4", "indicator--783ccb8e-bf49-4d4f-80a1-3a012ec02c00", "indicator--0677b9f8-5b3c-4ed8-bb40-04201d122ec8", "indicator--50b020f1-e6de-405b-8d5b-e81eb2e012e8", "indicator--92e425c1-b32b-4bcf-b113-d07697e2682a", "indicator--83b786d5-348b-4308-8b93-d920fb1d2f4f", "indicator--514d7486-a0b2-49b9-a096-900135db5798", "indicator--a3337e6a-ff2a-4556-bbc2-43c95406d05a", "indicator--0b10c9fa-09f9-4061-97cb-5585d63b131b", "indicator--7d1e3127-e6a7-4477-8e6a-c8db2375dca7", "indicator--37f40fd9-912e-47b0-8663-843f86b45ede", "indicator--b94613c3-71dc-410f-8335-06e2bbb4a3a7", "indicator--9c74358f-08f0-43d8-b482-c020bc3b8ebe", "indicator--62fd6452-58e3-4810-aa80-3fbe364dea7d", "indicator--058c2b51-c3dc-4d74-8f0f-6d230e89d7c2", "indicator--5b396ac1-9e3c-4d64-b3c2-a91c46ecabf0", "indicator--04966743-d1e8-448f-a315-1c242997c792", "indicator--5dea615a-961d-422c-bcfe-12076f3cf89c", "indicator--50b5fec4-e64d-4b57-8950-b92e5373331c", "indicator--35654d71-d831-4237-9130-092a95495fe1", "indicator--1abd54d3-c8f8-48b0-a330-71a7fd09d914", "indicator--3a2343c3-c1b7-44a0-8049-3d3bb3b40296", "indicator--66b455a7-3936-4670-9233-a070a143480b", "indicator--f21696a9-905c-4c7c-900d-80cf63a632b3", "indicator--1cdd882b-85ad-45ef-811d-b5702c0f1c61", "indicator--6df80f1a-d060-4ddf-9ad0-9dbc17770501", "indicator--b76d87f4-0b7d-4aca-a44b-41da04929568", "indicator--8ca00722-39be-47fc-885f-91b858937117", "indicator--f14b7473-77b9-461c-9a57-90b882a29f45", "indicator--5cfe07bd-c9ed-46e6-9f6d-eb7a98a5d972", "indicator--513ec6f9-6ff3-423c-8ee7-c7d6abfc23bf", "indicator--1a5f7bb9-93cf-441b-8b5c-53f99847f20f", "indicator--425db70a-f077-494d-bbaf-2f7b211e9088", "indicator--6aea4650-4796-4e39-acb0-ed9e15746856", "indicator--be450444-e7f8-448b-89f4-4f9bff2bd8c5", "indicator--289d4b06-b49c-4c95-a588-36f503681926", "indicator--4d0bb619-0445-436d-a3fc-804cfc3f0d14", "indicator--607dabea-0fba-45aa-9d49-aa1f4e269589", "indicator--72de6ba7-ba8d-480f-8c4a-7bccc490470d", "indicator--71218af3-14c2-4ac1-895c-a35e6bc89592", "indicator--e4f1b2ef-52aa-4f57-8334-7ee05f88df2f", "indicator--7f3cf01f-6da4-4dc5-9a43-122d78b67fae", "indicator--de76fa4d-edb6-493e-97d7-336296b448e0", "indicator--58ae937a-fd63-40c5-8a52-1ec88f59566b", "indicator--4fcafebc-1558-4141-8a32-7074fd6b7d6a", "indicator--79695b2e-1b94-445f-be19-9cddcff27969", "indicator--e8b9dc2c-c427-4e5d-9b88-9e1cbf28b8fe", "indicator--3ebb8998-6663-49fc-b4de-bb79c631c2c5", "indicator--3544b22d-dc8a-4367-ae02-69f112301de5", "indicator--3ed79d8d-b261-4574-bb19-48e3bfc81440", "indicator--2fa2f166-58c6-4b51-bcc3-a17d5c37ef17", "indicator--b5341151-46d9-4a3d-abba-41d25f13b9a8", "indicator--98e30d45-4b1f-4f6d-96b6-80dc18046530", "indicator--3cff3dd6-a8bb-4771-9f0a-50b54b9834cb", "indicator--11da5a36-9702-4b0d-b45b-d19a1ecb7d84", "indicator--469b5a6a-7735-41d4-8504-559a35847e89", "indicator--2ac98f27-c3a6-4df7-95e1-133e19c3bc61", "indicator--12645b3f-1f8d-442b-ad86-8a0d4e258f48", "indicator--aea2f7a8-8cfe-4d05-a9ef-237f469721f0", "indicator--afa54c9e-1826-45e2-9b98-1cf475d28cca", "indicator--850b0958-f89c-4883-b0a8-098f4eb94863", "indicator--f5feae99-32b1-4b06-92a1-e6c70874c3fa", "indicator--bbff8ee6-bdca-43ab-b562-7b5ea3fbfe66", "indicator--f4d184df-84f2-48e4-bc63-384c426ea408", "indicator--1c0357f9-b542-4665-9a14-e965368b0c00", "indicator--909a7dd7-0ee6-4691-900b-a3758f578310", "indicator--757b8238-1866-4373-a7fd-680479c3afa8", "indicator--d072f5d8-c950-4c85-bb79-b9a65fec3c1d", "indicator--fc8c8972-8847-4f73-9c87-60736528a4d8", "indicator--d0d2ec0c-662c-4a30-b308-7a0e0782b1d6", "indicator--9b04b2bf-21e5-496d-8b8f-9c15c4efe4cd", "indicator--6b3f2d6e-3bc6-4f14-b77f-d97530e44937", "indicator--6640d856-fc6a-453a-ab75-2622a58190da", "indicator--3632d366-0664-4e5f-82f2-fa31b6331754", "indicator--e8965641-eee4-4d0c-9563-dd4ee4b30e70", "indicator--6d4c7cbf-becf-489a-b510-285b0827b115", "indicator--491f6ff0-60d9-421c-91ba-d17b4c2b458d", "indicator--d6610f50-0f8a-4118-9d13-40b460ccd11f", "indicator--48d38682-9617-4b59-a27a-d846e718d1d9", "indicator--aeecef5a-9aeb-4d88-af3d-8ad7dd0802d4", "indicator--4edc0f3c-0c28-4caa-b5db-c1cffad5069f", "indicator--34be881e-3cca-4e57-bfbd-6f24ba0adddc", "indicator--ce562d78-f182-420f-ae8a-51e29890bc36", "indicator--0c49d97f-4b87-435d-9b33-cbebb3c3dd74", "indicator--47bae346-bf72-48c6-b994-17060d80d3bb", "indicator--9a19ae6f-7844-4559-9846-bf732f76de1c", "indicator--76fd8a74-24a7-45a7-a152-2b8b4f11f678", "indicator--9321524b-904f-4b43-8f0b-e65be0e6e30c", "indicator--1d2d2bb3-8dd9-49f2-8735-6dd42da5f581", "indicator--9a9c0c8b-dac6-4ca2-a2c4-1cdba79077c8", "indicator--42ee32ed-5c5b-4ee7-a075-a2f6b6df7b41", "indicator--1dd3781f-bb0a-412f-b0a7-713cf3b16f68", "indicator--b4d5986a-18f3-4b3b-837c-14b66823eda3", "indicator--cdfca342-ef73-4566-9d01-652dcb12b6e5", "indicator--f65084e7-ffd5-4735-94f9-5fba44a8f88f", "indicator--8b5ddc5c-d8a3-469e-8760-9e52de2c913f", "indicator--c947213d-b429-4eba-9480-e08e249023c9", "indicator--d20e184a-e9f2-441c-92e0-f825b4fbef47", "indicator--d181e969-8da7-43d7-a42f-1ddf5ca57f74", "indicator--3629f8a3-58da-4535-9b42-c8eb641e9f16", "indicator--73af40ad-14cb-43b5-bdad-72e5c97504fa", "indicator--bbb06822-9914-4ade-a51e-5fef4f598a41", "indicator--2ca5ae82-e339-4a34-a77e-7eedeb2db8b5", "indicator--5ed6d231-668b-4e3c-86e7-b53d6e9109d7", "indicator--89a94010-deaa-44e3-9b13-a1cc7bf42111", "indicator--c0f429aa-e387-4d85-8e53-5ce47f5fca70", "indicator--21457eee-9a3b-4e58-869e-75dfb2f8f6cc", "indicator--17f75b14-cfc0-4288-9e16-5739988e63d4", "indicator--f90dc3ee-78e0-47b8-955e-d90e9c9aa12e", "indicator--7727b570-be58-459e-a536-eefa95daf8aa", "indicator--bf122e81-8430-4c98-a9a6-47752585762d", "indicator--405977f7-0eeb-4106-b57f-d6e393518532", "indicator--975ac386-abc4-41d7-8319-c77c927bc55f", "indicator--fc8b6f11-1632-4561-aeee-5e13155d69eb", "indicator--807f663c-aa7c-409a-b2fe-24cdc29d5eb3", "indicator--6d4e16f8-bbfa-4baa-8601-e861e44d36aa", "indicator--941975fb-39ef-4d38-9c4c-985ff92f0521", "indicator--31e7f0cf-4995-496e-86d6-770c0d9f5c04", "indicator--b93592b9-7362-4094-8c08-fd3af9c8427d", "indicator--f3552d77-b04c-4120-9656-dc14610b080f", "indicator--3b660b3d-8e42-400f-9a62-2ea651a9f2c2", "indicator--80a6ddca-810f-4395-914e-d072f3cab6e9", "indicator--8ccb7c5f-8145-46cb-ba98-03c99d7e9219", "indicator--b4806f27-8e30-40cb-9b1b-aae5d2de2c6a", "indicator--9bef80cd-512d-4af0-af79-5c945fa43011", "indicator--eb5772a3-0813-4305-9ad9-e73df6ff4039", "indicator--5d9419d5-13d2-44fe-bfe2-974d18f4c469", "indicator--469e3a4d-1648-471f-b09f-29d471c65af0", "indicator--1fe661fc-5342-4815-8017-11398f87ffdf", "indicator--ab729eaf-c33c-46df-9b24-43f6a1cec9be", "indicator--042c7da0-7e42-4498-88ed-a539b31636c0", "indicator--9d3c6eb8-3d8e-4f5b-bd3d-0127e111b5be", "indicator--2c4d43cc-e2f5-4b55-a842-0b6e24b504ab", "indicator--42a499e7-e448-4d08-b35d-267e399c2955", "indicator--04b3608f-173a-417c-8bfb-d0615913d33b", "indicator--35707ada-10f1-4acd-bd74-253ae6a9d0a1", "indicator--a7cfacb2-edbb-42e0-aa4d-b4ddb685af76", "indicator--d70d9d50-3c93-4e60-adc0-311f86a4ee7d", "indicator--de2b9aaa-12fc-41e7-954a-a3e2e6eee239", "indicator--4ad9ef04-cea2-4f5b-97d8-b85a0019cbbb", "indicator--4e5f0331-5313-42f1-8513-f7fa0566ff77", "indicator--80a6a37c-9c75-4bac-a24c-ec6f824b88d8", "indicator--f9947810-1757-46ba-a1e9-4cbad4e07187", "indicator--cf4a6cfc-16e1-431b-95b5-81f2911ffcca", "indicator--247284f1-0ae2-451c-9423-368d1db3b68d", "indicator--493ab959-fa73-4cc3-a51e-f819a8709cf3", "indicator--c00c7312-297b-4907-a342-2a6757b3b25c", "indicator--b4a40ee4-802b-4c3d-90e6-0056e2962ee4", "indicator--0215e59e-30f5-4c49-a45e-d012b657592f", "indicator--ce83caf4-a5b0-4a84-b903-5cacc299bca0", "indicator--f5d12b01-e66e-445d-978b-841c6e191131", "indicator--26d56fd6-f4f2-43a8-a862-c0166ad214e0", "indicator--285e4c45-3771-4544-8df7-49d2ce4294d9", "indicator--fd00bb38-e165-4fb9-b0a7-b65ae0299e8e", "indicator--beb8b9bd-11bf-4893-bd43-851d7bf80880", "indicator--dfd6354e-206c-40f2-b474-c33f60b131b0", "indicator--9cd35522-8fbf-4d85-9afd-44c3a189868e", "indicator--5e0c8122-8a3b-47a1-b15d-8f85550f74e9", "indicator--e727f85b-5152-4348-8097-9b0db8a2a9d0", "indicator--1b326c77-93f9-4f61-839d-6d60b3fe4c90", "indicator--1cb65fb5-7a21-46f7-beba-9d47afc550e8", "indicator--417a28c8-0174-4694-ad04-14c5b8d6c592", "indicator--8fd29989-63f5-4e72-aa37-40d51aaf12e4", "indicator--b3131981-cdec-4e97-ac9b-b1b63f11d706", "indicator--aa0b9431-4244-4732-9a8e-9abaae6c93b1", "indicator--997a710d-2381-4970-afe1-58b488b6c36f", "indicator--32e66897-211d-41b4-aac8-5d92d8928f92", "indicator--b65ca4cc-ab66-4145-ae34-a6be576a8fab", "indicator--23ebf837-cc02-4c67-9ceb-3b6dcc10da5a", "indicator--96146ce4-d967-4436-9702-6f0d75973ab1", "indicator--e58728ed-f239-40a9-9a26-1245a210f4cb", "indicator--e8bb3a3d-a484-48fa-8543-b9b0a67ce1ae", "indicator--300365c4-8608-47b7-bb44-37e8a272818f", "indicator--1d89edea-9d93-475a-ac1b-e32ca2dbfd2c", "indicator--85dd12fa-dca1-41e6-9d6f-45023a58268c", "indicator--66366617-42fc-4ac9-bb60-4c0fe67efb67", "indicator--ce89aac4-73fb-4027-a4d2-d71a92e9bd7d", "indicator--cc31b4e4-bb2a-4689-8314-ab8b89f799c1", "indicator--c0c30452-41d9-475f-aab0-ab9ea76fad19", "indicator--1510a0e4-2c12-482e-8733-451e5c92397e", "indicator--b1fadb86-ca48-44c0-99c9-c103ebe78669", "indicator--255ddf79-5ca0-45c0-bce1-bb08bbfa9a35", "indicator--3173df81-cf73-4a6b-b023-9ff1ed0e28b7", "indicator--f79d2090-d1c6-4cac-ab28-42ad93424921", "indicator--c6c5f40e-6552-4657-bd29-dffa865fce5f", "indicator--749b860a-7400-4e63-82f3-8189284a3136", "indicator--aef2962b-58c7-417c-966f-56c8ef24c39e", "indicator--d58c77ac-0b6a-4963-9c67-e91d778f5d87", "indicator--e382a49e-c4fc-4fee-9f08-541de3e096a4", "indicator--ae6a42e6-cf18-4216-9574-3605537bcb0c", "indicator--63b0303c-5ca2-401a-aa9b-16d0d32a1750", "indicator--e784aa27-a7d8-4675-b338-854e43ecf866", "indicator--4dfd63ec-35e8-4cb8-a50d-289412772ddb", "indicator--3f7605fd-f926-4e5a-9900-65be78b7450a", "indicator--30031877-8165-4a91-a109-e4ff5b186f74", "indicator--1486c81b-c2ee-494b-bd21-86c7b9182b61", "indicator--48498602-d690-41d8-b125-cf84f0c5bcf4", "indicator--098a4cf9-22c3-4604-a558-e1f0596f3d8c", "indicator--460093a1-2c52-4839-85c0-cb1c93e740e6", "indicator--5ebe7c2b-09d6-4702-bd35-47d84f93552c", "indicator--a474b0bd-b8b8-4ca0-9bc0-09691cff9e4a", "indicator--87cf028d-3881-4e66-8fe7-b9f970465a99", "indicator--3a8da964-3c92-4dc5-b76f-46016492f117", "indicator--556ac46d-2cd0-48b0-a591-6a87c5d8271b", "indicator--2462a0bf-3aaf-4a02-83a1-8cccd2915cb4", "indicator--f6f6ddf5-f4ec-471a-aecc-e4ea41e8adc9", "indicator--ffc65225-3920-412d-a1e7-a2643552a60c", "indicator--7462773f-086a-4462-8f72-fb50f73755c5", "indicator--3a33603f-a421-43b8-b9c9-c822ea6cc7ec", "indicator--f992d1a3-1b66-4550-aab5-f3c140544e81", "indicator--c72009a1-14bc-415d-8bef-7b033b9d5b14", "indicator--85d8caf0-f99e-4f64-a651-f1e18fd1fb2c", "indicator--4c6a2af0-9608-43fc-a110-494bdb097c74", "indicator--05a2a39e-cebb-47e0-ab39-3f68a48f7fc5", "indicator--29173189-5691-42f1-a9df-f4f1bfcc75ae", "indicator--dff03f51-244b-480a-ad1e-e21ba975e401", "indicator--388305f9-3eec-48b7-aeb5-50fabde2dffb", "indicator--737d636b-e643-4604-8592-0f437974772e", "indicator--7aba00c4-5ff1-4222-b313-fc855b05838c", "indicator--dc4ccf86-70f8-48e9-8d58-01993dd6b051", "indicator--57c1762d-94e2-4abd-904e-42e9db9bec6c", "indicator--c3107597-f302-4409-a887-b2c02853827a", "indicator--61e92ec0-b5ba-49a7-8d0c-c3e968ace7d5", "indicator--45420797-0005-45a7-bc2b-df561db63be6", "indicator--7c0b25f0-76be-4369-90b9-18b533e12a1a", "indicator--68261403-14f5-4330-8c90-71b5266e418d", "indicator--6d599193-6c36-4fd1-9649-4fe094644312", "indicator--29d7b191-4684-4772-925f-accbd0be5b04", "indicator--6219a561-26da-468d-9c4c-3eec0b6ae09c", "indicator--40136b67-323d-4b25-89ab-d37389e16152", "indicator--b4634db3-b4b4-4123-ace7-ea8ca65697f1", "indicator--bc8d5b3d-35f8-4791-a020-074177bd3bb4", "indicator--e426a2cc-16c8-4cb6-a3af-b6375e225315", "indicator--7af6012e-539e-4155-9f4a-a5451ddfd58c", "indicator--b523a8da-6775-4080-a2a9-f7ac608bff5f", "indicator--dc3157ab-db36-4768-8f34-d4c3a87456eb", "indicator--2b32aa14-6b43-4f9b-b001-393458c12317", "indicator--32a4bcb4-e89b-4071-87b0-d142c4b1e62b", "indicator--b2978632-5786-47c0-ace8-b4b785d1a022", "indicator--b97675c7-267f-4623-8ae2-7b49a36fb55e", "indicator--447cafe1-09e8-488c-bab9-ae6e988f0130", "indicator--6b4aff6d-ff2c-4d33-aa52-bae18dfa8ef5", "indicator--87acb628-acfa-4055-913c-bde792ef18cc", "indicator--754fd9d7-a70c-4eee-b679-5f55a818058d", "indicator--3f578aed-d022-4f14-ba0d-78d9891f9550", "indicator--ca5384bc-eb41-411b-8d83-9640e862910f", "indicator--5f9de56c-70f1-4dfa-8429-62b21c39e174", "indicator--fcb03f2c-ad89-4763-b459-f278a2917ed8", "indicator--323d591e-11a5-42ad-83ce-c758527d7555", "indicator--62535e45-d974-44ac-b063-a03eee65e5c2", "indicator--77844f37-01f2-454a-a17b-13f962d8e28e", "indicator--b3db98f7-786f-4452-b84f-c21883832638", "indicator--88e02ae8-431c-4a88-9d23-651cd3a55fa6", "indicator--6623ab38-8797-4155-b821-9b23b17a37b2", "indicator--9d8460d4-1c14-4032-9a99-325f8be9106e", "indicator--c6a40164-9510-4185-b269-1457ec739c34", "indicator--7ef96288-19dc-4f4c-bc7e-ab5c6a45dc22", "indicator--b059c3bd-cf6f-4e3a-886f-e4eb432d2a54", "indicator--ad9738cd-93f4-4184-b87e-4000e7ff3faa", "indicator--ab07680e-0171-4d2e-a781-4b357a3e8acd", "indicator--478f13bb-7df6-4c67-ba28-00703f32b272", "indicator--097be3c3-69ce-43e9-8fce-dfeb811ee399", "indicator--901570a7-4b67-4397-bd85-6d1391b8f674", "indicator--41846318-18ea-4ab9-9876-a567de9ba059", "indicator--c0c79512-43e0-4cd5-bd06-5040e17530fe", "indicator--bfc50328-a694-466e-b664-ca9ccf02977a", "indicator--c2443427-09b4-4adf-a283-9869628f5ea0", "indicator--00b00f5b-c442-4e15-82dd-92b0c72b31f8", "indicator--9ffc793a-17fb-4645-85af-0eb7f4af5a1d", "indicator--4186bdb3-dc70-4d09-b288-26f6aa020423", "indicator--41108f6a-63c0-4684-b2a2-0004a5be11a7", "indicator--40ca9bcc-225d-42ce-9cea-a4e88a9d97e3", "indicator--3cae1118-6e08-4423-ad82-0de77e00eae7", "indicator--fa1e16b8-cc6e-4f58-a6aa-1a910a560f16", "indicator--49a75177-70b3-422f-b263-868d59a12136", "indicator--96081199-63df-4240-a770-c687f2715bde", "indicator--370cc9f2-c150-4679-8f79-193d82ca49fc", "indicator--d50fae11-8ba8-4c63-9493-daeaf48d9b0b", "indicator--a3fe01e2-3205-472c-b266-d2e23d61144f", "indicator--ad7e3577-8459-4d45-a8e0-d4e72372914f", "indicator--60439f57-dd05-4f22-86e7-cad810473237", "indicator--771aca70-9972-47fd-b444-aa471aba9862", "indicator--ede3a6ff-b3d9-4a3e-ae0a-ab26de12c346", "indicator--5d5e4202-d9c4-41b1-9135-212298af2c16", "indicator--369e0aba-4b5c-4156-883e-e6e70759ddb0", "indicator--708f7762-c705-4edb-8967-939d7bf03d24", "indicator--c88e2299-8ac2-4812-b5eb-af385477fe7f", "indicator--11625537-62d6-4936-8fed-5de71d9a0ec7", "indicator--708f8392-0d76-4aab-a9d8-e63b2a975dde", "indicator--47df6390-8ca3-44a4-b6c8-98b24f706749", "indicator--eca3c57c-6c9a-488f-ac6a-8b42e6f1250a", "indicator--ccbd7769-b7fc-4fef-8b8a-1d19ca1294e3", "indicator--674f7d2a-3765-49de-98e5-94190a4a68a0", "indicator--b42f8aab-08b7-430e-ad84-a0cb934b8584", "indicator--7e1afafc-a656-4f08-b54e-c04230735833", "indicator--a857c033-a050-4bb9-9e5a-965a80f39556", "indicator--56bbd2ff-a95d-4a4e-bc48-0610875dc3f4", "indicator--091fe84d-54a1-48e3-ac26-cd4c59b04c13", "indicator--96f7d4c7-9158-4a28-bfea-f7ae11ac89f3", "indicator--7bca3ee7-20bd-46e9-bafa-bbff320caf6d", "indicator--2f0c0fd5-36f2-4aa5-9c3c-fe9afc10cd44", "indicator--7310fac0-7762-4305-88c9-b619a8a40f6c", "indicator--9a94376a-7f13-4aef-8602-ad8a46ff9697", "indicator--85d5d053-1dcb-4172-b7bb-539f82e0ed13", "indicator--57c0b607-d2a7-4e25-a64e-31f52375b662", "indicator--dc42d664-7ae1-4699-a2dc-46c9569d2706", "indicator--1faae2c2-aed9-45ff-8793-76805ae4db5e", "indicator--b6b915ce-7edc-4dde-98be-749f27cdb7aa", "indicator--621da1a5-2d8b-4cb2-bee3-34687a1f71dc", "indicator--8c30885b-bcc8-4dd3-8b25-bd8bd5f2478a", "indicator--26f07e95-ca67-4534-abf3-eb1ee4d89a79", "indicator--e815eef2-d5e2-496a-8752-cfb37cceaa83", "indicator--a7b01c1a-5eb1-448f-abdc-9156391e7b2c", "indicator--b3a10163-527a-4718-865c-1057065de17e", "indicator--02f275ab-adea-45ca-9e68-529bf822059d", "indicator--f1133710-ad50-4ada-b257-1bf76e4b9516", "indicator--635c3965-de1c-4dca-8bf6-dc0f86c460da", "indicator--7f3c4ec4-ee21-4057-af1d-a1219ee2ebda", "indicator--40b41ee9-7793-478c-b722-c0b8a32af0e4", "indicator--6c1f134f-2228-40b8-8574-4d599bd9cf3a", "indicator--5a09faa8-c29a-4afa-a879-32897a05c983", "indicator--0621fa9c-4b5f-4aba-baf5-4be3b2b92bcf", "indicator--84ac7688-8400-41ca-8b92-51c2a3846aa9", "indicator--b25eee85-9bf7-4587-914d-1382ef8913c1", "indicator--a68843d6-9e00-4d3b-8dd4-b10d6bcf5acb", "indicator--6bf271a3-12ca-48e0-beaf-a0bf14734e31", "indicator--a24ae6f5-6560-4533-a851-7221bfcdd927", "indicator--6838fd7f-40f3-4e9d-adf9-5ab30f72e222", "indicator--47884ddb-42ac-42c1-8b55-db22e23af9ed", "indicator--dd2d9189-83bc-486b-b0ba-7528ed0dbd0b", "indicator--49ab6f01-c5a4-43ce-ba5e-3188c70546a2", "indicator--7c9e3bd6-c238-48b4-8813-5bbf16fd0306", "indicator--e7589f8c-21fb-4862-8592-1771945c2261", "indicator--23968b67-1a17-4ae7-988f-d6539a1fb945", "indicator--86efc7f9-22bc-43cc-84a7-3e6b3b0848a6", "indicator--9b9eacf6-9aa0-4a58-bd18-85c2da1e0431", "indicator--63cc57f4-e31b-49b7-8640-dc84cac9d7d9", "indicator--ac220dd5-10c1-4f90-8669-ff261fece2af", "indicator--c15d8372-ab1c-4828-9cfa-7ce00390b1d9", "indicator--dfb8efda-3422-4d38-a20d-9eaee6dc2240", "indicator--56d7756a-ddd2-40d8-8160-19377b39c09a", "indicator--3876994f-88c1-40f8-9870-c3b16ef8cb16", "indicator--d74fdd7a-ba81-4e3c-acef-17f978f195a1", "indicator--f9d6428f-d711-4ae8-b2d7-e0f578f0dbce", "indicator--6686ab0b-0537-4068-81a8-030dbadab9d7", "indicator--034f8ad6-bfde-4cc8-90cb-d1c41c83f24f", "indicator--00b1d166-9b33-48b8-89ec-f026128626ed", "indicator--3c22a425-fcda-4a4e-9fea-59ce212ab732", "indicator--872a1af7-71df-45cd-8ce9-cf67e2c397b1", "indicator--642483a3-1759-41ed-aa5d-9f60bd4a2f26", "indicator--7f00c812-aef6-42ab-af97-76a3a775a900", "indicator--15831968-059e-4828-967e-338ac2cf8e6e", "indicator--45c4ce19-9bfe-4a2d-8111-1ae5d9fea8fd", "indicator--01dbf3f1-dbe1-4578-b5e7-94db15eb72c5", "indicator--f42f9604-757e-4cff-b4b8-fac0b233c459", "indicator--30c4b721-13d6-4c95-8cee-c0a7c572375f", "indicator--7c3cd585-c2cb-4e33-88f1-b87c3fd90e5e", "indicator--9af70fdd-a9b8-4a2e-9d12-bf7077251d85", "indicator--10e9a654-0e6d-47a6-932f-1c96780f6417", "indicator--8659953f-692e-4a50-b023-9073237fab8b", "indicator--0efb4358-5784-4fc4-a38d-171149e944a5", "indicator--945c57f5-f262-4013-8f34-ce896b798437", "indicator--b29187de-a667-42c0-b683-91e3d457de9c", "indicator--aec8482f-9499-4bf8-b958-c0bfca9e8414", "indicator--90355be9-55b8-4523-b2d7-243256a81ee1", "indicator--9debb46c-147c-4bbc-afc7-eaf59aa454fc", "indicator--808f8746-c74f-4067-991c-3382a8413833", "indicator--baf7db4c-1a23-4d14-93c3-7473bdd43229", "indicator--7c23d9e9-07c8-4d44-bb3e-dcc74aab7d15", "indicator--b3e3e898-4e15-4a1b-a2b4-0a4a24ff4045", "indicator--0f29d320-1c1e-4d21-a6c3-58578669c994", "indicator--0753582d-c6b0-42ad-932b-4a0f98adb3d2", "indicator--394243ca-2c14-4e40-8715-beeb7ae46285", "indicator--dbaece80-130c-4e40-a600-ca370aece489", "indicator--5a49de61-45d5-4088-894d-cddd1d4c6583", "indicator--dd358099-e6e5-457c-9660-a50f4d31b679", "indicator--7fd933e6-3e56-4f45-81b0-d1ca4fa87277", "indicator--2dde5aff-52a5-406b-a908-b79badb5bb57", "indicator--75e3ac47-ea06-4723-874f-39c6e57eb07a", "indicator--fee409a4-1227-4141-8839-777fc019ff1a", "indicator--efdf806c-ac6e-4eee-aa2d-3066864edc29", "indicator--3dca4096-78b5-4b40-891a-c524d54e9b41", "indicator--48afc73f-4baa-4518-b2ec-1bf1175f3afe", "indicator--b0ebb86d-3164-42dc-8364-b401853d55ae", "indicator--16f450e4-0521-446e-bd5d-1401386f0011", "indicator--aced865a-8301-4f32-8156-a67ef40e3976", "indicator--4c8a1aa7-2aaa-4ba4-8d0d-e5ac4da8f16a", "indicator--c783a970-8439-4dea-86d9-ddeb2faf44f7", "indicator--494b0aa8-e63d-4fda-84e8-02f939126325", "indicator--c3762ec3-9159-4362-a043-2b9bbe68a192", "indicator--cac63dc2-aff3-4b90-85f5-2a4ee657ab04", "indicator--1d1a8873-8c7f-459d-8989-03dd533d33f2", "indicator--68ae477a-889e-4700-9a2e-95554f37ad2a", "indicator--590ec17d-65b1-43a9-b4c1-c7a8450acae1", "indicator--bba27a01-5a80-4d9a-9ea7-2b25c6d4c78c", "indicator--144d6bab-69f5-4c3e-8845-a881401c5162", "indicator--2a7c6a5b-7f1b-4558-b8c9-585738a6acae", "indicator--0b4f5cb8-d25c-4f95-934b-2eecf754c95c", "indicator--f07b9cd6-8423-4fbd-a4a8-13d76319fdc5", "indicator--7d3e5c49-91c3-4574-96fa-e7dddf305d21", "indicator--6d15e94b-e629-4dea-9bab-17f6f1cb99e7", "indicator--96796de9-1ca2-4d2d-a2c0-b5d33e93e3b5", "indicator--43672c7e-28ed-463d-9b8f-3647b8899a98", "indicator--25e93e1a-2ab7-46e3-897d-cf86194432a0", "indicator--5ccb32c4-3c12-446b-ba1a-31eb7f3425f2", "indicator--1fa43cda-3924-47e5-90a2-bed2f913c2a7", "indicator--049dc8b1-cb6c-472c-acd0-9660a8368582", "indicator--be62cac8-b7da-4f3d-a069-bfea1f55d45e", "indicator--1006019f-12ed-43ae-af9f-5518ab84eb8e", "indicator--9d7b6864-9cda-4add-b8cc-c80a341d347f", "indicator--92f746c8-3679-4461-bf40-a4352119dd85", "indicator--6a2758fd-a745-4070-83db-13f977b2f129", "indicator--76319c67-8299-4b23-bf23-5b53a741cb77", "indicator--e0a6ad37-320f-4f39-8261-dc70cbe6a0a2", "indicator--7fb93f8b-aba3-4fe7-bcd7-bb54e45b5a33", "indicator--8eb4794e-fe66-424f-bad9-bfdf030ab28b", "indicator--087ef718-fea3-4cf8-af09-5bbe980cbaca", "indicator--88e5959e-7f99-4dee-839c-6d64791c053e", "indicator--6ac1b314-f380-483b-a2ea-5aded07bc53c", "indicator--faccab2f-322a-461a-8f3e-2a69fd1c4ef4", "indicator--c81456a3-ec5d-4fb2-b38e-bbde2d36688d", "indicator--c2292507-c1f8-4041-841b-0bbe89359cd2", "indicator--dbdcc09f-afb3-47dd-a757-9d96d785822d", "indicator--f87136a9-1787-4b8b-af4d-6b7e1938abe8", "indicator--a069ee22-ac26-4771-a0e2-348235c60f87", "indicator--af96ed2c-6e41-4d83-8efc-8757a0b80a3c", "indicator--317fbc55-d9cc-41aa-8dcf-39533a14e908", "indicator--f432322b-38ba-406e-bc21-7e66151e9264", "indicator--ab081e88-91d8-4771-8536-6d5889571f76", "indicator--259df56b-6d3f-4239-8972-2ca40bff38c4", "indicator--2489b4b6-a8e7-4be1-94ee-8b9c81bc25d6", "indicator--853f74c7-275a-4214-a2ec-1620ed1f3931", "indicator--3f48cfc2-46e9-4d10-9b40-3c007e7d6004", "indicator--afb2588a-cde3-4c84-878a-429122ad79aa", "indicator--9ef57579-ab01-4937-a0cd-065b7dc2fb15", "indicator--2bc73fcb-b25a-406f-a5f3-7c785d717405", "indicator--77bebcce-3829-4a7e-8f1a-bf3891a5413e", "indicator--c2677965-7d31-4d50-9ff8-af6f7179aefc", "indicator--8c0d38ca-a1ae-4747-bd48-9692b3f4be77", "indicator--39f11642-2e23-4ea9-b52a-41d90eba6573", "indicator--446b73bd-04cf-410c-808b-8b08785c6361", "indicator--6433b388-31e1-4d7d-aca3-7000f7b1d0db", "indicator--81d48db0-f3c1-4387-aa0d-e496d8629bfa", "indicator--553bb461-d2c0-402a-afe8-9d4022f9a4c3", "indicator--40919543-878a-4e66-86a6-e90fcbc86b11", "indicator--cfa6a37f-0e8b-44f6-9976-97b3552ffb2c", "indicator--5c187576-ddb4-4b20-b906-45fbf4340bb6", "indicator--0218ed3d-0c7e-4579-aac9-ee3aaba947c6", "indicator--47882954-7e33-4bb4-82bc-29236d7f323d", "indicator--38f1ebef-281b-42d7-baab-525bec8f79b4", "indicator--dda4bf30-f9df-4fec-95c2-5df84e73442a", "indicator--4e8c34da-1016-4198-abcb-b21ad23bd012", "indicator--8f6532f8-a648-4255-8517-e20556f7c949", "indicator--2b2633bf-67a8-405a-9d52-d93bf3282531", "indicator--318b7f72-acaa-4d03-a90e-ad40b878df6c", "indicator--888a829f-c813-43e0-808b-1e7e653fb3ea", "indicator--379423c7-0a4c-4a05-ac89-c90a1badf589", "indicator--989a5928-e501-4446-95c1-55ffafffec59", "indicator--1b90a4e3-4e30-4f3f-ace7-2f84c115bf99", "indicator--2968348f-71a9-4039-9f90-2aa06326ca6d", "indicator--a11f0038-d4e2-4727-8263-f388cfbc32f4", "indicator--9a264578-78f4-4e4e-8bfd-5e8da39ac567", "indicator--6152720f-60a2-4527-b9ae-feba4707f055", "indicator--d1c2fb6a-775c-435a-a4ba-a2b6b820f2b3", "indicator--4f8330d3-75ae-4625-b0b1-9b6f7ef1d510", "indicator--f345c156-c7a4-4c1f-8c98-1163b4e39269", "indicator--7e0d0275-6dc5-4ba2-8c31-0a0cc06e10a5", "indicator--8d868ecc-d1ed-4777-b523-b89032f42c2b", "sighting--ce52ddbf-5427-4c43-ac5d-7b5b04cd7b08", "sighting--6c641fd7-f870-41ed-ba41-8325b77a91fb", "sighting--b4752dc8-17e3-4905-84f3-cc418c79c510", "sighting--f57a2cf8-9bc4-456e-b93c-587503676bf9", "sighting--7e235d59-ee70-4b26-98fd-64689f84aed9", "sighting--a095fed0-15d8-4191-a1ca-0fbf3d0b8430", "sighting--4f5ab554-d725-404c-bad0-7de5a31b0368", "sighting--49980bb3-a82f-4a32-8652-b6bce9386781", "sighting--7e797cc1-284b-4e23-9563-df566822cef3", "sighting--06dc16c3-e1de-4fd0-a8ba-20b4b54411b1", "sighting--fb16165c-c773-4fe0-9da1-6b5b13fc0ab6", "sighting--f987a453-fbf9-4c69-b80d-b583ddb76157", "sighting--5e179e81-5788-411f-976f-679091c764d3", "sighting--d3b9bc12-36db-4544-a304-09c615866423", "sighting--38da8131-5221-4f87-bb02-9f6801455b93", "sighting--6c65960f-ea30-446e-b184-d79d6a3c4304", "sighting--212f9f89-7ba2-4253-bdf0-105719bf3d34", "sighting--1559d33c-0d55-4ad6-8a3c-c12a46b8f772", "sighting--3ad1b705-ec44-47a5-b241-9579da4fb21c", "sighting--ac46e01f-c4bb-44be-b493-f034e8be3505", "sighting--5db3d0b0-0607-4d47-9349-42ae3d076a10", "sighting--067a85cd-dc85-49c7-b2e4-b2c56acc226c", "sighting--90ff1c66-785d-48b7-bc7b-9e7e35d602d7", "sighting--52516a91-7f0c-4c49-bb35-7c0bd198b0fd", "sighting--c6bd68c6-2f32-4ea1-8067-e16f86b7079d", "sighting--6e025a68-25cf-4e94-afa6-220d471165a4", "sighting--590035a3-5163-4a77-89a7-f4a5a9b74916", "sighting--a692894d-3809-40e0-a8ab-7bbc83b1594b", "sighting--6e56b916-21ce-4dc7-aef8-7236922cf205", "sighting--21fc619d-7061-421f-9825-623776249e2b", "sighting--fcaaafc1-a6cd-4618-8e8e-df6d4936190b", "sighting--8e2fdb2f-c8d3-49b7-8140-788a08237591", "sighting--2f9dda95-a100-4a88-9128-e30313faf3db", "sighting--ecab4fe7-4f7b-4386-a2d3-2ad4e1f623b2", "sighting--1dad9de7-62d4-4932-853d-8b656422f2b1", "sighting--97d7df14-8ece-4092-b282-ff7360e52f4f", "sighting--409133ea-bdd7-4361-8217-420a83314d60", "sighting--6c70703c-4919-497c-8fb1-84aa00889e8a", "sighting--4287db34-1756-42b6-8d9f-32bea6cab5e1", "sighting--25f55ad9-2326-4aab-9492-488f17fcfd75", "sighting--79565caf-c94d-4c83-abc5-65bd49976a3d", "sighting--9fba642f-adbf-4824-a07d-a734fc40ee92", "sighting--e3284d39-694d-47e8-913f-a352f203472e", "sighting--3a81ff55-7ea1-4534-8278-5e30fc654423", "sighting--0679330b-4201-40d3-86d4-d2a6353c28a7", "sighting--92270df1-d530-4308-84d8-7ad41dc95701", "sighting--f210356b-209d-456a-b70d-b4a8cf52dcf0", "sighting--7fa3b74e-6fd5-4273-a54a-b8643cd48225", "sighting--d10ba0e8-2dbc-4fcc-9039-a597bb908230", "sighting--e040dfaf-d265-4110-ab23-dfc699ff1bc9", "sighting--eba18026-e0ba-47ae-8386-77638b4340f2", "sighting--f017a632-ad7d-4ee6-a315-01ed72243e0c", "sighting--3d2b2260-e61b-4f9e-99bf-1b327a021580", "sighting--d844832c-e494-4809-80a0-15ceea07381c", "sighting--c8716f40-e7cd-4558-adb5-82a926242a92", "sighting--40588c86-f35a-4f3e-ac27-8cc7a62041ce", "sighting--26f65f8a-954a-4971-8e53-d31bd9d95284", "sighting--d7a56a7a-bc5f-46d4-9586-3bb6d57855e2", "sighting--86f7837c-6375-4695-91ce-4055ff3327f0", "sighting--8e559df9-6dfd-4122-962e-8d87fe9bd718", "sighting--b300d61b-d2a0-4698-b350-abf2e38c0bb7", "sighting--3d9eef55-c679-4a3b-93a1-87c8da0ccb27", "sighting--f1a97954-886a-48c6-9b6b-c7c106004f0a", "sighting--3a370b6f-adbd-4b04-8d96-190afc25fb1c", "sighting--b88c46e9-f91a-412c-b998-5b9b2b5711b1", "sighting--a90fc8bb-bbcd-438c-a164-e3fbc81744fe", "sighting--23290e9a-dca3-4c1d-855c-7fb0b783f5bf", "sighting--42323ced-a78c-40c1-b39e-62aec02346b7", "sighting--a6bb6807-bb9a-4552-a5ec-83447e810e69", "sighting--5d58c02e-9771-4035-9596-95840b88db27", "sighting--564e4066-1342-4ebf-885b-fb90019ace96", "sighting--8d28829f-0cb0-47ef-939b-bbff471c9099", "sighting--d2fec2aa-1639-41a2-bd94-dd9867509f23", "sighting--77a68a51-2cd1-4865-97d4-071c8c119d65", "sighting--149222cb-1b8c-42ed-9f49-3517a0d5d8d9", "sighting--40ee3150-3360-455c-b3ea-0227546141a7", "sighting--a26c9e2d-974e-4324-9f63-795e8d74f68c", "sighting--a0551b86-3ac1-45a5-ad6c-099f8acece63", "sighting--7519f0c9-1de8-447c-94c7-02117b7f8ec6", "sighting--0a77f82f-9d92-41bc-8454-552bd8174db0", "sighting--5d224ee4-5ef2-4266-b6c5-43de0c657de0", "sighting--d9b1a5bb-8d8c-4ce6-808c-bcc5f9400ce6", "sighting--0aeb97b5-ede8-4a42-8863-c3f7e264328f", "sighting--48ea8f07-05b2-4f6d-8255-7abd82fac9e1", "sighting--1ecd04ba-0ad3-4b60-b964-6387093ff3fe", "sighting--9f6b2240-7930-4f1f-b80c-9408afe74d8b", "sighting--50360b6c-bad6-4321-b3b7-308466fc6e50", "sighting--fbf4284a-a587-4e69-b62a-27cf6ef73170", "sighting--de0fde49-1fca-41d7-a704-d3505e73d9cc", "sighting--cee1d6b2-e8cf-41e9-a1f0-a15690c55bbb", "sighting--a7567405-5ac1-4b19-8043-528a8f3d0969", "sighting--1a0b04be-086d-45dc-ac5d-d233fd6be4c4", "sighting--33105e24-5374-44b8-85b6-c2e472652ac4", "sighting--d0eb5640-4604-4324-8476-fce09b4de1f5", "sighting--e0de3bfb-7cb0-42fc-bd37-7f0e855842ba", "sighting--2ec85c91-78c8-4634-a432-518fa6be873d", "sighting--af0d539d-7f22-43f6-b30d-9eed292ac6ca", "sighting--995e26a7-b3a9-4658-a656-7140d0927e68", "sighting--197d57da-d465-434a-b4e2-16a16fce46d1", "sighting--ccba4dd8-3286-41ae-92ac-dc09246bb1e6", "sighting--6470373f-e89f-47af-af1b-30e961338e56", "sighting--28641ff8-99aa-4e16-8dce-151ba7a3052d", "sighting--fba7ed21-d3a7-47d8-ad37-063e628bdf67", "sighting--5aa456a4-43a3-46b5-8deb-035ed960a6b2", "sighting--beeb9108-d22e-402c-b634-0c40dd7203e0", "sighting--9235cc52-1d5e-4808-9016-8575a9d2cf8c", "sighting--58b07370-4c1b-4f73-a4af-cddb0b166d38", "sighting--763b9da3-3732-4e99-905e-f6942f11ac2d", "sighting--74576408-d959-4a9e-8608-396cfcd3f32b", "sighting--b6417b3a-bfe5-4c94-b3c2-fb8d0ae31211", "sighting--1cd82a7a-3cb3-4d65-bdef-6c2510fdc5cb", "sighting--48fd348a-22d3-4175-b765-1d88bac81f27", "sighting--8c073262-a974-4b37-b744-85808c253673", "sighting--30a4493c-75b8-4c1a-90fe-e13c8b7468f0", "sighting--453aed77-95ff-44e1-9340-47b129ba8a73", "sighting--d672ba09-1379-497a-a443-a9252b1ce582", "sighting--fe74bee5-76da-4ead-877c-93c5ba35c3aa", "sighting--be3b983b-6074-4005-a7eb-452bb92a9078", "sighting--efedc787-206d-4c8a-8543-188bed9f62dd", "sighting--26d7987e-e40f-4317-bcc9-f37dd0a4a17a", "sighting--d4ccc8b4-0f92-4bad-a3d1-b347718e831f", "sighting--40695062-c344-4bca-ad9e-1fc5f0edc6a1", "sighting--10b6eda7-0f73-4a73-ac79-2a65504ab848", "sighting--dbfb9c6a-1946-4729-9723-b6dff54950e1", "sighting--8cd01493-0150-4ee6-bccc-d5933d48d69d", "sighting--eada061e-ffab-4a99-851b-5b5c6584bc44", "sighting--9d540bc4-9c37-4c04-a5e2-1291504cbe53", "sighting--6dcd94a2-9773-4e67-8c63-6355ee741b0e", "sighting--c0e89683-4f1d-4ae3-8cd0-571073892828", "sighting--6f1d164b-6d89-4844-9c41-659ff4cf1430", "sighting--ec5a1fcd-6866-4f8d-94e3-ca221f20ba58", "sighting--aed660c7-ee64-4a3e-849d-dd7b41129f9e", "sighting--2691e30c-1ab1-4cca-a0ad-2c35c4378308", "sighting--54254efe-b82e-4b25-aaa1-7a68669973ac", "sighting--229176e9-682c-4260-a353-cb9116809956", "sighting--53e534d0-f06b-4b4c-8f23-90f706d1539e", "sighting--9e6ec815-5762-4a3b-a248-98ef96621d0b", "sighting--fbb5dd97-13e0-4431-9f74-9c155bba7476", "sighting--da9e067d-4a86-41d4-8c0d-0a7675c02042", "sighting--f6ad3680-61b6-486d-927a-4b837524da8a", "sighting--558e8694-0d2d-45a8-978b-a585374c0dd4", "sighting--d26da28e-6926-4373-aca4-9472476779ea", "sighting--55f3faa2-70b7-4b79-925d-6a8fd63daa93", "sighting--72c866ac-bbaa-4c6b-8666-75283f7efb07", "sighting--983b6f00-669b-4baa-b43b-519e70fb1080", "sighting--0979126f-cb28-4769-bc56-d4ba9e1c3cbc", "sighting--f4356fa8-1c6b-4837-ab83-318317a16e0e", "sighting--f07e02c5-fb4d-4340-9521-8a9a36b93c33", "sighting--02eefa79-e214-43a6-b855-52b192cbda6e", "sighting--7eba18b5-f28f-4e69-b5aa-0e7c9472dab6", "sighting--c9993d79-9e68-4a9a-88a8-d12309b560e0", "sighting--108e6f6d-da79-4fb6-81f6-b157d427dcb8", "sighting--350efce9-f3df-4db4-8b7c-30acbafbc332", "sighting--64f1b470-1737-4d34-9fde-e5c5defcb469", "sighting--66ca4034-0972-46cc-bcc7-3ebd8566744e", "sighting--fedea9bb-960f-4556-8a33-b5f3bb0cbc3e", "sighting--48723c18-dc76-4929-aa0c-a248515da40f", "sighting--c6cae015-0ce3-4ef9-a4d7-ce206fbb5294", "sighting--5e3844e5-6a80-4898-b3aa-a65182289de3", "sighting--d7c961d0-4071-481e-8c41-9202a8b1412f", "sighting--a1b32a0b-315b-4425-b5a6-c33b5c22dd15", "sighting--9b52dead-f22b-428e-8801-55a9aa328cd8", "sighting--161d2e31-5bf8-4dee-86f1-a39059f7d345", "sighting--9efc3c1b-42a2-4b44-93a4-b146afbcc1f4", "sighting--65129376-1c99-4284-be60-a448c066f4b3", "sighting--d576b0a3-e23f-4b27-b3cd-de789b42d796", "sighting--8abd00aa-336f-4c5d-b8b8-88a3ad507d03", "sighting--7157104c-6160-4980-b3cb-561f12369808", "sighting--4e7e4469-52ff-4601-add6-7b5c98ed6a07", "sighting--9d2bd66c-01b9-4ecd-b999-1d466f810ffd", "sighting--5530bb8a-7387-4d63-8e58-f18b68710a52", "sighting--3d02ee37-6e50-493f-a24a-d38cf7d103d6", "sighting--bee38adc-aeb7-48a7-9cb4-0f1a1c94954e", "sighting--948d2c26-fa6f-495b-8497-89e660e9867e", "sighting--767344ea-0999-49b4-b7ba-da6dcc0493c6", "sighting--a8cebe84-a02f-4698-a353-206ee587eccb", "sighting--4bce98f9-b1f2-4c60-93b1-67327f947cff", "sighting--83db8e12-4635-4296-afb1-c1bde2b3e841", "sighting--6f8a9ee6-faff-49fb-879f-c31a494b8789", "sighting--40a704ac-bbd2-4d9a-b1ee-fb67cd12ac42", "sighting--3a85ba7a-60a1-498c-8285-226062f6589f", "sighting--6d7811d5-f1c8-4610-abf2-33aec950436d", "sighting--ba972293-bcd4-40b3-b94e-dbf98bd42354", "sighting--cbfcab71-d118-430f-a444-9f004e56ad08", "sighting--52ec55f7-a0cd-4a6b-8993-76fbe3be7b5d", "sighting--288b7fce-7f77-4742-9b05-63d0ad6cc1c1", "sighting--5af41b65-f90d-4107-b3f8-fac03b904345", "sighting--c465e24f-fbd1-4bce-a664-aa2502b1f527", "sighting--053d5611-c32d-4954-8a39-a35d5bf80670", "sighting--845de638-9739-438a-93b8-39d1ea90f94c", "sighting--3247f661-68ab-471a-8f9a-e8eff4e5421c", "sighting--7c3d68af-87e8-4837-a42a-ef1ee1adea0b", "sighting--4c118955-5042-4dfe-a832-003068b1755e", "sighting--e38ea236-fdc3-42d8-9045-dd616d9d3687", "sighting--14950078-fe28-432b-b70f-1805512532e3", "sighting--b1b8c026-5e48-43ac-a893-7f50ca1dcb3e", "sighting--29125af7-2c8b-4337-b4db-7fd1d52baf1e", "sighting--0ac25566-ba0c-45e3-88e2-e717e7f991e2", "sighting--2e6f80f2-5306-4fd1-9b62-dc888416b764", "sighting--032e5028-9791-40b6-a9e9-cd0dacea9b88", "sighting--1a79b4c0-118b-4261-9b0f-36c079c497da", "sighting--9b66623f-ccf0-4cb0-92e9-60ce408aceb0", "sighting--d3cbca01-53ce-4552-a0f7-a667bd6614a2", "sighting--55e3aa9e-69e5-4216-8775-041b234d3e0f", "sighting--14f1a5bf-0d3d-4846-98a8-afd06ed15768", "sighting--458169bc-4a04-40f8-92b6-86a3f3e29009", "sighting--39246d8b-4d52-482e-8a5a-4f3683b66c57", "sighting--8f5906c9-a766-4b6e-b6e9-df2631ce9b67", "sighting--0742d217-3740-4102-8211-2bf9e9247f65", "sighting--4f62a1dd-e485-4766-9c3a-f3c85a76306d", "sighting--a85303d9-e537-40d6-8ff5-14dd7649f188", "sighting--5091da1d-2662-41ed-9224-c5052c27bfc7", "sighting--d6876c60-63c4-4377-9988-f20bf7db0053", "sighting--f476e1ec-8e09-44f7-8289-3296ebb99aca", "sighting--6eb88db8-926a-48c9-9915-576f709122d9", "sighting--b4f7b620-a48a-4ac8-9656-6c68ef52ae66", "sighting--d2ee18f3-6024-4552-a109-b162eedf219e", "sighting--e0f73144-23d0-4bb7-8dc5-58098b24024a", "sighting--1ea896b8-adc9-4868-94ec-a98ade668ed2", "sighting--c55be1da-fe35-4da5-b0a6-6c41b041c910", "sighting--63ddccc1-0c72-40d6-8397-6fc49be98e94", "sighting--8c3c0480-9881-4489-a455-0daa3de92978", "sighting--cfaf1feb-ccc0-449d-abb6-314fe02ec74b", "sighting--fa0eed8e-e0a8-42ad-8315-e913f8e7a6b0", "sighting--f0d795cc-adeb-43f6-a882-d38c532a55ac", "sighting--660e8abc-4d4f-4e57-b709-0dff06a658b7", "sighting--fedc42ca-e001-4ace-8b86-c67d75d5fddb", "sighting--91d36b21-fc2e-45b3-b6f9-2a80736c0286", "sighting--a62e8a3e-4329-4cd9-8cb6-54742085bfb4", "sighting--806ff3bf-1f7b-4874-92dc-d98b44a384a5", "sighting--56a2bc82-5773-4a08-8c44-597b6ce1dc3b", "sighting--c40f3d45-5595-4c67-9069-d77bbfa56708", "sighting--278446ac-f13b-4e57-87b8-fb4dcb5f6381", "sighting--7e51f446-30c2-4236-914c-6895886e2dfb", "sighting--9706e1d2-2bc0-4020-b7dd-85c4c036139b", "sighting--94a8aa9e-b968-4e86-bad2-e3a612abd77d", "sighting--29795e3e-d6ad-499f-9e56-e94f79e2cbc2", "sighting--936c3365-d5f1-404d-9ecf-64ebfd6e6f12", "sighting--b591a017-a48e-4ac3-96c3-42f1b4f739db", "sighting--ec5c92f2-8974-4b4d-aa08-bf1d15cfa74c", "sighting--f46a5434-e35c-44a6-874a-7fd98cf2ed9c", "sighting--ce0af4ed-d296-44d9-88bb-1c87deb05efa", "sighting--488ee894-2d20-45ce-af09-06caea69b633", "sighting--7dc3d355-36f4-4afa-b4a4-9d95503ca0b5", "sighting--9e2d73ea-ae9a-47f7-b493-67252d18699f", "sighting--67003175-9663-46ac-aaca-86d019e8d73c", "sighting--7c3fae6d-f79f-45be-8b54-b157fa194827", "sighting--f20d454c-86d9-44a3-b670-692040c497fb", "sighting--b9a68dc4-b4b1-4519-bf57-b1c6927ea319", "sighting--942d96cf-c6f4-4042-9394-7ee48592de83", "sighting--20da415c-5301-4a52-b6e6-d5c4f0dcd71b", "sighting--b73c20b0-4aa1-4e6c-a7b1-8b1a0b8f0537", "sighting--33adfee5-1430-452d-a9d6-225e25c1b284", "sighting--4a55d94d-bc3a-457d-ade8-6a6c14420446", "sighting--7e0200b8-3799-47a6-89df-1b7bf36dbaeb", "sighting--9942b7cb-f9c9-4379-a02e-44b06b09e5de", "sighting--c955469f-d5e6-4627-9dbf-ebbdd2d98bfe", "sighting--43793aff-2418-460e-bf0f-059b8b9e4742", "sighting--9437602f-e506-4d66-8a9e-f74c9c4e1c41", "sighting--59d7aa6b-a15e-4fce-a5ea-d5ca7c42f737", "sighting--618f5d49-23a2-482a-aae8-259365e06d9b", "sighting--836d5288-05da-4740-ba11-1db3a8f168a2", "sighting--062635f0-f327-4d2c-9630-6d6dd1f4f278", "sighting--2e437c1d-05b9-4e68-95bd-f86145c61496", "sighting--a827e5ee-4413-4be5-bd94-4ea6d18c0957", "sighting--1e5e0e44-5da4-4129-9e76-2ed28703deba", "sighting--169ce074-833b-47d6-863c-d409c4244087", "sighting--48a1133f-1316-464a-be14-fe2b3b1dc5cc", "sighting--d9d36582-4b5f-4f40-acd3-acd4d5f4a6b6", "sighting--82ce6d22-d043-422c-943b-dd537b2825fb", "sighting--4213c9c8-f5a8-4f55-86ca-accccdbad328", "sighting--1e36b5e1-eabd-4c71-afb6-7a3acefccb79", "sighting--69ce3cf2-855c-49a1-ad03-31af4a36a56f", "sighting--e2d5d7b8-51a4-4b41-bb9a-b6c00c404ae5", "sighting--a8d548b1-a108-490a-a344-9770b8301a44", "sighting--6f13ed86-61a1-462c-a95f-d77781dd6e0d", "sighting--f78e0e70-5034-40c6-baa8-33ad7a381842", "sighting--55c162e2-8297-4dbc-ae7a-d821cc1f8969", "sighting--f460f698-eb39-4af7-bdd7-f681102d1e89", "sighting--a2cfcefe-8739-4c1a-a151-eb0948253077", "sighting--defcb0ff-c9c2-42bc-8a0c-1df7cdeb5c58", "sighting--9b425ed7-c7b7-4b04-a133-c146e07c3339", "sighting--14d9bbe6-fb3b-41f1-a40e-f431cfa5de32", "sighting--40fd1ad4-060f-4c44-b6f1-6e48dbeb7911", "sighting--56669a2c-b687-4c95-ba0e-3f9f7f506b20", "sighting--d9655ed0-0d06-49a8-a9cd-09268e461641", "sighting--474ad465-148f-4e6b-988a-7f37df8da634", "sighting--9d8ff1f7-5c00-4c46-a394-289b54e595e8", "sighting--06cb5064-e8ea-4784-9d7d-61e9341b5290", "sighting--6f087d92-d848-4374-ac0f-888c803c33c0", "sighting--420f4a68-b3dc-44f3-8a8a-bf31b5dcebc3", "sighting--324310b2-cc78-41d3-9b43-ec448193da4e", "sighting--d344d492-1253-4ee8-b8f7-6760eae8a35a", "sighting--520eadee-8946-4cf2-8b16-9960bc232166", "sighting--6b8ffbf0-fef1-407a-8d8e-980516ccfed2", "sighting--2402b8bf-56fd-4ee1-bd1f-d91349e9806d", "sighting--cd6b9add-013e-4557-aac8-15ffd0cf4e6a", "sighting--73a97916-673e-41f2-84da-c5ac69dd3eaa", "sighting--5bc11d15-ee04-4ebc-9e1f-451990406690", "sighting--8d942148-56d7-4971-9842-d98e747e555a", "sighting--924b7f2d-a7e6-4f6a-a43f-90c1d7a65bf9", "sighting--ca8af4d1-03e2-44b4-9b5a-546ec0b75ce6", "sighting--ac0f29c9-2180-4f1d-be97-e5eaa42265dc", "sighting--21391aa3-3865-470a-9865-70121ca5214f", "sighting--8806cee6-a7d6-438a-bbc6-592a41e823b9", "sighting--1ee37063-7af9-4906-a08e-1f5770e305a9", "sighting--2d777ab2-2b88-4728-a906-03140f2ba3cd", "sighting--f7d6f022-4e6f-43d2-9f3f-959c3bdc5441", "sighting--dc5fd884-4427-4f21-af7b-ccdc7a452286", "sighting--7e566d16-02d8-4878-8eeb-525015addcfb", "sighting--9ab274d0-e3e9-4675-b984-bf3b4c233e2b", "sighting--b99149bf-2051-4e3e-aa63-03691ce08acb", "sighting--fc156472-f860-45fc-9b7b-471511bcbc84", "sighting--c5a9065a-5971-4cad-a27a-e03e51bbec79", "sighting--a4ed1b85-0633-4ffe-bf85-b0f52b44f593", "sighting--28dd5c03-7510-440f-892f-7afdf576089b", "sighting--67fe9f4c-3ff2-4672-818a-cfe2051cc7cd", "sighting--a7880a73-50a7-4fc1-bf01-f88a63f6a5dc", "sighting--2d5cfab4-fbf3-479a-a5d1-31f3e7ac6980", "sighting--5cbaf5a2-d676-4c4a-900c-c0900f2ec370", "sighting--90320755-8627-4afd-8616-2a832f638d6a", "sighting--602e28c7-bab8-40b9-ac7f-690b3e36e243", "sighting--1f26d219-9db8-45f8-b680-ad52c6b16048", "sighting--74dcd5ba-b2a3-416c-8337-fee0c630ccb4", "sighting--683c3260-608c-4dcd-a2da-90d50d577cb2", "sighting--1f191dbf-fe8e-4a41-b9d7-e474a9a62aa9", "sighting--8bef455f-0acb-4de4-ae1e-d20bd44593ea", "sighting--4a747782-ce1d-4bcc-b370-e3b3adf39ee5", "sighting--e69e100e-4dc7-4e5a-b08a-de30a5c02aa9", "sighting--6ce99dba-22fd-4e79-ab05-f1799f6b2757", "sighting--06441291-ec35-4547-a2e3-9b4753854d5e", "sighting--94d22116-67ca-4f67-bd89-a4fa5ea4ecad", "sighting--756a6c53-31ea-419b-b982-9349177a6751", "sighting--43950212-8320-453a-b30b-03dbf74cf133", "sighting--0b6d2998-0a56-450e-b608-5f91ada8564b", "sighting--85d4ba3e-806a-41b3-a7d1-128012f82fde", "sighting--75def180-b5a6-458e-b126-ac22a245eb12", "sighting--1cd77524-2b4e-4637-aaba-20cbd34c35e0", "sighting--3a71687d-c02e-49ca-a1a1-001f0d7215ce", "sighting--aac2b61e-ff9a-4538-9dc4-6ba2d9a7e00e", "sighting--c647d44a-4dd1-4dff-8e80-4da4b661e373", "sighting--4709e000-a101-4695-8fc1-3f28c74d9e6a", "sighting--c86632da-f968-492e-9fe3-2a5cba3db390", "sighting--0df8c5ea-25a6-40b1-b714-61ccccf77631", "sighting--108b6656-cc9d-4344-a765-ed9b5c1344c2", "sighting--b37e61ec-d6aa-4a1d-aff7-70db2309c5fe", "sighting--863c1d18-2543-441c-a805-f7c1e76742f6", "sighting--e4e889e9-1126-45e1-9f73-4ff7f5199ad1", "sighting--71e7ea68-aef3-42d2-b20f-35a405e735be", "sighting--dfe94d52-a45e-4a88-9219-226b8e506018", "sighting--f2b72bb7-cbaf-4646-b65b-7fbf27ded1e2", "sighting--07ef76cc-34f7-461b-bde4-0f2ba4e9437f", "sighting--a79df9c8-b4fe-4723-a283-53ab39e7bf07", "sighting--3d620235-13ef-4192-a820-54d2e50e9627", "sighting--edf87004-aba2-4380-bd55-b1ed541510b1", "sighting--2383a893-de6b-4ff2-851a-f17c77ec7e12", "sighting--5090a05b-ecb4-436a-b691-2bbbcd991b79", "sighting--9c7d635d-76e3-4a88-85cc-25127e62e021", "sighting--a810db0f-0c39-4efc-877b-b8c09a1709c9", "sighting--f6a32f2d-5a0b-42c8-badb-61490271312f", "sighting--024bda8d-d67c-423b-97af-1f5bab7f184f", "sighting--46d561aa-f831-40d7-a4ce-07d823f31b5f", "sighting--e20f04ae-3fbc-4717-85a2-d5a07cbeb7da", "sighting--7a1cbc96-b10c-4c8b-9758-7fac0ae1e19b", "sighting--c32bf802-9ec5-4b65-9914-990ca7498c37", "sighting--4e21db60-1111-402c-8bab-51b2c4e1b178", "sighting--5b51dd79-13b4-4217-8e0d-da6532035283", "sighting--eb1bb0f4-50e7-4097-a877-a58fb50754fc", "sighting--e0480d99-0f78-46ad-886c-bbf58219e850", "sighting--c833bec6-c6dc-4641-ad0b-2109519ac047", "sighting--b427b128-b1ec-4be2-8890-2a0aa9097cc1", "sighting--25dca2c6-ecbd-4a73-9756-dfc5bbe37c4a", "sighting--b39e1691-8d73-4bfb-886f-eb71cf9750c1", "sighting--36d4ea72-2ee9-4597-951c-7acdd301b423", "sighting--4e78794b-2186-4579-80b0-998e88c85fe6", "sighting--6ceadd55-e495-46be-a756-2e960f2b98ce", "sighting--ae960934-67c6-4d51-b052-d7b36716d589", "sighting--b735fd30-f78a-451d-9498-3147af5bf4f9", "sighting--374560fe-8220-40e0-9ef7-9596040e41c9", "sighting--a18635fe-c9b0-4ab0-85e7-5f569164a67b", "sighting--8e9d67c2-ab08-4474-a013-93fe49133db7", "sighting--c528ca0f-a5c6-401e-a029-b0add2c8546f", "sighting--0a1095ea-4d05-4372-bf17-cee189012864", "sighting--ae6c0a9f-bb6d-4bcb-835a-09ff231f94ad", "sighting--11989a9b-166c-4c77-8208-9fe8d2e4d8a0", "sighting--2aacfb36-e602-47e7-9ed6-b6165df88734", "sighting--77521b5f-c394-4fee-8319-348747b6e76a", "sighting--555fffff-8171-47ca-999b-2cbc06b350b8", "sighting--a2029ac0-a108-45fb-a176-a2b86e09864c", "sighting--c8e85af7-0209-475c-a77a-3e3283e99038", "sighting--823c840d-11c8-453a-98aa-187ab2983170", "sighting--314f7e34-a840-46c4-986c-63f2d0621e6a", "sighting--df027345-6144-45fe-ae35-61583c138f54", "sighting--80f8d082-ffc2-4a44-a4d5-4e3ac756a027", "sighting--9dfbbb28-6fc9-4097-ba81-9c68f1e081c3", "sighting--225cebc4-68e2-470f-be2e-507840086c70", "sighting--aaf1adfc-80ae-4cc7-bb4e-0a03e6e08df7", "sighting--48793bc3-8acc-4f2a-8038-79612db27af6", "sighting--479fa5e2-bb66-451a-b9e2-fcd319c007d3", "sighting--b26c6346-01c5-4303-9e2a-342ca9736923", "sighting--04b28a82-c116-458f-b9ea-21499108aabc", "sighting--19dad492-f4f0-4b22-b319-627fb6c391f7", "sighting--21a1e55c-a6b6-433b-8c84-5bbda990f1f6", "sighting--532b9e18-d153-4065-8621-f1d93d88b7a1", "sighting--9bbd9ad6-6c6f-414a-acee-cc0e3d75ef6c", "sighting--c321f028-8f9f-469e-aa58-6c20076114b6", "sighting--d2755ca2-5f69-4151-a249-cf03bfbfde95", "sighting--15af6da7-0c3b-472c-be39-d3113b59320e", "sighting--d8497796-3a1a-4968-bb91-e0fde731b786", "sighting--179083a4-688c-4eb7-a26c-9b236fc6400d", "sighting--23f8bc2d-569e-4ef0-ac9b-bb1a47866c53", "sighting--d3cb0b19-a7d3-470f-b1a9-a1e5c0caab0e", "sighting--9a5b5db3-79df-4eee-8717-096aee8269b9", "sighting--501e2824-c356-42a8-83ba-05f2d4be6a54", "sighting--7f7e04ae-fe5c-4d2c-9f9a-7a600a58582a", "sighting--2f2cc7b2-187d-46a8-a667-bb914c61c89f", "sighting--325e3a7d-3132-4afb-960a-bcde95f2c132", "sighting--a0ae1d4b-0ff2-4c3c-8956-2c2c10a79cfb", "sighting--8bbb8caa-c068-4c89-8b4b-aaed690054bc", "sighting--927c753c-32ee-4c38-9880-c6573e4206bf", "sighting--f8f3838a-f1de-4668-a9f1-21741b7befb7", "sighting--114e5cb0-04dd-4060-a48e-444d5e08ed7f", "sighting--7835c109-dbf4-4b76-b026-44f414a7a84e", "sighting--acff9a65-e9a7-46fc-bd0c-3595515c9b13", "sighting--d5b6fc0f-fc16-4111-b0e3-7418b1982deb", "sighting--4ac8c5c9-39f2-4b6e-84f4-14e773ed1f87", "sighting--00bce8ef-ecaa-4b0f-a5aa-ba048cde8d9f", "sighting--caf2d3a8-162a-4efc-a063-c9a9650ff854", "sighting--f52be10b-09f1-4dbc-9d53-889d617366ef", "sighting--2748f127-00e2-4a88-80c2-a12272accd0c", "sighting--bdc8bbbe-55c4-47e8-ac91-bb70e8038ba1", "sighting--1cd45533-4022-41c4-b2dd-16ab8859f3f8", "sighting--eaad9e78-1a4e-491b-b935-e8d7e1975bd5", "sighting--7ddd95b4-b349-4928-a519-2a1883b4697f", "sighting--8daab07a-5a87-47dc-a108-7a33d12791f6", "sighting--2d770d83-1eef-42e0-a98c-98944055a958", "sighting--1af78fb5-0bb6-4a86-83d3-187b1db7fc56", "sighting--6a6f32d3-7b83-4919-9458-2d6826d3b7fc", "sighting--3c22e38a-7394-42e5-80d8-ac02c2a38ee6", "sighting--5eeb2b31-28b6-49b8-aedd-31a28315b757", "sighting--1d3742fd-220c-4864-b434-40374a8932d4", "sighting--7a6983ab-e831-4a27-945e-c822b1030e65", "sighting--0641ab37-4e5a-44f2-a207-fd469c5e5625", "sighting--283b4b9c-cbf2-4037-bd0f-43d63b932475", "sighting--5762393e-2e3a-4231-9af1-85c79ff048ce", "sighting--13118701-24e2-460f-9444-595f084538aa", "sighting--700c7924-219d-4345-96e1-0dd60ddcda19", "sighting--c3bb19b0-9d79-4597-b198-571e0cd102e9", "sighting--cbdb52c6-0cbf-4d3c-9fc3-9a213e7376d3", "sighting--e17d1fac-4398-49d9-abf9-2a474a146b5d", "sighting--d6bc8d8e-ac9d-43f1-b1f0-e292b58c5d15", "sighting--6445b363-f59d-4700-ac3a-d86e5006b84e", "sighting--5d6dedab-699c-420b-94ab-5fbcadcbfdc0", "sighting--f73b655f-7277-45be-a71f-de822bfb3086", "sighting--eab9d887-2501-422c-9fde-f05ac625b345", "sighting--f663fdc4-d977-4946-8d28-6d962ee7ec7a", "sighting--989bf50d-6439-4846-badc-1af6e3eb9e62", "sighting--eee90796-cbba-4838-8c95-e836a86abffa", "sighting--d3c9faea-8609-4766-a3ad-54433068a6a3", "sighting--71243b30-f88a-4b57-8f33-f621ac2774a4", "sighting--8349464a-712f-4fef-a105-182ba126d4b9", "sighting--67ce2e0c-4798-4e27-8047-92da3da90fd1", "sighting--d8a40cf1-c00f-4beb-a4b2-c7e805752d1d", "sighting--7fb6a41c-46e7-402d-843e-f677f903e649", "sighting--1a786985-16f9-4976-b82a-8fa71bbace13", "sighting--90668684-3ec6-47e8-9437-7e7211d71d2c", "sighting--0300b313-2c5c-4ea6-97a5-30b697d21382", "sighting--8118c308-9a33-4630-ae45-018a599645eb", "sighting--cfbc91c4-b709-46b8-92d6-b588205839f5", "sighting--eccca41f-dfed-4292-b24c-02dd8ed1a77e", "sighting--d4ed7bf9-cb6a-488e-bf73-23ad5274a07a", "sighting--129e4afd-107d-4311-bf76-23d2bd8f1065", "sighting--7afc8435-f7a1-45ec-ac2c-603474f6f0cc", "sighting--f2c08f06-40df-4792-b3bf-50391f8e80d9", "sighting--c3b65e99-d76e-439d-a495-f5216ceb8bad", "sighting--64875e14-38a3-4008-8c11-26e40b8a2744", "sighting--30924ce6-08a4-4421-a9e9-c46a9a623609", "sighting--0dd9d2d9-6919-4fc3-bf7e-47c1347b1087", "sighting--864e3b15-51ff-4443-8f62-25c6c7cd0185", "sighting--aefcb4f7-408a-46d3-92b9-096eae3ee4e5", "sighting--6c67ba93-0d67-459a-8fe7-751f5d171960", "sighting--978d465b-aeab-4d94-bcd7-1abd58622fee", "sighting--a7729352-1d88-4aaa-bbe8-4575073ed32d", "sighting--709a8589-052c-4e37-a6c5-205e98e66013", "sighting--dea51818-aae3-4317-b2fd-a2140a457d95", "sighting--510e0f75-6f76-4728-9044-51f4634a7c97", "sighting--09eb0027-469e-447d-963b-d2561fc9d38c", "sighting--578ff1b1-3fd8-42fa-9db8-8fe4c0084167", "sighting--a1128211-2ea4-43fb-8c94-023144c0fc67", "sighting--3d41079c-9a94-44ac-aff3-5d12480a3491", "sighting--93b90229-90ae-49c5-987d-6b706119df4f", "sighting--d8f30f1e-bcae-416d-a7b6-ec82a7655885", "sighting--c7bb3bed-0619-43b5-9e97-421fd2a98e16", "sighting--1f5e0ed2-6b87-4823-8f9d-6be54eaf7fca", "sighting--97364cc0-3121-4ad2-9e33-3e0b84218043", "sighting--0366aa1c-d37a-49ab-b847-442a41ad1dce", "sighting--7400267f-37f1-495a-85aa-b0ad5396dc34", "sighting--78291f5c-4d63-4655-9675-8fc086285a25", "sighting--da8ec3fe-6050-49c4-8392-e27412039996", "sighting--c667e5d2-4a9e-410f-93b0-c94747b6d57c", "sighting--3f08185c-020f-43ef-a713-537b0515eea8", "sighting--7da2de5f-aa32-43ca-ad79-519cfede26df", "sighting--24d79a6a-d07b-4a75-af80-1a46d6f030a9", "sighting--c9e8610c-616b-4fcb-9e63-8c1657aa0b7c", "sighting--0f7bfed7-11e8-4cce-b18e-202d7d46e27c", "sighting--1c81fb1a-9028-4020-9e78-230754c4906c", "sighting--bf30e39e-cd47-4698-91e2-4d00b8e173bd", "sighting--28f8c8f3-3dbd-46ca-be4a-f439ebafeeb8", "sighting--10e7acac-4409-463f-9d33-259054147782", "sighting--f0fd4a6f-c2f6-4a07-9a73-93f5c835b08a", "sighting--522e6e4e-d983-4a67-b108-fdc79c53e140", "sighting--dedc9ebb-0c14-4e81-a000-01d526f9893d", "sighting--1aa2d97a-aac0-4b35-ada1-f8b7cf086a12", "sighting--f2eddd44-81f4-4067-924d-0624c1804744", "sighting--c4342e9a-2c41-483e-958f-1c9ef5c8b243", "sighting--06a52460-6b89-4d38-9b3b-dd35209ce838", "sighting--1dc9def7-5bd4-442f-a49e-0cf231d354df", "sighting--6cc196ea-4ef6-42c6-8f20-13d8d84ca472", "sighting--afbcd3fc-8589-43dd-aeca-f65689daeb10", "sighting--8f9c0c5a-e922-47e7-8cac-aa5e6db7a186", "sighting--2f7ef150-1802-456d-a246-6a5eb0b55290", "sighting--09b0ee79-f97b-401d-9382-41671d135ead", "sighting--3d5d9130-e8ed-46e5-880b-13b201924789", "sighting--db6940fc-fde0-4b04-951e-5854313c75e7", "sighting--ff56de9f-d86f-40e7-ab5d-f09f127cb82f", "sighting--a84b40ac-2aba-484c-8b1d-07b92d53871d", "sighting--f252647c-5af4-4faf-9cd6-7d1c0056a90b", "sighting--9d349548-2044-49c2-a42b-81769be66b64", "sighting--172dd5b1-0d45-41c6-b1a0-7c472a016abf", "sighting--d63e7cd3-625a-42aa-84a7-b3642b7c0a22", "sighting--ec1f7d15-1f9c-455e-8e89-be492e92e783", "sighting--5b35a216-6313-4897-9a02-6f043f5a3f10", "sighting--4899afa6-d8fb-4bc5-9a96-e51f5973efb0", "sighting--ba42951d-f003-4b7b-829d-84be5fe0ad50", "sighting--e7dc71bf-26d9-4545-a9bd-c435b6633eed", "sighting--f3fcc464-f358-492f-9347-e855e70f870f", "sighting--49251c99-7e97-4fec-9f4a-cbfb562d75b9", "sighting--300de24e-a8b2-4c72-847b-8c18379c2cd9", "sighting--03a8104c-ff0e-4364-9e5f-359735ebf4f1", "sighting--0ec75244-fb53-4ea5-bb46-4aae779e15a8", "sighting--b8f2aa76-024a-497d-8d4b-5d5684c81f7f", "sighting--d55d4fbd-f0f7-4ce7-9f15-67799f7b5643", "sighting--1aec977c-63be-4cad-8053-c156a06ffddc", "sighting--25e225d8-a704-4fcd-acb8-b878141fcdfa", "sighting--35cf0630-38e0-49e4-942d-d4f702f85892", "sighting--6e63d2d8-9b9c-4101-baf2-f7b2acc07501", "sighting--449bb951-4d39-4fb7-80c5-ecb0113b8cb4", "sighting--c022dbb5-403b-4d60-ac1f-c217c44e0018", "sighting--f79bf15f-4989-4b80-bfcb-e22414b2ff0f", "sighting--456d10cc-87e8-40b1-978f-ec9d36017770", "sighting--dd49fb54-7d9e-411f-a342-60e3cfb0b84f", "sighting--dac78d55-a00a-4b6c-a94b-9b8f3150f077", "sighting--08d1647c-72a7-4b4f-9b78-af61836323eb", "sighting--af40557f-f891-4cb5-b49b-e11671b6a1db", "sighting--920494e6-1f73-4cbd-99d0-e184aff11608", "sighting--c0ff3aa1-a89c-4dea-88d3-df3da6fdf49d", "sighting--1030ac21-aa81-401a-b4c0-c70921861724", "sighting--9f77295f-51f5-4f7d-9833-6e34b3eb365c", "sighting--fc393937-67a3-4a78-91cb-8a68ba21c393", "sighting--4cd1d3ba-32a9-4fb7-bfd2-28536978501c", "sighting--2c9e4c91-7de8-482f-849a-a29290910be5", "sighting--1d6255b6-997b-4930-a9c9-4d309ec06277", "sighting--2f74d423-1f94-4ca1-8bc3-3da066c2f5df", "sighting--7f297470-be7d-4faa-afcf-e1cc8ebd0ea1", "sighting--ae8978de-dffb-43f4-ace5-329b3dd31a9e", "sighting--32d3dac3-02f4-422d-a440-bb8ebf1874f7", "sighting--23520912-e1a3-4b76-9e5b-4d530886dde6", "sighting--2608a228-688e-40f7-811d-70df1257cc2f", "sighting--9de6219e-aa0b-453b-93aa-574074ea20c7", "sighting--0ecf4a80-069f-4d21-843a-a9b3bb67a672", "sighting--fb9cac35-3b06-43bf-9cf6-527ae59d647c", "sighting--81455ce8-ff76-4d7b-95a0-4a186ca2a1c4", "sighting--76478c7c-b1bf-4d14-9b04-68a1f5a064fd", "sighting--d0403189-b60d-4a67-88fb-9ab4d31400f6", "sighting--0f57d23c-f816-4534-a09f-bdc6a829a67c", "sighting--c44e5d3f-2bbe-43f3-8471-a3da556660dd", "sighting--cc588a69-04b5-4e7f-9fc3-c6b08440a7ed", "sighting--6e381643-d186-4adb-8137-6463d7eff8ed", "sighting--e89fff52-99ba-4671-9848-03678d06de99", "sighting--d95dae46-80fa-4f8f-91d8-a77abdc62570", "sighting--0cf1208b-72b7-45c8-a627-c02170d3a741", "sighting--5ad0d83f-75f5-40a2-af17-f8076a57b64d", "sighting--9c06bc10-9f35-425a-a120-729760e26423", "sighting--50411dda-05b2-40b5-8293-1959f015b697", "sighting--c5fea8e7-7a12-4d81-830b-4742f2179e3c", "sighting--e692d80e-5953-43ff-9e8a-590146e5675c", "sighting--d84bfc74-e345-4939-86bc-844b6d0b1082", "sighting--65cb3e0a-fc78-43cd-b0a2-fc1b34729d59", "sighting--7313f954-59b8-4000-8948-d62ea93e6115", "sighting--3631dbdf-ef92-4e4d-bca7-a01b9a171f16", "sighting--21f3f914-7e84-47b5-9c28-83d212b6e5e8", "sighting--3e739336-6d2a-4da2-89cb-c2daf26e4f99", "sighting--368cc2c2-2b38-463f-b63a-2415c6dcdc0e", "sighting--a7650af1-6a84-42f2-a508-978579d5696a", "sighting--b1703329-79de-4c77-acf0-daed92f17b35", "sighting--3992ce2c-2db6-4c0e-9af4-d23ce0d21811", "sighting--039e4682-f147-463b-8cb1-23d1539fb77f", "sighting--9f8b1084-07f7-4c53-8f4c-15eac7c13d3f", "sighting--2a5ec5df-550c-4f4e-87c4-4c940d9564f3", "sighting--f2305a92-af24-4886-a6e2-14b7263c4e57", "sighting--5655c04b-7e68-495e-9398-72f4f022cdaa", "sighting--d40bef99-3a1b-4b2c-894d-03b8ef9d6cb9", "sighting--2bea2608-856c-484a-864e-fcf10e16a24a", "sighting--d562d585-1004-4035-850b-56767d8cfdaa", "sighting--30c5f850-f7f2-4b92-b4a4-f5dc06dbfcb2", "sighting--3320cb74-573b-405e-96b9-5d22327cb205", "sighting--fd0b157d-136c-45ae-8deb-aa6b731ec499", "sighting--9cb79726-f873-4111-a320-c206e6811652", "sighting--c64cca7e-4c35-408d-8740-effcab97a7a3", "sighting--27632f1f-9b94-440d-9fc5-46537f99ac36", "sighting--68e8c99a-e9a0-4612-be6c-da42f622b8c8", "sighting--27649fc0-9ceb-4528-afb9-29c3450f4751", "sighting--296f1852-9403-45e5-83e1-a3713e064bbc", "sighting--9086137a-4f6a-463b-8e53-8cf64af8d648", "sighting--caf1c8ed-2188-4b39-9fd8-9f811182201a", "sighting--dd3dbdb2-cb2d-44ac-af14-d1499e693807", "sighting--cf30733e-3631-4c8b-9be2-ad976849366f", "sighting--51559a36-c2d1-433b-9f32-e70c1210f360", "sighting--d5f53a71-25c3-48f8-acf6-166ce22e2b8e", "sighting--9782dfef-6b10-42e5-bb16-87ec1c5f011c", "sighting--f577bb25-0e1e-4d21-9a91-b18382da803b", "sighting--38083ecb-cb40-47f9-932b-e1c6e7ad7d52", "sighting--737348a4-6cdb-462f-9c7f-82fdf2e74797", "sighting--bdfa1852-ed58-4923-b20a-b805ff3ccb9f", "sighting--8317956f-ea97-4313-b915-85b9ab348ef9", "sighting--6ef7b261-2e20-4f1d-aa0b-83fb655ca838", "sighting--db94fda2-1538-431d-a5a0-53f5ac9126ef", "sighting--3d150785-bfca-4b83-8792-91654f06d229", "sighting--955f3477-45d1-4c1e-834a-8332a4603d01", "sighting--f9f7b789-59d2-42f2-a3f5-b1bb446f0727", "sighting--7da74144-4bf4-45be-ac9a-b6c80b89fb38", "sighting--681eef80-01bd-4c81-a981-dd35df8e8db8", "sighting--5515b4b8-97dd-401a-bc48-611a6cb9ba9f", "sighting--6730e519-d0ab-40c8-9b48-e69283b26e4f", "sighting--1dedaccd-e728-46cc-9a5b-03049dadcaae", "sighting--9d11045d-3251-421c-9e87-c622ce1f5500", "sighting--44e1d860-ece9-4ec8-8cfd-a304b68ba104", "sighting--8f2ff82c-7f62-4c1d-a8ac-7098ae537260", "sighting--5ad45500-fd0a-4ace-b6c5-2b0d1c038c8a", "sighting--a74a7f59-e719-4a05-b480-abf445dada60", "sighting--6fd2e324-fd06-4bb1-b37a-3bbe88bc9ce3", "sighting--58efc338-4d5e-4805-9d9a-839bcb963039", "sighting--afbb5bb3-4c55-482e-904e-02e644421311", "sighting--244a60e2-980b-40c4-9f30-5685fc280594", "sighting--5acde866-4c90-4e8a-8236-77fdba25181d", "sighting--18f39c74-68f4-49dc-b878-4f18f6651f78", "sighting--94b31320-5753-44a0-becc-94b2cd9bee40", "sighting--183abddd-7ba1-42b1-b475-80d172d3b331", "sighting--887748ab-ad77-4949-961c-68bdf94ae159", "sighting--76c7f419-9692-4f39-92e6-2ec4352f2e90", "sighting--86408d25-1a61-4fc8-a0d3-fe0050eb3b3e", "sighting--c041a03e-2395-4efb-9ca0-3022c00bbe4a", "sighting--034fb6e8-7cf9-4c71-b280-188b715e2f47", "sighting--b87165f8-78cb-48ad-a202-cddc265c02ac", "sighting--546ab0dd-a87a-4e54-80fa-bd468bd98b31", "sighting--40125831-be4a-477b-a043-68dab07494fc", "sighting--c0046c83-c6e5-4646-ba62-c102c3ce6da7", "sighting--f64e4259-f79a-4c15-8444-aaf966c398fd", "sighting--d8fb1721-42bc-465f-b23a-e298cdfd73b5", "sighting--72b05679-fbec-4456-96a3-a4f6e120597d", "sighting--7422f9c6-7cc6-4d48-a40d-6ef1dcdfcbe3", "sighting--e0041942-028a-4ef9-9ae4-b9b3d26e7f20", "sighting--394deb93-cf9b-409f-af66-6228d58d6808", "sighting--bd568b21-a6f6-4d18-9098-5a4aca78e72f", "sighting--cfd79d1d-926b-4040-823d-dacd75f64483", "sighting--7bd300f9-f125-4f7b-a70e-6975b800a226", "sighting--256fb0e2-e145-4688-9a8d-63087c8da27e", "sighting--2bde498e-dcdc-46c5-b412-f8474b3e5e9e", "sighting--ca3b141a-9d71-44b5-8bdf-1ae8248e5abd", "sighting--e6d806cb-2ba0-4435-82b4-38dc7bae3d65", "sighting--fa974919-3f7a-4ae4-a140-c29547f6fa8c", "sighting--c37e88f6-f4a1-42ec-b060-ad5f25e63412", "sighting--a207bf5d-5d64-4170-b8b8-8a9c045fa68e", "sighting--67f0ec23-16be-41fb-9333-6da05670f01a", "sighting--82327506-dc03-4d7d-b3f4-d74d6d338048", "sighting--9b541728-1521-4375-aaa2-d4806b54f5b5", "sighting--a4fc748b-8373-4fac-a6db-bfe5fa8b9af0", "sighting--526586a2-5103-4549-8da3-54b12d985146", "sighting--119b65a7-7868-4340-a91e-d21eca4b6846", "sighting--2d8c7a6d-df4c-4572-8e36-73e55f2baf2f", "sighting--9cd91758-f8d6-467f-9c7f-6162c964c8bd", "sighting--b5190e26-d64e-4dae-9661-1b0316207de2", "sighting--fa78f1f1-e58f-49ba-aae3-ca6d520d0c9e", "sighting--edabbbd0-329c-4101-9321-a4049d7f307d", "sighting--c2cf331c-bd4f-493b-b42b-b056524bb6f7", "sighting--bbc02a0d-e2ab-4e9c-9ef0-22c516149358", "sighting--292a0b75-b9d1-4436-8f6b-7126d02a1b61", "sighting--7b97383f-8218-4236-8714-4ff34f697510", "sighting--e75cc612-444d-47d6-b832-335d9655a08e", "sighting--267aee8a-198d-4286-8e0b-7d6df141e675", "sighting--07474b5f-d3a6-444a-8a93-e22147cec183", "sighting--b4f294b5-b8d6-4d0b-8436-b136bf88f06a", "sighting--fe99f725-f37d-441b-b6a3-02a520e99e8d", "sighting--3b71bd14-5c2f-432d-9bd6-7a83351366e1", "sighting--c4bf55e5-cb46-4cf4-8670-69a4670313bc", "sighting--c53f9e95-33a5-4b59-97a1-7ca9b4902ae1", "sighting--af07f238-1dfd-46d4-a34c-5a77a603dd70", "sighting--a93c1f0f-a934-4b66-a60d-29e79fed3e8c", "sighting--9cfac163-784b-427d-9a6c-f971c5b72b4e", "sighting--e5ecc6cd-84bd-4aff-b6f4-cf483925be3c", "sighting--90a81616-1d98-41ea-8a2a-8dac3270a16c", "sighting--cca73d5c-63f9-43d3-b367-76808be36b4c", "sighting--0a327094-5449-4c96-870c-c86a6c01c0b0", "sighting--a10bcd28-16ec-4876-aa99-457879c55d0d", "sighting--5170414b-3fcb-4023-9121-da098e76ab05", "sighting--949df5e9-affc-475d-9319-0ccd770c3f8b", "sighting--68597756-b9bf-466e-befa-cb9d49012fbf", "sighting--adc0246e-952f-41ba-871b-2b5c9edee85e", "sighting--9699ba23-cef5-42a1-b887-fc4f8fe76c40", "sighting--a377e33e-d233-4a3c-b03e-bc70eb07e0b9", "sighting--224f3956-df53-4527-9e99-7e55b59a93de", "sighting--95e9910a-c0a5-49b2-b650-f23513faddac", "sighting--e178a348-5516-4f9f-8623-8eef7f28fb93", "sighting--a95f683b-de47-47b3-ad1d-82fc9bffe157", "sighting--e5177542-765a-4ae6-bc1a-ef684890bccf", "sighting--efc53481-8598-4625-8a48-a5b82d4cf912", "sighting--9287493c-20f8-46d3-ae88-476394827a06", "sighting--f2de4117-e8aa-4fa5-9ae6-38350eda9baa", "sighting--c06a8f13-e8c5-4e83-a20c-089cf0b0b047", "sighting--b2b21759-5e37-48da-be7a-01e2e600062e", "sighting--12068d3c-0bb2-4a4e-8ff6-a04248f0528b", "sighting--156b86e9-60bf-470a-8e0a-635004c1b162", "sighting--c3c2153b-9136-46d5-8a6f-f02b62d04745", "sighting--f07b6b63-edf4-4a3f-9c9f-b897a56a54e4", "sighting--2493b20b-bbc2-4f88-806a-79c549c4c60e", "sighting--8a04d7a9-16b2-4243-8fce-fc11e5f9e394", "sighting--1043aa46-1d2d-4633-9bb1-daa23d2feecf", "sighting--17b76edf-730b-4c58-836f-edf1eb01b6ea", "sighting--667a20bb-3f6d-4982-ab4b-86b70a31035d", "sighting--0e922f7a-7401-427e-87a5-ee5b0f4750c0", "sighting--04bc2469-69b0-453c-bd98-7a9c703bca3a", "sighting--41de6e2a-bc62-42af-854d-7e815df5a847", "sighting--afb4aeee-f949-433c-9380-c4218df60865", "sighting--f5a98ff0-975a-4e2e-aed0-a4442bac91aa", "sighting--0c752eea-ace0-4dcd-9abd-d571d61b4bfa", "sighting--60d3e64c-343f-4c95-8ffa-71fbd7342e2f", "sighting--5607975b-da40-461e-908f-d8c6fa332c6d", "sighting--dfa855bd-56c5-4840-8d7e-1dc173bc3f70", "sighting--888cb0a0-367e-40b4-b791-4000c2084283", "sighting--ab399df0-7e4b-4b68-b1b8-b77c39c03b19", "sighting--c014a53d-90af-4e62-be04-7b13d4aa3820", "sighting--06c3b8b1-c21c-49ce-89f5-8bb8dac9f687", "sighting--b01bdfc7-dbb2-4a1e-b865-6a4d6f21d451", "sighting--3db1f39d-96fa-4432-ba0c-9c1164fa3b49", "sighting--578decbc-8b63-48b0-9af0-68129fec0602", "sighting--6801a3be-c3aa-4b6a-9354-3a529960c21e", "sighting--768daff8-2b6a-458c-af9d-0622964c0ffc", "sighting--1a787c68-c67e-4f16-a076-0703a4cf69ec", "sighting--27642623-c68d-4c48-a62b-2dfafdde26cb", "sighting--76e1e8d3-2371-4526-b70b-9de9e3b9d734", "sighting--dbf11dfe-69b1-40e9-8028-323c3f4ba410", "sighting--8a82d974-f1a1-4256-bf51-0eff9bddcab9", "sighting--cd4fd54d-15b6-43fa-89fe-5bde604fa250", "sighting--eefceeb7-78b0-4b3e-8d1d-15388b8a2bdd", "sighting--5aaa0932-fc7c-49e5-b183-4a4cad3705b6", "sighting--78387d1c-ca40-4d68-9ab2-84cd33201c17", "sighting--de232340-84ad-4b91-99f2-28d60dae7cee", "sighting--3aeffb90-81fd-4ea0-b817-e003670a37be", "sighting--03fc53aa-89f8-4eb4-af0a-09930ec06756", "sighting--33c9ad2a-a42d-476a-ad81-2dfb9b1ac7a0", "sighting--56539152-6b9e-4233-ba57-61afe88bf122", "sighting--1c066841-6ef5-4a57-a1d1-a10c44a1f3fb", "sighting--f0051bbc-5c1f-477c-8f87-c3b2cea3a77b", "sighting--977dbc78-1de6-45bf-b294-e9d4cc84c9a5", "sighting--58067031-882c-49ba-86bb-95e8f53163b2", "sighting--a3fac181-f9b6-42da-960b-11dc1c7a57a9", "sighting--6f630702-2d81-42c9-baad-6490e07b6955", "sighting--31bf4596-04db-438b-b0c3-377191a2632a", "sighting--dbcca052-a72b-47e6-87ca-e6c67fbe7618", "sighting--6d4b003a-f191-48b2-9bab-6f469e36af20", "sighting--cd722181-7d8a-4167-a5bf-f2257cfceb7a", "sighting--4ed215a1-39df-414d-b13d-2adebc6b1d67", "sighting--01438f76-f63a-4229-b08d-93337a650234", "sighting--dfcb406b-d57f-408e-b45d-6fdd65ccdb58", "sighting--13b233e7-8c86-44ca-9030-ed90af1a1c01", "sighting--dad656f7-edb1-40dc-aa79-a104450fc6eb", "sighting--49613823-f12d-4b19-8153-97498db80966", "sighting--65f5d84b-0cf2-4c76-87e0-c93d6f2d0b1a", "sighting--605a0dcb-8ce5-4910-a93e-30419df50c11", "sighting--57f40917-4346-4948-a9ad-3d0ed974c9e0", "sighting--082c3410-ca12-4035-846a-e84c41bdafcd", "sighting--77b3af31-0256-4fab-98bd-b92040d05235", "sighting--f026f010-9d6e-40b9-8246-22f25381f79c", "sighting--8281ddbe-f190-4a23-9c49-d5bb19fd5565", "sighting--47343b85-d7cf-4a1b-aca5-c12f29a086c6", "sighting--05057c79-74f5-4591-86fc-41a5ae5b35d9", "sighting--459a3454-869b-4bd7-95c6-a5634aec6a3b", "sighting--e50d1e1e-1b91-43c5-a1b5-dba39e0d842d", "sighting--08cc7120-7549-4d06-9602-de6b0f289985", "sighting--a5ce6e6b-96c6-4e36-96fe-86edd3458d3c", "sighting--c8fa807e-5e4c-401b-a0d6-99e57dcdcb8a", "sighting--74bfa971-77a8-4937-8a59-7551b6cb50c1", "sighting--856ab2a7-a8f5-484c-8303-39f9d009a867", "sighting--769b4a71-9e21-4df0-b873-bb1d6efb07bc", "sighting--47bf3747-fad9-4960-8abb-7428b10681c1", "sighting--7f676f88-f32f-4087-8383-f80ce587e33c", "sighting--21fddb2d-b833-459d-81ad-da7ae2d06ce8", "sighting--d03755e4-7814-4265-8dd4-0cbee3c08f15", "sighting--1055d532-935a-45e9-be70-51e8e22b05f8", "sighting--10ca4f97-da26-4c71-8e7d-c50f28b85ab3", "sighting--ace0e47e-9bd8-400f-9f6d-920ca7a0f88a", "sighting--b4070189-66ab-4b65-9b45-c0471ed25ee5", "sighting--54aaa088-b50f-4d0b-bc68-c6db17beb661", "sighting--3f14f5a8-ec1d-42ed-92ed-91ffffb31c28", "sighting--a20ae5aa-be92-487b-884d-b48cee9aacda", "sighting--cab48695-393e-48a0-8b7c-eed8f2085dbc", "sighting--44eec29d-7a3f-49c4-a2a6-df25a57bcbc2", "sighting--fe3592e7-5ab1-46ed-804f-49b0b4c03798", "sighting--3fb3a622-3159-469e-bf0d-2cce8ae3445e", "sighting--58f659ab-5f97-4a70-8f14-e082e9d74798", "sighting--5c380812-1378-4add-a969-906585300ac7", "sighting--af1792f3-af72-4d34-90c1-bec2264e69b1", "sighting--45ebcf2c-39d2-4d09-872e-9fed7730bfa9", "sighting--94ca39aa-0207-4052-9fbd-709fa4917c4a", "sighting--3f6229ff-6c56-4f29-bb64-0ba43bd68db3", "sighting--1ac4560b-da24-4432-ad39-b9226cb65aff", "sighting--46b57e6c-dda1-4634-9a30-cee6c5836cbd", "sighting--d8ff6cc2-c4c7-4f85-af09-558b90c835cf", "sighting--a1593556-8845-41a0-be12-52e2627b6722", "sighting--f8772f3c-40b1-4258-8be2-e29a20f5f0eb", "sighting--ea78840e-a024-4733-853d-bdd59772b9c5", "sighting--5db133a0-e76e-4f1b-b7b1-6e1f9b93c2b1", "sighting--5c7aa7ec-a435-463a-8bf0-8d6812d14d43", "sighting--0a5bf6f7-09e1-4173-90e3-88a194f9f69f", "sighting--308542be-a742-4d54-a591-75183083e0bd", "sighting--db4acc09-167f-4d7e-a1e4-1a256db59a9c", "sighting--69044dd5-46f4-4f26-b833-ae0e99e60098", "sighting--b770b67c-8c6f-412f-88d3-0e3b7cfc60d6", "sighting--9a75d78f-45f2-48e3-a2a8-4a787d21cfdd", "sighting--a9beaa37-a44a-46d3-bae3-34fcbb6d40bf", "sighting--a6ef031b-0a3c-4ef3-acf4-19286d6abd93", "sighting--4b5515d4-b588-47f9-9b42-473c709a2557", "sighting--bb97d10a-c6f7-4d39-8e56-2e12944977c5", "sighting--d7e86eac-c5f1-4191-9394-a178c510936e", "sighting--88621d48-fe05-4b50-b322-f946d94346a5", "sighting--162869b1-ad09-4cf1-ad5c-679dc382dd0d", "sighting--9e3303bf-bff3-44df-a2bb-8a1f06fbe00a", "sighting--d8f8cbff-7dcc-4e2f-9394-08bd09a53cba", "sighting--c18fed52-96ec-4a17-9216-c186c96ea32d", "sighting--6aa98ab7-acca-4c81-9bf2-129bfca50d45", "sighting--78fa723a-746e-44ee-8140-9756e0f411cb", "sighting--d2da2c0f-52ee-4f89-81ce-23f930107f3e", "sighting--e07633ae-f240-4c6c-9c5f-1f07f37ef3dd", "sighting--5fcc7ba5-ddb9-4e52-b270-d80cc62b8380", "sighting--60c1d5e2-0664-4576-961d-8127c51a0029", "sighting--815605ce-1e04-4e09-83aa-0f5908a2b6f9", "sighting--c389e809-27b5-4096-86e6-2088fb9e005d", "sighting--6b0da8b2-f361-4dc7-a17a-f78acb4c052e", "sighting--0758fe87-ca29-47f5-b3c5-5017811e67e4", "sighting--a7843d6b-b74f-4381-b873-ccd7ea7b057f", "sighting--6dc404b9-27d3-4da4-8b15-fc4fc2f213df", "sighting--1cb2320d-d14f-48a9-a1d6-81d003314659", "sighting--2d3b589d-759d-47ff-9930-8fc43c638028", "sighting--6bd3d212-5faa-423a-8494-babb5896dc9a", "sighting--e6054d15-c9d7-4e5c-bb64-699220f28f18", "sighting--b6cccf81-d341-40bf-8708-392fdffc11e2", "sighting--5c153b39-8ae6-4295-b75b-1b375367850d", "sighting--4db85eaf-2081-4ec1-af0a-bbf4ab14ffd1", "sighting--5d3bc9d3-ee29-41ee-9f97-bd67fa864b70", "sighting--7278e4cd-40e9-4ce9-b71d-d7bf23c49cef", "sighting--464b5631-e2f3-49fd-8fe8-bdada59c26a8", "sighting--089ecd28-292e-4d13-aeb3-ed80e297afdb", "sighting--4d4e0a0a-c550-4782-8fdb-f4796c4a5314", "sighting--20d68156-f19b-48e7-9dc3-282c460f83a6", "sighting--87dda21f-9c73-4b63-bf84-5992c903e390", "sighting--602c5c90-5744-4024-b21e-ac0bbbf5c2db", "sighting--af477ed1-1184-43bf-a323-67145f42cb57", "sighting--582a0d2d-8c38-44cb-9630-c69e7aa33bb0", "sighting--c55ca532-8d9d-415d-bb88-197573a55ab2", "sighting--5b0f7913-f6a3-474b-bfc8-cd5890a1ba46", "sighting--5f9eadd6-081d-4af6-8039-92eb07647094", "sighting--90778d2e-dda1-4e09-9896-9aac0869703a", "sighting--bd21ee70-5563-4462-8dbc-6b8348179504", "sighting--829397f4-1987-4dd4-a034-3a90e19280ef", "sighting--21581357-8f29-4e4c-97d1-e171bb762e30", "sighting--3012f349-921a-4b75-bafa-0c25068b3796", "sighting--517a3351-d22c-4c49-81a4-7719145c8f34", "sighting--a9a1cb57-9dce-4c12-9b46-1ef999824d0b", "sighting--98003082-08d3-4aba-b69e-4d097b15b0b4", "sighting--dddcbd4c-6d81-417f-8717-b72fa79a86ad", "sighting--95daf0c6-c161-4cdf-a4ce-ff792e41e4ac", "sighting--e8e56009-3723-4f82-8946-efec38d547d8", "sighting--b7cd70a1-8d98-40ae-a09a-887fcc11cef0", "sighting--585b1faf-c8e9-475b-966e-b17e4388cc5d", "sighting--c46c4150-0b26-4262-b683-0fdfcf54970c", "sighting--fc51072d-8902-4002-853f-ab208723affe", "sighting--4b3ff329-6afb-4c9e-863f-228397f72e1a", "sighting--df415cab-7f4c-48d8-a8a2-f64d14ce2b87", "sighting--ddd9b3a4-c955-4f4f-bc96-1727ab88aa0f", "sighting--a8216767-a776-4729-a216-30ddd02f90bf", "sighting--5c6d70a3-7edb-4f8d-9d55-90153a73737c", "sighting--dce606dd-5964-40d6-97df-c487a93f501e", "sighting--7af32ee2-b9ba-4eb2-9baf-b6b9012986b9", "sighting--0754fcc8-df3a-4e22-b17b-79ee8cd4f9df", "sighting--0c0be6b7-cb2b-4eff-b020-610bbe0afbe2", "sighting--b993dd45-d35e-4165-9575-688deaa0eb5b", "sighting--e6d0c9f1-f7d0-4ccb-b155-c38c81988f31", "sighting--27bd539a-89c4-46c3-aa3a-dc7c0593e117", "sighting--aaf54fd0-af52-4ca9-ad36-20ed81b7c9b4", "sighting--55815054-1af7-419b-9b72-03abd697efa7", "sighting--df66119f-538e-471f-8497-220805b8bb7b", "sighting--46c19205-e52d-4bfb-b9e0-16a536d44559", "sighting--b5831b16-ef39-4d91-9491-17898f33271f", "sighting--c4c038ca-82c3-4c51-a87b-2e0e3c2a1f93", "sighting--592f4685-4ce8-4808-88d6-8636d008338a", "sighting--0107c0c1-6b78-4c22-b87f-a8ca935bbc4a", "sighting--7274d3fe-5624-434c-9e93-00e5dc388f19", "sighting--0e7e324f-35e2-4eac-a97f-88a4f6ee4d31", "sighting--fd1aaff5-7206-4321-bdfe-37ac7b27dd9f", "sighting--48436c5f-4945-4e3f-8354-f5f3995f7c34", "sighting--a313692e-4056-4cc9-8352-74a36ba8f3d4", "sighting--c83df655-e7e0-4397-ac1d-3a312aed7f32", "sighting--23886923-eb08-48e8-8b77-945b2b8429c7", "sighting--5af2ccc1-156f-459f-a064-e3f4513e294c", "sighting--a9ddabde-f4c5-49e2-b2bb-1e0318fb19f7", "sighting--d5d4a1bf-b54b-427c-aeb6-d13d5733381b", "sighting--fc3e4a5f-8007-4717-95b1-f553b1ec5fcf", "sighting--c1d5e74e-0a01-415e-a9f2-5453429ff0f3", "sighting--2548c7ea-7198-4157-99d1-d8fad843ee3e", "sighting--bbab3e61-114d-464d-b746-cd25d4738842", "sighting--9f1e299d-acbf-475b-a302-14d4018a226a", "sighting--c43b1d58-c9a6-4fbe-bb6f-99907d940f58", "sighting--3595f4c3-c8c8-466e-a2fa-e41caf3ca628", "sighting--f10cc2be-fffe-4f6d-9d42-eb90277bb21b", "sighting--21bd0ef2-3c13-4570-99b1-8e611a27a69a", "sighting--0d609a59-9a68-40d7-9703-980a9840d76c", "sighting--8fffa7a1-2ac2-40b8-bbe7-23e4796d02e2", "sighting--2608c06a-f2b9-42a7-b9d8-12cd2afe39f6", "sighting--3c17abb0-19f7-4c71-92d5-5d2494b7a450", "sighting--3ee41cd6-aca8-4e2e-bab7-2289b82b597b", "sighting--5efd29fe-4e00-48d9-8384-6b14b772d33c", "sighting--1d698e82-456a-41ed-b3cd-0b4b758c9c0d", "sighting--01d4391a-45a3-457d-b625-b0f2c207b28f", "sighting--807efe4d-6965-4946-a1ed-9a8063f6eaee", "sighting--fd350638-a173-4172-bee9-2888b8df4fcc", "sighting--885d9b25-9ee1-4c0a-bbd4-4d0a88b8f301", "sighting--ef60112d-8f43-4b4a-a637-0d6362630901", "sighting--2a964d98-d1fc-4e92-a877-ac2b040aaeb3", "sighting--e593fb17-0b0f-4e92-a918-f12e61123a6d", "sighting--5a523dac-27ff-4ad4-9243-d79af2a7fd39", "sighting--59be3f14-a41e-4f67-85b3-97f7c1918147", "sighting--f80da993-f0c4-461e-be1e-0dde9d17f8e4", "sighting--ef291939-d5c3-42dd-8e97-9ace5b3c44f7", "sighting--37570512-253c-483c-a923-f6329f33f61f", "sighting--1d744096-29d1-4f5e-8daf-6d91d30a61ef", "sighting--696654ae-c389-4701-84fb-935775593bf7", "sighting--e1bed393-eeb1-41f8-ae72-2ab7bdfa9e73", "sighting--c58f5c96-bcf6-435a-ad4a-e39a0ad69aa4", "sighting--0aacaf98-9714-418e-821c-4092a81417b2", "sighting--970585a3-e986-40ff-84cb-5ef5fa85d130", "sighting--809c8b7d-2077-477f-b989-dd15267ce6fc", "sighting--ecabdc36-1f56-427a-8358-501e9185db58", "sighting--133ff9d5-e75d-45d4-9006-132b2f9bd5f3", "sighting--251cdaaa-2032-437f-9f12-9bb360c9421a", "sighting--84f3dcdd-4957-4499-b766-fd378989737d", "sighting--2d730f32-979a-48b1-8e9a-c01bcadd4f50", "sighting--c8ad9cdb-234d-4562-983d-83aafc80ba41", "sighting--80b45f52-2b6b-43eb-8c38-29d7a82ab968", "sighting--9459aa8a-41c8-4d35-96ae-8f0ec7f95251", "sighting--a044e41c-84da-498e-88a3-9a848442b6d8", "sighting--1d103a01-b95b-4bc1-bbc3-d16f9a517517", "sighting--44992cc8-63be-4016-a50c-f42a4e29f38e", "sighting--7d4b4f64-c253-4342-a4ec-a9b55b81916d", "sighting--23d6d62d-c44d-4b98-9631-ef4b991365b2", "sighting--d3245ebc-7f74-4923-be33-c4efd6c56fd4", "sighting--03759106-06c5-4c17-9ea1-855b3cf097db", "sighting--0b85f4dc-8f07-415c-8e95-ab45823e6133", "sighting--1bfe737d-e64f-47c5-b2e3-6d67e4e603a6", "sighting--aceb8583-7bf3-448c-b25f-cb7ab52e11b1", "sighting--0149eb4e-4150-4359-b6e7-6643d87f1a4c", "sighting--8f39e14e-9cbe-4c8e-9519-70f26e072f82", "sighting--dbd383df-e3e7-4572-9ae5-706a398d1b40", "sighting--3777cd24-090b-4e62-8b14-500e85cf9f0e", "sighting--4a8d1401-7428-4ed4-915f-edccc01a610e", "sighting--80a74a9d-77cf-419b-84bb-4ed822dcc387", "sighting--04cd13da-f643-46d4-b8c7-f7f7df18398a", "sighting--8daac508-522c-4ed8-85d7-e093c52d04e8", "sighting--dbcc14f7-7a70-4f9a-bf78-70a025826571", "sighting--e345f7ec-9a59-44d6-97e1-12255693aed6", "sighting--caccefe3-5ef6-48e8-9463-291250548337", "sighting--ab533c10-9716-40df-a8b6-9dd999de832f", "sighting--f401b731-5124-4750-97bb-b58a61d0bac4", "sighting--47e8784e-d968-4a3e-a224-a25c84378d89", "sighting--32928a77-2daa-4d17-ab3b-1d508d39bc27", "sighting--35f445da-f03d-421a-9604-9c5ef426e63b", "sighting--ce919d0c-5a94-4f60-986a-4e10adc16078", "sighting--fde3d51a-e71e-4f43-abe6-153d9b39cc1f", "sighting--241a626f-e258-425b-a1c3-52ea7885de0c", "sighting--5ecc6415-93a7-4aae-8e90-4d005dea38d6", "sighting--3a715410-0a96-4dfa-adde-cca6aa2f7e7c", "sighting--3bc46b54-514f-4e84-9624-b9cdaaff4d00", "sighting--033ad831-7d6a-462a-a0b6-80acd40e5335", "sighting--d2ddb0d1-4789-4d11-b384-4db896be699e", "sighting--367cb678-d482-4e3f-b5e4-5b7dc3e86d2d", "sighting--41dca521-0f4a-42c9-8d8d-d414649e4b78", "sighting--616baa3d-d8c0-43a0-9dee-bc4ec77dce93", "sighting--f8d866be-3e7d-46db-b4c2-57e5286f2743", "sighting--56b146a4-414d-4afa-a615-ecddba3153f6", "sighting--522e0fbe-887b-4635-95c8-90a79a37ac7c", "sighting--55113652-fe24-4dbe-9607-42f8e9a6bae0", "sighting--ac6c94d4-928f-4adc-82ff-9c897402965e", "sighting--475d15f3-38a4-473a-bfa4-e996b21cbb93", "sighting--9276f111-6bf5-4bac-8e65-2be7efa3ee94", "sighting--14170a0f-82af-47aa-8783-daab84d5deb1", "sighting--663a5fe9-7f20-4a7c-95c5-40294498dc4c", "sighting--1d951704-dfbb-4258-bfb1-d34a27cbc444", "sighting--3faa5ae7-cf70-41dd-a9a5-991dbfc3f3bb", "sighting--291c053f-2a6c-41c5-bb68-78dc19aba018", "sighting--a12187d2-9c29-43e3-bb61-7eb7e1d0195b", "sighting--7be24d98-80b8-4525-a050-0107fb8e1027", "sighting--1d418ac0-cc76-48d0-b253-46f8c1d98a76", "sighting--4bcac957-840f-4047-9227-359bea42f454", "sighting--c2488b59-16e2-4c95-bd30-5391abfcbf93", "sighting--1502be62-1a28-4c29-8ef9-a645b2afdfe1", "sighting--13b3f9b5-3ea7-48a8-a49b-ee61331bdb11", "sighting--82d53525-67b5-49c0-aba8-388c563b101f", "sighting--e9c2f710-47ca-4dbd-a00c-10c2f1fe286e", "sighting--84f62e90-5f29-4de3-aa44-392480d193a2", "sighting--c6b695e6-f0f0-4628-8be5-fdf4d5a63cc5", "sighting--d6d7dc48-ce0c-4395-ab84-480e8e1707af", "sighting--bff7607e-c801-4b2d-b6fa-4a8a36c97a2c", "sighting--30869226-d878-4cea-95ee-adb24cb6381e", "sighting--68fd37a5-fde4-472d-95e1-4c19165506e9", "sighting--f6e57664-5e18-4aa1-bd49-4c0cad2ad7e2", "sighting--bc18b20b-a660-49e6-9523-a206cd7b7985", "sighting--ecf02a99-8cc6-4da2-a72e-19d392623518", "sighting--f02011cb-826e-4d49-8e61-cee418badabb", "sighting--2dcf01de-a6eb-494b-8451-15e993ef1c88", "sighting--27de70bf-11a2-41ca-a45c-8e5f9202c3eb", "sighting--870612f6-defe-4344-8d9d-aaaa6d545c4e", "sighting--00d610cf-cd13-4ccd-a663-7ccf6c0698f7", "sighting--bfa587e1-144a-48f3-ac43-0958d5d3b460", "sighting--741ff53d-c2bd-45d0-9ae7-17d7891882e5", "sighting--3ca3db10-5bb4-4a16-a23d-dfad9fa0e1a1", "sighting--2408768d-821e-4838-96ce-3bf54430db5c", "sighting--5d1f52e5-9348-4256-94c3-5c79d4b2f7c3", "sighting--713afbc1-9336-445c-9738-aa630e606fdc", "sighting--dec6f639-2209-4eab-a1b5-831942d33918", "sighting--bef4f8b8-05b3-4a9e-b109-eec49d040038", "sighting--1f1a990a-b27c-4369-9598-d83133ce3ac9", "sighting--16775ca1-2562-4099-b1da-4d9e33b9d525", "sighting--24faca6d-7824-4798-969e-6e56bd8d0d83", "sighting--5eaf83c3-aedd-483c-a5a5-565a0d5883fc", "sighting--27d9d98d-91bb-4fce-a7f0-cbabf9d0e8c0", "sighting--3c4a82de-4870-4f72-a56b-27c51f7fe708", "sighting--74cbb1c3-2cfd-42d0-8ae5-b6b97740d260", "sighting--b72d09a0-f3c6-440c-888f-e6a1d0bd5b76", "sighting--3215f87f-c0de-426a-82ee-d6479dc11a12", "sighting--959a33da-5a4e-44bc-b6d4-b439ba1efe81", "sighting--c16ddbdb-b7d8-4693-afd4-cf9d5db97e1b", "sighting--29d5e183-58dd-4e3b-9d34-9736a49b0801", "sighting--272c7827-d94d-43b6-89cb-b9fd71c409d6", "sighting--3bdde28d-1cb0-4528-8590-e474c87df787", "sighting--5a45acee-c4f7-46b7-b0af-01a0a4633775", "sighting--cdce34b0-730e-4de3-a79e-ce786e09f48c", "sighting--d224d1bf-b525-4c82-8d89-d9b84c4ca76c", "sighting--4fe6e54a-df61-4bc8-aae1-1b1541e43bf0", "sighting--ec70e8f6-42c5-4425-8475-ae2bbeb7061d", "sighting--b7afa933-346d-4f9b-80e1-1f76ec0328cd", "sighting--a6ffebf4-3b71-4e4d-95f5-021ae6979714", "sighting--6b1d9427-d406-43ea-a177-d60a41010bc0", "sighting--86bd5dbe-b74c-44a8-9a6c-0aa998344f23", "sighting--a02393c2-d9cc-4ea5-9d94-43ad74861def", "sighting--08e85b9f-d861-4c53-87f0-f455f109d792", "sighting--95fe11a1-3809-4b67-862c-a381eb31418f", "sighting--b3c53f36-65af-40c9-aa57-7e4188eb11d2", "sighting--ade6427a-2694-4ab1-a5ac-8fed3be2a41c", "sighting--ef126393-9916-421b-804c-4ba5015bc1a9", "sighting--5ccb787b-3dbe-4bdb-9c65-94c376a0f223", "sighting--5b32ad00-b185-4d18-8ed2-ffb52fbd2197", "sighting--632bb306-8e50-433d-9311-8e6f80915ea1", "sighting--aa2cb82c-60bb-4cd3-804d-722026415ef5", "sighting--0bcbc146-302e-436e-a440-8d61a388ccd5", "sighting--c7ca5fea-75b6-46cb-abad-f498e80467d1", "sighting--15916e91-61e9-4e0d-b59d-e0d81965e984", "sighting--a364da49-62c3-413f-9285-b4c2a49c18b2", "sighting--0aaca414-01ec-416c-a47b-9143208b9c25", "sighting--90e04939-397d-401b-b836-c43fda664b0f", "sighting--30410a7a-0e0a-40d0-977e-e1e65fac6d0a", "sighting--ca927e22-e1e4-4600-afb9-263a3dec7246", "sighting--4e8255b7-1e3f-47c6-b087-44658bf99228", "sighting--5295ce9d-b611-47bf-b2b0-e794d4ac6cfb", "sighting--7b695ba9-421c-4c83-8c0d-8a9141fef057", "sighting--02a6e111-87f6-4213-b514-e84787efcf8c", "sighting--0c81b27a-71bf-47f8-a1ea-395fee56ebe7", "sighting--cace1713-9870-4238-8cc7-1786dfd442e6", "sighting--93ff9447-1091-4f07-b724-0f8619199d59", "sighting--4efbc3fa-da1d-4c06-a133-cb8c476c4c08", "sighting--f7a6a378-261d-4bc6-9909-44d708fd0e96", "sighting--d9772490-f090-48fa-977c-2b8b9f6aae0c", "sighting--f5fa1c69-8cea-429b-aa7d-0ce0bef99bed", "sighting--cfc283e1-04be-4775-8343-5a7e0d00de79", "sighting--d9ccc512-0c9a-413c-992a-67258be38ecf", "sighting--5da066bf-733c-4120-8f8a-659629c4ee41", "sighting--0b107263-9441-4502-881e-ef813e72d462", "sighting--303f54cf-35fa-48cb-8d87-f199082d2ad5", "sighting--76b6ec6d-4d4d-4488-beb4-79d9338fa8ae", "sighting--3f6d7a94-2877-42b0-9532-dfa2786af258", "sighting--6512c54f-ebcf-4671-a854-acec22c617b9", "sighting--11266af2-9e71-4d0b-8ce3-ebb8d554e552", "sighting--a7807937-8499-4f49-b106-763708659885", "sighting--21d8e92b-b173-4739-9d66-2a1077c235c1", "sighting--c3b728ba-bb59-45a7-994e-b27485b317c3", "sighting--a8d7068a-5af6-40da-bcb3-d0ffd9b92309", "sighting--2c37512f-4b3d-4325-9d78-9851c2381512", "sighting--67be2bb0-abc4-44e1-ab9e-f553bfd5da3d", "sighting--fee7d595-4798-4d13-9661-04c1285c100d", "sighting--32f1ea44-c3d0-4dd0-a796-e9532ddcdf20", "sighting--7d466dd8-2f49-4a05-b3ba-65f7d561fded", "sighting--2ccd5f1e-67bf-4ee2-8348-d9daf672a92e", "sighting--8bbca8a9-ff4b-4d90-a357-fa3115b3a683", "sighting--838e5516-aa24-4ff1-b63e-76adcf994446", "sighting--a1b519af-302a-43b5-b910-e2a6b448578a", "sighting--ef1f45ac-a6d6-4f9c-b337-7fa63ec6467e", "sighting--ae7f9d0e-5f60-4c95-9267-6ea84734eacd", "sighting--079f3a9b-e312-4f05-a5dd-d597afade625", "sighting--0ba471aa-ab10-4d76-ae3f-15af2afe3193", "sighting--e7170939-63ec-4596-a859-5bd488b15a56", "sighting--73d7e5a7-c52e-4759-b8c7-dd82f849ef1b", "sighting--52381719-ac26-4481-b1e4-f113ada50d6f", "sighting--57e6fab3-702a-4021-b841-a0c4ae54d65c", "sighting--d25c7e49-485a-4a32-ba59-9721568b9433", "sighting--a9d94cc4-9b18-4591-b4bf-302d062b7aa9", "sighting--be25ca70-f669-4f19-b10f-5d21a5672d9e", "sighting--16abb212-b363-41cd-b8ee-42c94a32d25d", "sighting--15a4aeb3-1100-4345-8097-42306cb372bd", "sighting--87e155f1-1c31-411a-8ad0-31a4429070a8", "sighting--906860a8-6bbb-451b-9365-1946ed8f5b1a", "sighting--3470c9f0-1b85-4470-b0a3-f6b16c92769b", "sighting--5eb5e298-ab3e-466b-a83b-3fa800f0c5df", "sighting--643a915f-1dd1-4c81-97b4-fdc3bfd1ddc6", "sighting--bcbbd6ee-2af4-4154-a274-04c8616264ec", "sighting--136ec0ea-45af-480c-81b1-e188f50d7cf4", "sighting--de2e0088-c119-44bb-838d-2291ae9f1b7d", "sighting--1acfb4f9-939f-4a18-8b77-d9bc5d0ee310", "sighting--c074c642-7238-447d-a67d-82b08038631c", "sighting--b0a5abff-c964-49dc-9085-d8401b4a7387", "sighting--1021bc7a-727e-4657-936a-dd001045957f", "sighting--edee36aa-0f39-40dc-a8b5-c8f2fd91d393", "sighting--892a7e23-6c83-45a2-ac93-f5c1974240d6", "sighting--eb573757-7dca-428d-bfca-b1600f8be68e", "sighting--dcdf113b-c774-4153-a4cc-c6029aa4415c", "sighting--a8350764-408e-48cb-bb20-e83052be18d9", "sighting--6db62af8-174d-4413-b117-3e7c333fb32e", "sighting--2c3fd1e7-2f17-4d29-b5cf-9d4e512a77a5", "sighting--094bc069-6586-4758-967b-828925cfc481", "sighting--74757a45-4e1f-4529-b083-8be39e3fc452", "sighting--72c4268f-7c7e-4bcb-96c8-13fde21401b6", "sighting--f76522b9-ed75-4a60-87f5-4b2222ce3e28", "sighting--42a8766b-3fa2-4c4c-b6d6-ca20c2720b4b", "sighting--72a80d72-9bd1-4d45-82b3-144affdd3fd6", "sighting--a4559719-0e28-459c-83d1-f6e261d438b6", "sighting--602a02b7-1626-41ac-b0d9-b74cb4d5ebc2", "sighting--88026bbf-8ae0-4769-86bd-a2eeaacb823d", "sighting--ccf38d21-768f-4fa4-919a-bed44950f4ed", "sighting--9cc6fa08-f7c0-4e55-b837-ad5f015488cb", "sighting--0426e905-a272-498d-9d0a-6d53b5254e20", "sighting--1702e24e-0f00-4b8c-a754-bfa2a92fdeb8", "sighting--1e285546-154b-4eed-8d6e-67516190c87e", "sighting--a4b49ec0-1a61-416d-ab97-6ae932cbb774", "sighting--08095027-b4ae-4121-97a4-0453e4844ee7", "sighting--2d369d6f-159c-4973-bd26-1d2747674766", "sighting--8612316f-5f8c-4141-bd04-7ec1d7558dff", "sighting--41048216-f064-4eff-a7bc-0847bc045602", "sighting--ea8d4d1d-56b8-4f7b-a6d4-d4731ff1d01b", "sighting--e239a293-7d61-490f-92e9-6474ac510579", "sighting--c932ade0-babb-4566-a5a6-0746a7646d72", "sighting--d36a35ee-0ae2-414e-b4aa-a4a0e30cbb17", "sighting--34db778d-c727-47c8-935e-93fc12856ca5", "sighting--2054999e-85ff-4618-9509-7d531c128b8e", "sighting--3eaf53d9-e81e-47e8-ac39-b877fc66a448", "sighting--adc93138-e816-4d06-bafb-d06c604ffbbf", "sighting--5e2f73ae-cdfc-4c89-962b-c1ca30199e13", "sighting--42f2f0e2-0b20-4c82-bc64-259a76e9bf29", "sighting--d36151bf-8442-48a0-ba70-ede261ea093b", "sighting--250a7533-5b62-4a0b-8e52-7d4ee6097c7d", "sighting--f71667ab-9bec-48d8-b728-a2362511c167", "sighting--50c167ee-0aa2-48a8-878d-41770ec8c74c", "sighting--d4b11051-42c7-40b3-be4e-9372372a7bda", "sighting--0cd23950-3e8a-4a35-b0f8-6b77e527bc1e", "sighting--df8a27e7-5b6e-429f-bf19-6d7f2be140ef", "sighting--48f156d4-901d-4312-80b9-04b1044b611b", "sighting--019ff640-99bb-49c9-ba9f-5ee49bd5d24f", "sighting--b52fda67-99e2-4294-96b2-29d9163eb195", "sighting--ee47f77b-2cbb-41e3-be3a-f6b69e5d5755", "sighting--1d6ab703-fec9-4917-9382-4d7db3e3538a", "sighting--5ab2e422-5186-45ea-b515-b610b6fe3012", "sighting--43f9db44-0d2a-4b6b-8e62-a2f20411d1e1", "sighting--7ed87252-47ed-4845-af33-c0492a6da923", "sighting--dde99902-1de3-4ff3-ad70-55ef28235e65", "sighting--dc854cd7-4b87-4a72-a6fd-106432472692", "sighting--afc121ff-9382-41e3-bdd9-2b8883834dc8", "sighting--1a6a7213-6a1a-4c3c-b50c-f7f1c32d96c5", "sighting--45dbc056-c405-4e05-9d15-c447efb682eb", "sighting--cd463a8a-ecb0-4f19-8f19-c7423227dea0", "sighting--e7d2d83c-8fa6-459a-a83f-ddc85248a107", "sighting--7fa7eff9-8986-4d8e-9fac-ffa98a9b0cfd", "sighting--0bb79168-035f-4ecf-8dd5-3efc226acd7c", "sighting--0cee8daa-6c59-4b16-b509-d729283456eb", "sighting--c2807a71-2422-4b49-ae3b-ed3dd7d25c9e", "sighting--cffeada6-8dc8-4f14-9ac6-fe5df4e3d7c1", "sighting--70220727-a7a8-430b-8af5-e80bcf99ea4d", "sighting--523b8d20-5395-42e5-a1fa-69eefb436726", "sighting--54a4f8e1-6df0-404a-9a30-9b10301838c1", "sighting--7cd11c22-9567-44ba-aba7-6c0ce225137a", "sighting--1cf3fe13-0ff0-43f7-9cd9-4cd721af7647", "sighting--7eee01f4-ca11-49fc-a13c-81165267b9d7", "sighting--27455566-2730-476b-8455-7845bd0db379", "sighting--0a6fa519-9ebb-4133-af85-d0e7f6cc9ef4", "sighting--0c067c5a-d58a-4e09-91dc-7d6f238eda3c", "sighting--f26ba612-a530-4a59-9a1e-fb7440d059ea", "sighting--86e9fb80-747b-4c7c-aa4f-99faa125a1ba", "sighting--581e8a3b-4559-41b4-bc8e-96be023d4b53", "sighting--5f849882-7f19-4eeb-a99a-c00b73073f7b", "sighting--ff544d8f-bd3f-4548-b11c-2ccb19777977", "sighting--29caa5ed-0cb6-4da2-b533-04fc0d479f8c", "sighting--820d66d1-4894-44ae-867b-e664972ca6f2", "sighting--6ddb33fc-4b67-48b3-8f5b-43ad1423647c", "sighting--079153da-12aa-4a9f-a311-ca77faf9bb60", "sighting--5bcb0dc4-88f6-496f-ba63-bec38631ee32", "sighting--cd088aec-d425-4848-bb1e-f731c64e15de", "sighting--d88f724a-d8a8-4278-b24c-bed62ecba68c", "sighting--58c891d3-7b60-4d5a-9db7-c6f7e4c6bfb6", "sighting--4a15cb6d-bce2-4cf6-ae7e-7a8b043d7d27", "sighting--5beab59b-7517-46e7-8072-682367c429f4", "sighting--c39ea66d-c031-4d53-814a-edfb14629e1f", "sighting--f98639be-3e93-4a0c-ae5e-2a04749ebf66", "sighting--159b7c92-44b1-4460-9358-10b3fae3415d", "sighting--012395fe-cbef-447a-ac3a-e97dda6ebd15", "sighting--f882469b-ce43-4bc0-8410-f5a731bbb8ff", "sighting--59d1b0c7-26d2-4aeb-b65f-6203fe305282", "sighting--b2a49a79-2e7d-4778-bbd7-0b616927e260", "sighting--bb534c5a-06d7-455a-9b69-130cd1a1d1a8", "sighting--4bb55694-f0c4-47b1-8913-ed77df57550f", "sighting--9c526fd9-962e-4e9a-ab91-3e1c7fc4692d", "sighting--88b365d0-0b6a-4cfa-99ef-b4a9be097da1", "sighting--ee309eb7-4ad3-4eba-9f27-01a17b34671a", "sighting--ad41bd3a-796a-4c40-af3e-ff6b66f9ffcd", "sighting--ca572ff5-51dc-4508-941c-f7a5e2874457", "sighting--e517b22a-b961-4026-877b-1436a663539f", "sighting--7dea1715-8290-401d-8b10-fe7d012885ee", "sighting--18417892-427a-44ec-88fb-84be25eb2b81", "sighting--9c671db7-7e8c-4f56-a7ba-5555ec0f1c4b", "sighting--a18daf3b-c05e-45f7-a6c7-523fcd5ee3eb", "sighting--f5d06989-0873-4e0c-ab67-115c29b131fd", "sighting--1e86dfff-fe47-4554-9f44-2b3c4c0b00f2", "sighting--723559fb-c69d-42c1-8c21-1121f8fa755a", "sighting--d4ab75c3-28ad-4082-b5da-004efd82d13f", "sighting--d8e71e3f-d16b-4438-adbc-454b53c41000", "sighting--4ec4807e-6775-425f-a000-e08dcc198456", "sighting--256b0ab6-25e0-4d74-8c63-8277a44008b0", "sighting--f4effc1e-5915-405a-8102-9500706be1d3", "sighting--86c31c03-7921-4224-9c48-383c5a1b4b62", "sighting--be4a4e18-c279-4e51-bb37-b9ce2db36918", "sighting--fbf3b046-301d-4563-ad96-2fda159c94f1", "sighting--c02567dd-f92e-496b-8372-e349b845e557", "sighting--5f1fcdfd-ca0a-4c70-aec7-523d418ab9a5", "sighting--124a45b1-8540-486a-9615-962cc80956ca", "sighting--ab145e40-3a92-4b66-bfa9-61e18c143d45", "sighting--847df475-91a6-4fed-9417-f3130fa118eb", "sighting--0b62137b-35ec-40a4-822f-d8f19a7acc56", "sighting--488747ca-ce11-4015-b5e0-8bb5ab0ca8fd", "sighting--a956c9fb-83ad-4c11-a231-5dcd4ce9e680", "sighting--b3dcfada-edf4-4e62-a83f-3cc319fb6c7c", "sighting--e378810e-e3db-4fc0-8f61-f91a6b7b6f9d", "sighting--02b58ba5-5e38-40d8-b800-2444ab500cc4", "sighting--45741e30-35ac-4696-8193-95e640a511d6", "sighting--358c998f-3c58-407b-ae4c-3a9ea47f634d", "sighting--d292bed0-4b78-4f43-98dc-3912a295056d", "sighting--4d8cac2e-0ba6-4328-b91a-98704012d5bd", "sighting--a0bca237-808c-4331-b6ae-f0db89f2b652", "sighting--98e3ffb1-5d53-4a87-8ade-5aa107dc44d2", "sighting--e326c395-1f0f-4658-882a-db974d7855de", "sighting--52bd5e23-0f81-438b-a775-6e5ae7aab2ed", "sighting--36f2ae27-b1aa-4cd0-bcab-5dc5d8f9fe37", "sighting--794aa522-e1ad-42f2-aa25-6d64fea22dff", "sighting--21b9f6c8-22bc-4965-ad99-737e9c2882c5", "sighting--6d759f43-e3f2-44ef-b48e-0aaff9bed184", "sighting--6a48e3ee-ecc5-467f-9abc-8be41e58bb73", "sighting--fd166cd9-a658-47f7-924c-f2103537cfdd", "sighting--7ff55364-c636-4c6e-8c6d-57b214bc2c01", "sighting--64a8493f-9884-4554-9ac7-c233509d9635", "sighting--f3ea98f3-6434-4a27-bf4e-b64cd867edb8", "sighting--6c4aa013-1750-4f3b-9898-fec762fb82e4", "sighting--dfa1a370-03bb-4eae-8dcc-40c3ad64a9cf", "sighting--bfd15f78-9023-4440-afce-99593379e894", "sighting--260b48ae-ac95-4911-a0eb-9cda887f57b7", "sighting--422ed5e5-8da8-49e1-83b3-056c56deb741", "sighting--11f183a4-0cd6-4bac-9006-87b1cc414419", "sighting--a0d0be44-aad2-49e7-8451-c4ec76837cfe", "sighting--1dd16565-cee3-4175-a06b-c256043a3d94", "sighting--eb5a2833-07ee-46d8-87c1-d1d459d44f46", "sighting--23a2d4d4-f631-424f-bc41-039835dc154d", "sighting--72107b98-0a09-4b1f-ac79-2070c545cb17", "sighting--f6c63976-4b88-42c2-814b-92a410225988", "sighting--b6717fa9-fa21-474e-aaca-3e7a15672a19", "sighting--2b1a2b68-5100-4e95-9a13-3ecf0f9c1bad", "sighting--dd281f33-ae80-43dc-a05a-544ae8022b63", "sighting--417d09be-5e2c-44b3-855d-036e984930de", "sighting--2124af5b-b45e-48df-b5ae-6ef7464b4682", "sighting--8fe2d12d-97ba-4a36-948e-7f905c7d7036", "sighting--e6a13c5c-0e5d-469d-8821-b92ad1558a2c", "sighting--9e052bb7-fcd2-409d-8c39-3b451ae51822", "sighting--a3b57cdb-487a-436a-8caf-f531f59c4ab2", "sighting--27f7464f-56df-4b88-b37b-f91369a3f21c", "sighting--6f7e37a7-89f1-4c76-b5a0-d83d20347e46", "sighting--a595be0e-bb22-49f2-be05-f0beac446cf4", "sighting--3e047143-2440-4c04-88d5-491ed9673a7f", "sighting--e82e8ae4-aab3-451c-b5cb-9a0f33927749", "sighting--bd64a04c-39d6-4a15-94e7-192c1be55143", "sighting--b31ba73a-7788-4083-a5d7-00c84ba2c8f8", "sighting--96c096b2-7fc3-4616-9a64-eeba9c820327", "sighting--e120d8e2-70a5-4204-ac64-80100a46a648", "sighting--3e393946-9754-437b-bd88-1109b1e84478", "sighting--28c2e365-04a2-4dee-a028-78658c43b56e", "sighting--efc1bb43-941c-402c-b7c3-e9166556d773", "sighting--c37e90a6-afa6-4698-8540-141a4ef79e3d", "sighting--982eea41-5fb7-42c9-ab52-1807a2548612", "sighting--3232d1ce-eaf1-484f-bf9c-af0e0c6aeaf0", "sighting--43ccb410-8f06-4c34-85b8-51e61b06a920", "sighting--c83bf4ed-8770-4c51-b8cc-8e1f10997f43", "sighting--8e0f370e-1778-49c8-93e4-43d2cc0f7f57", "sighting--25bf1f60-18bb-496f-9485-04112dea1327", "sighting--417f63c0-d7a7-40e5-a1b6-04d233db6449", "sighting--5803bc6c-47f5-4372-bbab-a396bbb934ea", "sighting--c89841f5-12bc-483c-83df-d7531913f3aa", "sighting--234af59b-3a03-4fbf-bdb9-0d0dba59271b", "sighting--3413a416-0584-45b6-946e-b7a880bb2c30", "sighting--992a7c9b-0042-4085-99ef-05ad87fa4ce1", "sighting--59c0b361-2d28-481e-a88e-1d491fc42899", "sighting--5c1ad573-6a2d-4619-a413-151b03c373fc", "sighting--a5cdfe2d-ffa0-4616-aed6-5857db7409c0", "sighting--f00a6b44-3d54-4d24-8fdc-b998487b5442", "sighting--804dd2e9-3bb3-4fc3-ad24-965afff90e4c", "sighting--25609956-0cc1-4b8b-b1d0-cc72cfd6b90a", "sighting--9a5ddc7b-2788-48be-bfb5-4c147f4c8c0c", "sighting--3b283900-a72b-4c6e-8b73-0d74a4ce3140", "sighting--8f00f1a7-171a-4197-9a2b-830eea203287", "sighting--0fbc9a86-17e1-4c91-8528-3de234dd5852", "sighting--c3626f29-3718-4f80-bf7e-f7078e6dc0a5", "sighting--98004236-ad15-4249-bfb8-7311c5022795", "sighting--2fd63a61-d5e2-4c99-b384-a5e53ddcc72d", "sighting--8736cc67-27a7-49be-b7ad-2839294d4df7", "sighting--46822c86-ea4d-46dd-8f1c-30075b70c550", "sighting--149dbc6f-3d95-4375-87c9-5dd3edceda09", "sighting--d4608e21-65b0-4e53-9f56-9f974411eb7a", "sighting--370e0003-f259-483f-a0cf-4ad6032b2773", "sighting--dedde3d5-614a-4df1-ba18-420b0f2968cf", "sighting--ff596c7d-2be1-47a6-8e06-b4a9646056f4", "sighting--2bad1b72-4732-4be2-8e2e-a2781a0b7088", "sighting--8bbc925d-1180-4ffc-92eb-2477bfd33c96", "sighting--8dd40c47-860a-451d-88f5-46470fce058e", "sighting--73d73997-7c66-463a-bb69-d909d30d91fa", "sighting--c314e269-b6ae-4ae1-8335-0ab71b1b30aa", "sighting--2c3aa4f3-9547-4822-8115-b7086d002040", "sighting--cfc15189-a180-4c1a-95e5-0148eb4961c4", "sighting--900fe214-0900-4dce-9d5d-df1c0f36570a", "sighting--eb6d8eb7-e07d-4c01-80f3-af03a22eb827", "sighting--bf2108bb-b6e7-4a4e-a31e-3177667cf804", "sighting--58bf5a1f-6304-4ebf-bbc3-39a3d24dae38", "sighting--d3fb4874-d845-4625-95b4-3b6dba3a780a", "sighting--169535a3-43c8-49df-8f4e-6aa0e39343d5", "sighting--94c7abe8-18c6-466f-93a8-61ad08c2a9ed", "sighting--6b2bb333-1af3-44a6-858a-0eecbacc49a8", "sighting--01794451-8a62-4eef-8b5c-96b659dde6e0", "sighting--2a0d29d5-5218-4d7e-8006-62d9e711afda", "sighting--72218063-5596-49b7-9b55-5a6446550bdd", "sighting--62289354-128c-4789-8124-9ba8722140d0", "sighting--da5480f6-38ea-4339-ae19-9b295dc97e4f", "sighting--4bb4c122-362b-42c1-933a-3b14b6d3a019", "sighting--d7a59dfd-fcb2-479b-8cfe-ca1f873d2112", "sighting--0426ab9b-bc22-4e95-b98a-9e886de41367", "sighting--d59171ca-caca-4997-af11-c459ebd3d9ae", "sighting--06d9b0ef-341b-466c-a932-5ae9eca9e4a2", "sighting--f479d3a0-9f4c-4bea-b8a8-9fadb7c66b76", "sighting--7d689690-96a9-4b78-a9d8-bcd973b5296b", "sighting--f82c8e91-a7d9-4c57-8c48-ed5dbe111940", "sighting--6b6e85c7-6bf9-42f1-bc67-ca92d095338e", "sighting--4002d48f-5030-49a3-928d-d1b921a11c38", "sighting--ba59fe17-57e5-4fde-a7de-2b04c073445c", "sighting--fe2f8db3-7093-49c7-9123-f63d63ba9f25", "sighting--4079484a-8ff2-4d5f-8e74-b1e599826d90", "sighting--34b2f955-b4ad-4d95-97b8-4af619d346c8", "sighting--f4334a2b-456f-4ea6-88eb-7f1e099b9b8f", "sighting--cab8ad9b-2c85-4e10-8234-97175ee3bdd6", "sighting--2cebceb4-bed9-4c10-8f78-6fbd384c5be9", "sighting--58d307fe-da67-4daf-9bcf-9c3a973b036e", "sighting--e55a4bf7-f289-401c-8964-08609603c78d", "sighting--b338e086-05ea-4e33-bc1c-2717915fa3f7", "sighting--53d852e1-42c8-4cab-9f3d-773c95cbbc62", "sighting--f275b2d9-fc6d-4294-98d5-175d286a3018", "sighting--e2b18381-1473-4bba-bb33-866d5a81d464", "sighting--9ef6f82b-d407-40b0-bce9-71993fbea7fb", "sighting--35ec2ce4-ffc2-44ec-99a6-f9157500642a", "sighting--32f3000e-06d0-41fc-bf06-4341a8c2a66d", "sighting--d65a9eb4-3dc0-4b69-80b2-0944f1c3e9f2", "sighting--4ef2f1b4-9577-4d37-a3a6-56d058b14083", "sighting--a65936e4-5dad-4350-a0fe-2c9c5d639234", "sighting--11381da4-d131-40a3-953b-8c0c1d9861e8", "sighting--64674678-7250-4770-814e-7a26c2890a04", "sighting--5b8c0ec0-eed1-42fb-916d-e61fb058d970", "sighting--5874881c-f4d6-442d-807a-992f6dd7aa2a", "sighting--55072687-01a4-427c-8b7c-dfb165611d4a", "sighting--5c4b7151-e833-4659-a47a-7a43eb30d78e", "sighting--edf7275b-19f4-45dd-b080-99ff950a1704", "sighting--bfc82641-b4db-456c-a3db-4971d760667e", "sighting--127f2b57-ead5-43b3-9ee5-bbe18a0d8d37", "sighting--14549eea-8af9-4deb-9edb-98d55eb91d0c", "sighting--2affd53d-9569-4975-bcc2-551fcf85b602", "sighting--a750d643-888e-473d-8e38-0c85c55ce993", "sighting--1d719f70-0a73-48fe-8cbf-ac71026bb4f1", "sighting--056b521f-6768-4822-a7b0-a814744f55a9", "sighting--1dce795d-fea7-4e6e-9508-3b0e573a96d1", "sighting--c8dc031f-558a-49e9-806a-331945a1f82a", "sighting--d00704e8-06d9-422a-b9c3-111e39aae9b2", "sighting--a4967f5f-483a-43db-813b-58d91b4ee2e5", "sighting--da15f8e3-54d6-48f7-9d4c-00ca5fdd3dea", "sighting--0d6ac77a-fb66-4e95-82ce-4e544b90b15c", "sighting--b4bdfa3f-c8ef-4909-b763-56b6cf73bbf5", "sighting--340788a9-1714-4651-be19-9b90f10847f2", "sighting--bb11741c-6b3e-43ea-a15f-917d1b08fe7d", "sighting--3a63aeb0-31c3-4721-95e8-348a0a6926c3", "sighting--559a8e28-653d-4385-8ca8-fea73d32689a", "sighting--5a5b58db-2765-42e0-81d2-9e8a873ee4d0", "sighting--b589d8a6-ca05-4305-93b0-bbabc8a6f0a0", "sighting--e41371da-35e9-41d3-9abc-6c410d7fc581", "sighting--1fd454a2-feff-42fa-9603-1dc24ac025b8", "sighting--4e25145f-def7-4609-82d6-99e61a5dce85", "sighting--085fe710-1e71-4d35-a12f-eac757e72781", "sighting--38b840d2-8f56-4dd5-8841-bb4bf43ab256", "sighting--5e9d8dc4-97cb-4c3e-a571-7560229e43a6", "sighting--1bfac3cf-8187-4972-93a6-9c6311fad816", "sighting--0a9138c5-f0d9-4079-ab40-dd38006e2889", "sighting--ef2142ae-ffc9-47c0-9d39-58872cac13fa", "sighting--065d07d4-c2f9-4f44-860c-59331f982b02", "sighting--8429af1e-f209-46c4-88f6-5947ce2be0e9", "sighting--77aee3d0-4854-4c79-a944-ac624d6d9715", "sighting--96afcb81-a02b-4885-9140-097c280a2419", "sighting--1326ae4f-916d-45ff-a14c-9b22a1fb0602", "sighting--6c78e866-4979-4fd0-8fd0-50462584b684", "sighting--0cf73596-d1a7-4056-8a85-43ffd4bae7a6", "sighting--fe381c28-14a9-4df4-97da-88051f4be21a", "sighting--5a0087d7-8404-41e0-892c-ac04a352b75e", "sighting--1b1df78e-0f24-49a0-af7c-ee392ec62e58", "sighting--c4251561-4614-4bbf-8844-9fc2c593dac8", "sighting--e9c66244-0206-4c24-8f98-83812caa86dd", "sighting--b6935edb-181f-4a8e-ad2b-2d6768d63b4c", "sighting--661ab954-eeb6-45cd-9e24-66567bdfbec1", "sighting--0115b443-8838-4015-9e38-a267f2cf92ca", "sighting--c0f30190-456c-4fcd-9a43-b6bc7d31d0f7", "sighting--0d582f78-b793-48ae-adb9-e0888458e18d", "sighting--4b6a2d5f-2b53-4329-86a0-63fc6db64edc", "sighting--9a23efbb-3798-41a5-a79a-351f3a314c8f", "sighting--d4309405-4814-4f03-b714-c407e8534840", "sighting--086a3617-2467-4493-8527-8e8f9fd19dd2", "sighting--1f5dcf1d-e9e4-4c68-91e6-3b3f654ee254", "sighting--bb88563f-1040-4ae6-bb7a-6cdbd03ed4d3", "sighting--359754e5-f077-4c5d-bd8f-2c092899b81f", "sighting--e5e37665-521a-48aa-96b0-b9496837162a", "sighting--9abf1f2e-f72e-4ddb-8cbe-0d401b526098", "sighting--ef7ccd07-91f0-454d-a0a8-eaaabb41072f", "sighting--a084d1c7-405e-4acf-bbd9-d944fcef48dd", "sighting--d40868a1-db79-4cf5-8df2-f8b71d017814", "sighting--15a774ca-4f54-41eb-825d-0ba817423233", "sighting--35f7f5e9-bb64-4daf-a19f-35826f5bfc73", "sighting--b2ca9fe8-d73c-4e22-bfd2-e318a5bf4efc", "sighting--6f56194f-b24b-4f70-8fae-194758b58cf9", "sighting--e8bbe6aa-6966-47e7-a63e-f09ac7143714", "sighting--5ff91ef0-3d6a-4d11-bf69-f2640fb79dee", "sighting--b30aa48f-ba11-477d-b0ed-db0a71259ada", "sighting--549a8a75-880e-40da-ba09-832cc63a1786", "sighting--18922e95-6f60-4bb4-9690-041111e32282", "sighting--237cae54-3c1e-4677-bf9a-06ecddee6e73", "sighting--369b4540-c657-40cd-8f50-e30dbb141c14", "sighting--33178235-5b92-414c-bc12-bce0ea16cc58", "sighting--8d7f105c-a78d-45ee-a6fe-49729bac31a4", "sighting--86e25937-4483-4cea-a4d8-134a2f81f498", "sighting--db3df15c-730e-49a4-9407-6f6ca7c51830", "sighting--2e4f132a-92d0-48dd-8c33-4e80bbc22225", "sighting--89a3ec73-3b42-48b3-99d2-2f5b4c3db23c", "sighting--1cd4c47c-b992-4d88-a912-29c4025a8e6c", "sighting--4a6ccb21-cbbb-4015-b6cd-75e23489fdee", "sighting--b3befcbe-78a2-4f8c-ac9e-9c2b35d62330", "sighting--c78b4ff1-696f-49c3-b9aa-254de2b9d21c", "sighting--99e52f2a-085e-4460-b29f-345a810f5412", "sighting--d2eb622c-fd1b-4c10-85f3-b0524f19236c", "sighting--ccf978d0-0789-4023-8b4d-632951d0449c", "sighting--f0b707d9-4f46-484e-af4d-fcc37f19e78b", "sighting--ac939533-34fe-4dbd-9cc4-93a1f9b028c4", "sighting--300b9816-df46-4596-ab02-678f7cf57b0c", "sighting--a91ab750-9465-46b5-9d1b-c079910496c3", "sighting--c5cd7cc4-7200-4322-b822-e448f3d2b837", "sighting--cf7b18b3-8313-483a-b7af-ae49db1a8f6c", "sighting--085b9ac5-6910-4306-aeb8-0d640b55ae62", "sighting--f9dabefa-331a-414a-9cac-383464611377", "sighting--2dfe1fc3-52c7-4d1d-9247-72095f5db7f7", "sighting--414aa3b7-4649-4849-bf19-d34eb36f269b", "sighting--187c0a14-7d22-48d8-9580-922b7c1dbea7", "sighting--3c752654-2b33-43db-a811-cc88238875db", "sighting--ff335283-ded5-48f8-94d0-e8380e8d1c40", "sighting--18c19224-fa25-49f4-8577-2427f89d5894", "sighting--2a83de1d-68ab-4a7a-8e41-d860604d37b7", "sighting--bcabc9db-8c6d-4c89-8565-26a130e7505d", "sighting--386c85de-f2ed-4fb0-9840-b468889f7972", "sighting--de2a45b5-9f12-4ce1-802d-d95e2c71da31", "sighting--f2034c5f-e267-4828-8c25-7a798ec91a08", "sighting--60591349-e4b5-454e-8f23-b06e0aad7ec1", "sighting--7028aee4-4c21-4d58-87b7-5b626e508d1a", "sighting--98e82075-4be3-437f-bdd2-fb10310c1012", "sighting--ca1b7ed5-387a-4184-bc36-46b159550ab5", "sighting--24e504af-fd3b-4200-8c19-a6b0fa943c24", "sighting--b66a5516-8a8b-4d7a-8caa-230170ac9daf", "sighting--515e4258-a239-475d-a456-df92e37067ff", "sighting--8008715c-0a94-4f54-8a06-b6725915bfe4", "sighting--fdfd936e-3c9a-4d37-8dfd-226c71d5303a", "sighting--3afced80-b368-4d33-ab6d-ab6d4716979b", "sighting--da334362-fdc5-4040-9fa7-7e3f52a372a9", "sighting--5e096cb6-627c-41da-add9-bccdcc8bc7e1", "sighting--b8e12b30-9d01-4221-a86b-868a0100256f", "sighting--491654b7-08d5-461e-a358-d029be47cd68", "sighting--2d181cd5-9258-49e6-b983-81a5f177c993", "sighting--220d2c20-3a66-4ca1-8509-73d95eb590e8", "sighting--7868c8a4-e7b1-4998-a917-49e74101e989", "sighting--70765bfb-c957-4f6f-93f5-ed14b093786b", "sighting--4fa2d7f8-0611-41a6-bcce-4a834d4cdb0a", "sighting--36371125-c675-46eb-a5bb-e186de41dbe8", "sighting--15ff44d3-2797-478d-a518-dcc956a4e52f", "sighting--7be0b1fd-6ec0-4104-a190-9f719020778d", "sighting--d1c57dfa-5241-4e01-b1f4-1dae8f771bd3", "sighting--7bdf47cc-f704-4a4d-8743-92d32be935e8", "sighting--3ba7a1a9-6d38-4f58-ae82-8ac2961de618", "sighting--2e1e5ddd-d536-40fd-b2be-276471516999", "sighting--d1d609de-1821-4457-95b7-acee6ec0ac34", "sighting--c8849390-7693-4562-915f-1c1823463eb0", "sighting--eb25e23d-a0d7-4aec-b395-0fd336a6fc90", "sighting--d34e07de-342c-4322-9ffa-f2eccd38d9f6", "sighting--6d819534-0fcb-47a3-9f5f-1e92da828244", "sighting--8f1d9c63-2879-4870-a97f-d47786493fcf", "sighting--83c0851e-9f8b-49d9-a9ff-da5aa1fdd0c4", "sighting--9c8f1836-2c0b-4cbb-8a63-02c3b9061abd", "sighting--af7c951b-cb4d-400c-94a0-b1df6dcbe15c", "sighting--02422469-f404-4b55-b9bd-aee4aca99c3e", "sighting--f5ea5c33-9378-4e9e-a536-64210340d183", "sighting--5435951b-67f9-4cb9-b97c-fdad80edfdca", "sighting--fced3fe7-cc6a-4f07-bbc5-65cec2fffc83", "sighting--33fc8637-be56-48e7-b400-c75176ad5672", "sighting--b7c59b21-d096-49af-a99d-550e9cc93791", "sighting--c8c12e14-54a8-43c0-8aa3-ca223cf80031", "sighting--d9a1a07b-dc48-46df-9d9a-379f384b98e2", "sighting--1aea8a4f-1869-465b-88da-992ddbc71f2d", "sighting--37854776-ded0-45fd-8b02-9ba5557ae1a9", "sighting--de8cbe2e-eca5-4ad6-b891-ebd5d08cb286", "sighting--9f2a6ffd-0739-4ed5-8c2a-1dffebd1f296", "sighting--033aa949-72df-4668-af63-836d13afe0c4", "sighting--d4a682f2-f695-4a15-8b3c-313a760e10ad", "sighting--5750550d-693c-4e7a-818a-520defb0d1dd", "sighting--3752d9c7-c2be-4b52-9653-63078c114cce", "sighting--b4b56e0e-6513-488b-85cb-a0209e7d94cb", "sighting--8a5d4e2c-f6d9-4ed3-b066-a41be3a56cd2", "sighting--b66f1f8c-d1d5-40a9-9451-5d608266aa9d", "sighting--7232be54-fc94-4fe5-a2c2-9f1232ad882e", "sighting--68695611-7f62-4b37-b001-5a769b222fdd", "sighting--4008f299-1742-4649-9565-454e64d0e138", "sighting--fdda5649-f1a7-4cc0-9278-e8b127785e0e", "sighting--0a2de911-8b92-482a-86ef-f96aa8c40712", "sighting--90308a3f-5f77-4510-8652-865fc3f3b669", "sighting--65fadc9b-8147-41e3-942b-0e47cba669bf", "sighting--d41b55ab-8bb4-4083-9702-cc321ba71b65", "sighting--65ad1a60-0fb6-4914-b654-5615acd0ac0a", "sighting--55f9862c-9d2e-4c09-b397-2dd4abe5a623", "sighting--19657c8c-371e-4662-8b0b-0bbd42c2b1cb", "sighting--5cd8f741-6e3a-4c36-86ab-2e9af83990d0", "sighting--6844e6b2-a97e-47b8-89d7-946d8c94ef8a", "sighting--e79865b9-bfff-46a1-a547-90c80f154120", "sighting--11717b19-b373-4317-8f01-5257d377feb3", "sighting--e584c847-4829-44a7-a74a-9b54f33e7ae5", "sighting--2c9595df-15ab-4a1a-9467-c965458f9e97", "sighting--b8d62be5-e06a-4d38-bbb5-0e5f177ff51d", "sighting--ddc75d49-a094-4b44-a6cd-4110da9e199e", "sighting--0333750f-05d5-4633-9d67-03b2554f7f89", "sighting--b116eb1e-04b7-46fe-9a2c-528bc06b9364", "sighting--beef8544-c1e7-417f-960c-38a42cb9bd39", "sighting--992babfd-985f-4b35-8b36-402ecf6abd16", "sighting--efd5d07d-ad66-49cb-b309-98f574df9341", "sighting--522c1142-fa3b-4008-b300-f1ad0903ade1", "sighting--a606bd6c-004c-4589-8886-218082e589cf", "sighting--d143d7cf-e8a3-42d0-9ac2-1727730f6ee1", "sighting--8cb2948a-2f79-4f71-9b61-5fe43efcc917", "sighting--686f0643-c91d-4491-9a83-692ce3668b9b", "sighting--23f8abe0-7ec9-48cd-8782-ff6f78de6dcc", "sighting--da267f33-ca65-4fe0-b43c-b034de629202", "sighting--7416b248-b21d-4892-8d8c-36152e5023bc", "sighting--4ef8c40a-0bb9-43f5-bf72-1c929bfa0495", "sighting--22845c88-6be8-4561-aaae-3801a68fb370", "sighting--de467ecc-a82d-4cc6-9e8c-a74a036b7dbd", "sighting--2893db13-b00e-4c33-ab90-922ef0b11bb4", "sighting--0c2d849d-95a9-4622-a332-58a2cfd1fc4c", "sighting--440e3a4c-0c63-41f7-8af8-4bc4c69c6cd3", "sighting--0ef85de7-d3af-4ee9-b98a-29382879bc96", "sighting--70509d19-2d06-4e77-99b3-6bc18c36d865", "sighting--882f8a05-ac6b-4ef8-b848-708724f47627", "sighting--f7904d30-c88b-48d2-8422-ee31aad21ce6", "sighting--0efc9a1a-e94f-42f6-b3ab-0564f30b1faa", "sighting--e0afc6c0-b934-4a1b-b3a5-6ec05b14164e", "sighting--5f36365a-4d7f-45b1-ba62-65972fa333eb", "sighting--edc67bc6-3013-4925-84d2-dfd802b1b962", "sighting--b6f851e6-cb10-4696-b33c-010e40e65750", "sighting--d79ef0f2-6973-42cf-8e1f-b7fb15035e7b", "sighting--b9073e08-045d-41b8-9a02-fdb001be71ba", "sighting--53cb8287-05f2-42b2-a08c-adbb103247c7", "sighting--93e9b902-5c9d-464c-a9bd-57e7a51c017e", "sighting--ab92f223-ba39-427c-84ea-88f6f4239e85", "sighting--706a1aa3-ff48-423f-8a46-959625385c58", "sighting--30d8d7cb-6149-4903-aeaa-234248dafe61", "sighting--af0a8b30-f43a-4faf-9102-3b1c6b1ca1fd", "sighting--3dcb5afe-6b8c-4769-bc11-efea12d3a5a2", "sighting--5a2430c9-ce42-45b4-ac8f-c510523e91e9", "sighting--e89c5ea1-1e78-4321-a267-6182a0d1f324", "sighting--0e70f09a-9d7a-45eb-858e-c74f14b2f841", "sighting--6b1c4a83-756c-4946-9974-cc734a245d46", "sighting--8c215778-93ca-4a10-9796-7ff557e3e596", "sighting--d7e39a8f-4ccc-4594-a563-f5ca33e96e70", "sighting--4fe77a85-816d-4b34-bd38-46bc246ed6c4", "sighting--774545d5-a2cc-402d-9a03-e7f714a8db07", "sighting--9d6d511d-4a10-41f1-8fee-4b2e37a59ec8", "sighting--1f882258-29f6-49f9-81a6-0095def84e66", "sighting--0da31caa-646e-4ac2-abee-730490a9248d", "sighting--d8cc0a29-f88b-4e1a-a57e-db7b0ade6df7", "sighting--dc6222e8-afe6-4fc2-a57b-3214ffc6b418", "sighting--ca1aba27-b5d5-4096-9d42-bb02ba6d11dd", "sighting--38f8d374-dd3d-4670-a213-ed21f2aa701f", "sighting--3fbe3afb-b4c1-45a8-a44d-65874d096b1e", "sighting--9d14a683-8125-4086-8cba-fa8275be64d4", "sighting--d9466b50-d575-4e51-9d24-e131ca907af8", "sighting--4dc39c3d-816d-49f2-839a-9f7c165abb6f", "sighting--7fd653c7-e9be-4918-b765-00e2b2aba199", "sighting--7cbbf158-c608-46a5-9a21-fd98ece56c2f", "sighting--de0007a6-f100-4ab4-b97e-d51b74ccb6e1", "sighting--8ca03e86-3e7f-4965-930b-db30839f2be7", "sighting--6848de71-9f7d-44b9-8759-e74494fcff09", "sighting--5949eb0e-0df6-4b56-9bb7-bd72adb4cab4", "sighting--cd1aecd6-f8f3-4453-b0f0-67b479376f44", "sighting--3798c0a3-dad6-4f7c-89bc-805343433258", "sighting--5e44fd4d-f1e0-4cf4-a37f-9eaca6d7ddae", "sighting--e6ceec16-69f8-4439-9aad-16e64b0cff9f", "sighting--a2ebd1b9-6c38-42bf-be06-1a14c8b752a7", "sighting--e0eea16e-1ef0-4754-a2d9-61e308e06943", "sighting--a11492af-3d09-4b4d-94f0-7f5dae5865ee", "sighting--99c83bc4-d420-4d48-9dfb-024b241bac40", "sighting--c686fa20-f645-40e3-b09f-7508c94bd4eb", "sighting--92102f15-1ae8-4a1d-a4db-ad77b42e583d", "sighting--f6d8a0ac-38ad-45b5-928f-0e7ca2b41552", "sighting--77156200-0490-4e90-97be-892ed5b2fa0e", "sighting--92597145-950e-4b32-ba62-91212f788526", "sighting--6f358710-396d-4ea1-87b2-3588813d337a", "sighting--5ca37277-e3ac-44d6-9739-fb6ff7881f7f", "sighting--0e769bdf-8460-45dd-8e37-b8654c7bf594", "sighting--7ed77b18-88d8-4faf-bcf4-b4bece5d6da9", "sighting--47a6552e-5c46-4e20-bed4-423ba9cf5c23", "sighting--04518176-c13a-4614-b5cb-7f5b0093ebd0", "sighting--653eb963-4c63-4c0d-b71a-cb467391a82d", "sighting--ff2e9a77-c813-4414-8c43-531a9aa6ec38", "sighting--2458a559-36b5-4582-9e31-4b2c4531c2a3", "sighting--5ee2fab1-6736-4d70-8aa1-9791c1122b86", "sighting--90164fa3-23e7-4cef-9b1f-90a5590b23ed", "sighting--904f9fee-3dfd-42c7-bec0-a3b6fa30d5b1", "sighting--28caa6ac-c6c8-4019-9864-7cdf802da652", "sighting--59703fc4-4b34-4011-b666-1dd1ccbfb7b4", "sighting--58ef72b6-3cff-47af-8236-eae691e677d1", "sighting--ee9e0965-5a11-4ac8-bced-d9cb524baba6", "sighting--d82d0bb0-0172-44c7-9472-ce90569f7032", "sighting--b11e37da-a092-4782-ae59-62b0f9657db1", "sighting--94a5d941-f6c1-4603-b4e2-6de1a968c571", "sighting--ff4d5975-d113-4ce6-bca3-bcf5f55ce6d6", "sighting--d85a30ff-bb52-49b0-ad29-8c9ce873550b", "sighting--af1065c3-3c0e-4043-8992-617fcfd63cec", "sighting--854c080e-6ff9-4a89-a2ce-8be86f71074d", "sighting--82d98bd1-acc2-4055-8ccf-694a1d4885e5", "sighting--10298c58-5d57-4769-8d77-ce19608558ea", "sighting--43a7b9e6-b46c-4b03-a393-948f47fb0854", "sighting--5224cd12-7ece-4158-999d-06e0730eff6d", "sighting--22fa0983-d6c0-4f31-9c49-71afbfd750dd", "sighting--c5766303-4611-4713-bab0-b3fa2bc895b4", "sighting--85c903d9-bff7-4702-8d7f-8d6e7becd485", "sighting--b2a61c83-5305-42da-9597-272e01fbd1a0", "sighting--e78377a4-6e33-4f76-a950-ac45029661e8", "sighting--90487cd4-391c-4f3a-8883-5ac36c4adfb3", "sighting--234f80f5-8ef7-495a-b165-b0e22364adb4", "sighting--70e15736-ee43-4c9f-a9e5-7ad9d7efe9db", "sighting--553c59b2-b0d1-4aca-a157-ee1c738afecd", "sighting--e08e1beb-89ee-47e9-961e-11d9e4c06ca2", "sighting--50ecdf12-c109-4f0b-a664-e1867ffedc57", "sighting--6f1a0801-a197-45cc-adc4-15434bfd64c0", "sighting--aa4abf5e-3213-48cd-999a-e9fccd97da64", "sighting--047c5be7-efeb-4cd8-bee4-215d13de3a90", "sighting--86585a56-d0df-4e4d-b8cf-eabd9edcac62", "sighting--8b62ce84-adce-4b3a-a016-1bd8adf22db1", "sighting--8955bd3a-0e8f-4619-bdd3-d7b76ba305e6", "sighting--4b57ca9f-7c0f-4bec-85b4-19095168f752", "sighting--3ec107df-1c81-4be3-93ac-eadb3e1d5719", "sighting--b56575fa-ef5c-4fcf-91aa-c6aecac030ee", "sighting--e69be127-aa10-4404-90d4-df8ba7a060e2", "sighting--43a22de7-94ef-4cf3-b548-1fa8a750f8cb", "sighting--521b7a26-162a-43ac-ae6e-30d64903ae30", "sighting--b0ab14d0-b055-422c-9ffe-7536fe92d801", "sighting--914542c5-3a60-4a4a-a3fc-312687745e25", "sighting--c830bb32-0da6-4e5c-82f7-6877fa260af3", "sighting--33b90560-6e6b-4ced-aa81-4d2775767100", "sighting--04f2c0b7-c63b-4bc4-8b92-2c5497bfe219", "sighting--0e1b8628-c818-40e4-83c0-8508442ebfdd", "sighting--1fad56c6-d047-4f82-bb18-c4dc48045a30", "sighting--ed4fb6eb-747f-428e-98c1-6f333240fe24", "sighting--8543065e-6882-485f-9fba-c8769f26529a", "sighting--e380a9af-0275-47ba-96be-3eecf7e95f17", "sighting--c41cf87f-8b99-4861-b403-e3e88a7be21c", "sighting--27d55985-c732-4265-938d-a683fec7a50f", "sighting--929e0ea6-11e2-4133-83e8-c7543df76b3e", "sighting--3c4f9377-deb1-476a-a58a-d449b5ad615e", "sighting--3990cfc9-29cd-4831-82d9-95af7f1b84ca", "sighting--b27be4b6-f082-42d2-868f-9a406e48c5bc", "sighting--693e5d51-43ed-490b-9092-ef8fe2568d11", "sighting--e72244f0-e4ef-485c-b0d1-7afbbdba5290", "sighting--8b01231d-f17a-4687-a659-2da451e0e1e9", "sighting--9cdf2b34-f273-4c00-a351-f40d5e692552", "sighting--58ab03e7-bf51-4917-9ee2-0747f8d67425", "sighting--ef88159a-b502-47f7-ad7a-57f9c2db871e", "sighting--917c3dae-6e18-432b-89c0-c33e968027e8", "sighting--db257551-f89f-475a-8710-a8383b8fe63f", "sighting--966e0870-58a8-4067-85b5-b5ec29d78f72", "sighting--b2077dad-df60-44e8-8eb9-00414d013aec", "sighting--9e1d9f10-ec6b-484a-8173-9063a76d66bb", "sighting--e920ca79-6a57-43ef-b805-37e716a7a422", "sighting--caf43bc2-4eaf-47a5-8a6b-9428b8e2d9df", "sighting--b82efb25-a80e-46f4-bfb3-a6fc33a9e202", "sighting--d88c2b5d-6146-4aa9-ad19-29c92581cf7e", "sighting--37487ee7-f4bd-4a66-9b65-8c3fbddab356", "sighting--1d6fe76e-0535-453f-ac0a-ef2df73366df", "sighting--5180a056-1b80-4e3b-a36a-bba30e14db8a", "sighting--34a9ab77-ca48-4c28-88f0-c20854857807", "sighting--0d7004d5-b10e-4395-bbf1-d24dc7dd3d12", "sighting--8bb6989b-990a-47f9-b541-ff6dff4496b7", "sighting--a9981c73-b459-4d46-99be-d4c6c91d8428", "sighting--4a98158b-da50-443f-9469-862551d49a2a", "sighting--bc9feaee-0fc4-4d1e-8637-8176b224ef8e", "sighting--e5910eab-fbfb-46df-b1c2-b7dfd52c9e39", "sighting--54184a2d-b14b-4f4e-afd6-4e6c81cad820", "sighting--f4689f02-ad44-42e6-a6c5-973619b38a17", "sighting--946f1335-880d-421c-9d28-3cba58f27795", "sighting--a803f759-676e-4023-a504-8bad781f1b2b", "sighting--06d90ae3-624d-492f-a503-d0e6f75ddd3e", "sighting--daf90365-6810-4d05-9867-e5ddb42e8dcf", "sighting--c4ef6d10-9d60-405e-9f53-66da8107f45d", "sighting--43ddca74-8333-45b1-846c-5d108ca64e06", "sighting--a1dad086-a935-4974-a9bd-83829c532986", "sighting--b3d62c22-5ef0-4217-8455-7a2f393ee7ba", "sighting--a5e28a36-25c4-4cd5-b7fc-fbee3c524634", "sighting--dcf41817-6d3f-482d-a426-935f83a940fd", "sighting--af33bb89-e257-44cf-9b81-3ad42324a438", "sighting--423a2a21-d81e-4a4a-a558-65caed7106bb", "sighting--43bf12d8-a70e-43ad-8fc6-77081105a9f9", "sighting--9053852e-2d10-4932-ade4-556aa21cec83", "sighting--6af412bd-340a-498b-9f3e-5af0186f29dd", "sighting--71570edf-fc7f-4b18-b71c-4a9269414889", "sighting--c2f9bd19-f293-4b71-831f-3f2341f4c474", "sighting--ff189e1c-5e6a-47a8-b123-c3dc81b30dd5", "sighting--7eab39e8-bffb-40a7-9b90-03f6e5b65717", "sighting--d2af85d7-c38b-45ce-8416-6594cab56f6d", "sighting--5397bacf-7d7f-46b2-a2df-dcb5e51dc38f", "sighting--090d9176-2d88-46c2-9377-7565a33d7164", "sighting--f8d79795-373c-43b0-8513-18fda9d84a04", "sighting--fa704142-c7e0-4c66-b77a-688abb717e09", "sighting--b26b741c-5bd0-4c2e-9ead-17c49d1faebd", "sighting--6b39dfc7-6561-4392-bb18-3fb6753b5386", "sighting--f4221b61-4fe2-483f-b172-00e8df7f3b24", "sighting--eb1d2a19-f1eb-45fa-9da0-bee50df4d0dc", "sighting--849d4998-2b3d-4b0c-b611-7a5c6fb824e7", "sighting--8124390f-534a-4484-a663-15360f968397", "sighting--019d81dd-e3fe-4499-81cb-df8085c6f616", "sighting--88165623-7bf0-41f7-b9f4-f71a1301c7a9", "sighting--e2456f7a-118e-46ae-a1ca-3a7b817660cc", "sighting--d5b5d184-0d2b-4474-8165-487949e044bf", "sighting--c95a43c4-f69a-4a27-9b2c-b4fd7b6d93bd", "sighting--0c0f3537-783b-4b2b-8a29-546be37052ed", "sighting--4a8b0b93-c584-49a5-b0a6-caa9a969012e", "sighting--12840776-0dd5-4e13-9c56-e5d9888b0d35", "sighting--24a9f910-ed1b-4d04-a651-c7623fc606c3", "sighting--98985dab-04fd-445a-9252-25885e3b389e", "sighting--995f8bc3-09b2-471c-b747-3c5cb2739ac1", "sighting--bbd6096a-51e6-406a-83df-ba8e90cdcc0e", "sighting--f3d57159-ecee-4d59-a16f-35b1a5ae4e41", "sighting--d3678085-6020-4936-b111-9b24a370b0d6", "sighting--455e1966-9062-4839-be14-209428c5b319", "sighting--8d35e871-a6c4-4e14-96d0-09ef2e9b6182", "sighting--32590996-72e0-4fef-8d00-b6ad589cefc6", "sighting--de3413ef-41cb-4b92-be64-47f259093325", "sighting--87d62c63-13b5-4f0b-83a1-215e1cc0e65c", "sighting--a06f09f2-ac1b-41d1-8870-d63572f69f17", "sighting--2b349cb2-8d60-46c8-8276-fa109bd97ce8", "sighting--23a33631-f7e4-4e7b-8871-b8efeed6df70", "sighting--e46ac76c-5130-4db8-b7a8-d2a162a0f832", "sighting--2b0f468e-533c-4054-9e76-efbff329be38", "sighting--683a882a-71bb-4880-a432-27c605ee617e", "sighting--d0941555-e930-497a-a5c7-8595813017f4", "sighting--36617d2f-8d40-490e-b54b-35899c78cdf2", "sighting--aa391c1f-732b-4730-a064-60cba1d2bbd8", "sighting--93be247c-7966-4518-8b9a-44c14d5791d0", "sighting--71988c41-8dfd-4a45-bd01-f1074fac89f5", "sighting--aad5ec60-ede0-4573-88c3-52891c113d47", "sighting--d700db77-f362-45f9-a040-87ad95f7b3c8", "sighting--15e7ff67-85c0-41c7-821e-723adde460e4", "sighting--50d8851b-2833-48ff-a457-9aa38130d864", "sighting--e2d335b7-e279-499b-b1a4-183e94125719", "sighting--d4cf208c-a0b1-46f8-821a-07e15ea832bd", "sighting--924f1f44-710a-4369-a70e-7539824eacf1", "sighting--88f10d58-fd8a-47be-944c-3b7c77ce226d", "sighting--2b7e9ce5-622f-4fd4-93ea-aa8f415f8dce", "sighting--78956a94-4559-4a5b-ae31-8d44ceaa8650", "sighting--07fcf10b-ed54-483e-a59c-056e0966fb99", "sighting--09387be8-d3e0-4e5f-832a-9d14c79f913a", "sighting--3196506b-d5ad-4f9d-97a5-f51d49a37a24", "sighting--2d887073-bb81-40db-ae36-f3acc325ec48", "sighting--39e19d64-2a93-46b8-ac2a-2832cbafbd1c", "sighting--2a5c1011-3136-40e9-9e71-f5d82528dfde", "sighting--307a0b26-aeb5-4366-9f55-c435297f832b", "sighting--534b02f5-5292-4501-936b-de741e24b2a0", "sighting--e13372b5-6981-410b-80f5-f233df28509b", "sighting--ea27a4ae-4f1d-4ef4-892d-d1cc259a276e", "sighting--c4fa8589-6498-4fdf-a9dd-26b8d5879d56", "sighting--7e900e7f-36ad-4f58-a6b8-4ebb8aeae2e0", "sighting--6085bca7-5069-4e66-8b4c-292ea2d82a78", "sighting--061909ba-eb75-42a3-92bc-caec07a48ac5", "sighting--02310bf9-5b54-4ceb-b403-e6a5ee9b22d4", "sighting--2ac36384-4be4-466f-a58c-a952ef677948", "sighting--aee8cc22-375d-47ce-b0de-fdc04d985a8f", "sighting--493dc287-988e-41c4-aa5a-67c1aeebf854", "sighting--155ba4d9-311f-437c-a07f-88605576f444", "sighting--fe88b983-cd3a-43f4-85f9-14f5edb532f4", "sighting--00d3683a-bc76-4a23-bf4c-1f32fe2dcce9", "sighting--f08cfaaa-9dd4-47e7-87c1-865f7a0ec2cc", "sighting--97d056d3-dc47-449f-a0f3-15fd78c3a43e", "sighting--9154a25c-ccb6-487a-bbd7-e0be5d91b626", "sighting--7007e5ec-80e5-4d05-96cc-8a853bf472b8", "sighting--9c4e587b-e9b8-46c8-8431-07c8a4840c8e", "sighting--a60b7424-fe5b-4568-83e6-1a5be41c4edd", "sighting--620ace84-ae11-4128-9dfe-d0ce042c9c8f", "sighting--daa6e1f5-c7d9-4234-afe3-457a08654ba7", "sighting--08e7ef07-0211-4928-88df-97275732744c", "sighting--82a46d9e-c741-4cfe-8763-8a88477677d5", "sighting--48f95289-4c9f-4bff-8dc6-b633f5c2710c", "sighting--b0c5037a-83e6-4003-8601-675ec52041aa", "sighting--76e14eff-9905-4c2e-9b4f-03d5a7d90549", "sighting--f3a59234-0cba-42a4-bea0-9f354be0e20b", "sighting--6b27b2bb-4c11-4086-bbb8-7c787dabc617", "sighting--494a373c-15d7-4366-8e1d-b613fc5c981d", "sighting--e9e71234-efb6-4cca-adfe-4cd713fcb8cc", "sighting--2480b2a0-fb77-4ce7-8053-7945a439abd0", "sighting--90e90b08-c5ce-4c37-9ae2-d759c7001306", "sighting--286f1ce5-b1df-4e59-945f-3b0e8c565dd2", "sighting--54f50ca0-9b08-4316-a989-c69a4a695e25", "sighting--febfebbe-8095-4e0d-ac41-06e9cfa2885a", "sighting--d093e972-5860-4f70-9835-6d14d82e90ef", "sighting--89e7d20d-3e4e-464b-97ee-6cfa4f99d66a", "sighting--d8a9031e-db15-4420-b537-bf5fbe6b2631", "sighting--96e15d52-b962-48ed-88b6-c9fc1ae429b8", "sighting--4b6e5bb0-ef4a-4861-a762-5897cc00e113", "sighting--20dc7aa7-0c40-4af2-89cf-6452e05164bf", "sighting--9264f433-1c6c-4426-90a8-4e0866f9ffe8", "sighting--dc1fd0d2-04ab-4195-9086-fa64be188419", "sighting--68fe9519-22ba-4adb-949e-d27d45dc3fd0", "sighting--6b7ca3df-9e50-48d2-b155-b953c9b45060", "sighting--18d23c34-4b7d-4438-9567-dc1fb5d76f89", "sighting--38dc5d76-5950-4a5b-bd3e-86a98315e9bd", "sighting--139f9f4a-8d07-49db-9959-9f1c20d95925", "sighting--4aefccd5-224f-4617-ad05-7e2447a11ff1", "sighting--652bff4c-9664-499a-b153-d04041917af5", "sighting--dfbec4e6-1e0a-4f4c-8628-c3578012b8aa", "sighting--6e9e8294-a9e0-4937-8ecc-22969e6e9984", "sighting--340c9c4e-0a00-4138-894e-7d8f6e3bfde2", "sighting--7cbcf915-b8da-4292-a952-eef1104ee8fb", "sighting--3955333c-9a1b-4445-ac5a-6d14bb92316b", "sighting--59a7d765-60c2-423b-8e99-5db25854e217", "sighting--4ba29e85-172a-47c3-aeec-26fd85420967", "sighting--4ad35613-9c0b-4639-bbf0-1022e312db7d", "sighting--fb354368-b620-495c-8fcf-a577bd191feb", "sighting--1a67fb14-f35b-46ae-aecd-5b38b685c93f", "sighting--8ad65433-0719-4775-a730-32ebe07acde1", "sighting--10ed85c9-b193-4173-91d7-461e71ec84d5", "sighting--edde4a1f-6bae-403d-98b7-8f231d706c86", "sighting--c1b2f140-0cd2-43fa-b036-27dc0f9389a2", "sighting--da96c31e-58c5-4b61-b876-7d4da5367ac5", "sighting--a58316dd-4924-4550-af2a-11b911fbf072", "sighting--44bbd1cc-5845-4f0a-a961-41ad7e498322", "sighting--1a1c6ecf-97cb-4c46-858d-68a5a9827a85", "sighting--f70743b6-0852-4a6b-9924-3559c5b0f012", "sighting--4cf345bd-b61c-4f67-a2e7-c5a979569ab9", "sighting--515d43e2-bf7b-4a06-8120-6d067e7be18a", "sighting--21f0fa04-aa0b-4d9b-afa0-c5c25d662620", "sighting--46637276-18cd-4fa1-9bd5-6828740dc4d3", "sighting--629a18e1-4610-40b6-8860-cc895017fb17", "sighting--165b0c11-616d-4333-a07b-fe2b24fcc09c", "sighting--6ca29a6d-e7f4-4c01-9d02-1cf5123d391f", "sighting--ba836279-1ee4-4267-a4d1-9646ba80c816", "sighting--abdb4040-bb85-4b9f-b0ef-5dc8e7f826cf", "sighting--8da8c2b8-518a-4de2-a40c-19fbb0efbde5", "sighting--176a6f12-4ad7-457b-bc56-4bbd5bfb9548", "sighting--4bff9df1-1a77-43ce-9de4-0264bafb362a", "sighting--f5760bbd-6a33-4512-9bca-c6079b4eb609", "sighting--0d77fb28-8da4-41e5-9be1-c02797f1bee0", "sighting--a0a31950-28b9-4b3d-b1bd-5f49ec73c884", "sighting--c3887008-188b-4f00-b10e-612704bc3555", "sighting--a35eef8e-aa2d-4735-8ce9-b2fbe0e07a8d", "sighting--23194638-2dfc-4845-9403-9c348d8797c6", "sighting--a66dba89-5196-45a3-b991-d8bbd88606f6", "sighting--e1e134dc-2a26-45e6-bc9f-b0946e1b95a6", "sighting--22b6f411-520e-4a1c-bb57-ffcd8d0d91ad", "sighting--9459c0d2-9da4-4efb-a8e3-58383d36b038", "sighting--8939ed01-1ca4-41b8-9880-fa742320198a", "sighting--ea8af947-9e70-465e-a638-064eb0fc29b7", "sighting--0543526d-5135-4e2c-98ba-8de6d05ad1db", "sighting--dd1e1e0d-1e74-4fcd-97ca-195cb98d8006", "sighting--19c9a7a9-70cd-43d0-a29f-4802e8ef17e7", "sighting--123258ec-1258-4c73-b10a-314396e5319f", "sighting--e5e39999-8c71-42b0-9be1-94c7802e7a88", "sighting--a78d4449-624c-4508-ad88-7c39737f1a78", "sighting--09c9c414-3fdf-4cbf-aef9-fdc24f707776", "sighting--b35b76db-1f6f-4da6-83e3-44130997c954", "sighting--8c8e5ade-5d03-4de0-a740-26607a0fd2e6", "sighting--e7c89d22-b2cc-4e44-be1e-357ae1da6ed9", "sighting--9773b49f-c5a8-4685-8bc7-585b068b1959", "sighting--440625fb-8443-4f53-af67-0d7e735ad098", "sighting--1e37cbfb-5222-4893-93a2-8eeb35d0ccc2", "sighting--1cf5d865-68aa-4077-a7c6-70aef1c99227", "sighting--0f2adea2-11da-47cb-83c9-c59e32975ddd", "sighting--2238a563-74fa-4d43-9503-d405683265db", "sighting--4eb8e9f0-1c51-495c-9c1e-9241f7ffb0be", "sighting--149d2d93-959a-4389-9dae-6445ff70371f", "sighting--602e64bd-cf2c-40bf-8e50-1f1153f400e9", "sighting--5b887ae3-0810-49d0-9483-b70026243d9c", "sighting--c7fa015e-47d8-4023-ad5b-2e216419a3d8", "sighting--fae45fd8-eddf-4afb-a68b-dcd7fc3969e7", "sighting--0861194a-5697-4257-b4b8-2208679aac15", "sighting--fd45d9c9-abde-4a8d-b16f-29d7436426a3", "sighting--73b441ef-ab3e-4a1d-8348-9a407da10c16", "sighting--68427147-db32-4173-b9db-2f42e215d274", "sighting--6d47e2ae-ac72-458e-b965-8e5d36a70d34", "sighting--a5f73ac9-8b5c-46c5-8ee8-e6a56a0f5c5f", "sighting--a603d8f9-5fd5-4b21-9570-7556c9147bde", "sighting--792f20ea-1f9d-48ac-95db-29ee7a03f104", "sighting--f7c4be00-9fec-42ec-9a73-ecda33d70b02", "sighting--05114b6e-3055-43f9-92e8-f30ac2d491e1", "sighting--04440f41-254e-4f17-93c5-e5c812dc28fe", "sighting--8e2dcb20-c6f3-4cf0-9d51-f19da180d695", "sighting--fcf9c673-1816-471b-9ce9-1ce3149e6c2f", "sighting--7b7d5ad4-4664-4bf9-bcef-a0141753dd8f", "sighting--3e5a0db3-c840-42ef-a372-8337137b3633", "sighting--93530741-20c2-45b9-99cc-433987f61e73", "sighting--6c24865a-44e7-4ebf-967e-370ff17d2cc7", "sighting--635e0c09-3693-42a2-8584-d81f6c4dd28d", "sighting--8cdb1a61-6974-47a1-bdfd-cc753a558792", "sighting--ee0b9bc4-51f5-4bda-8def-0e6f4389b2a6", "sighting--29107b52-7264-4962-88c3-4bedb627ec29", "sighting--7c8d8280-fbac-418a-bfb9-bb4bde0d7f53", "sighting--7a3bb3a7-d94c-4c9f-a457-4dbfd46f5bfb", "sighting--8d92b99d-649f-4c51-9108-ef691dd85daa", "sighting--33f22161-cdf3-4d18-814a-465b2607eec5", "sighting--94389530-d12d-4a18-90b9-f03564afc004", "sighting--48af5647-b5ab-48b3-9bc0-5435cce1363e", "sighting--dafb608e-e213-41a4-9b5d-b7b69ae03456", "sighting--b4f2a07e-5222-4d85-8f01-778654a2ebb4", "sighting--c7b54961-2905-4ec2-861a-283879075d69", "sighting--29ac5659-98ff-4a4b-a9ac-6b8da50a2de9", "sighting--f45f65db-1dff-40e3-ad95-3943bee37e06", "sighting--76b2eeb4-f391-43ed-ab47-3b80266dd9dd", "sighting--2f875ccc-cfe5-496c-8201-1639221f9fdc", "sighting--d5cab6cd-d3d9-4496-bc7c-ff8185339f29", "sighting--ee4afab3-69f3-4ca8-a7bc-957774c6b527", "sighting--226fc641-64a7-437a-804d-4db600328a1c", "sighting--72b68af4-c474-4fe8-8ba9-2271c5de4943", "sighting--0b8e7521-8d07-489b-852d-090c4b238cef", "sighting--2e919ec6-de38-433d-b9b5-ca8c36e1cba2", "sighting--b83dae23-9717-4f9e-9a32-553e4330ec7a", "sighting--60579659-1822-4845-baa7-a3687a84e471", "sighting--06dd2518-7015-4711-b87b-4511bc6a8178", "sighting--b93bac45-4347-4553-94d6-01760c31b1b5", "sighting--d6be8171-3e94-48be-a9ba-d82ebc60d022", "sighting--e61d500e-f766-4d42-8aa1-20d9ec7ab60f", "sighting--9ddbb9ec-07d8-4ab0-95dc-5b9898443a50", "sighting--f490b209-f764-4ab2-805b-b20caf806f38", "sighting--efa48e67-4e0d-48b7-a432-fc36b735d1da", "sighting--0246ef3b-b8fa-4090-8f2c-ec828136bb27", "sighting--f589a1cf-8e99-4863-9a66-aa6e5aae9f52", "sighting--ae7b8d49-f41d-4141-8517-23ca6fcb1df6", "sighting--ea5305ad-c311-4d2f-aca2-0084a1aeb138", "sighting--16b17f87-7151-4ff4-a636-9e8a8d937abc", "sighting--60c6d83f-5ab0-4694-98e8-86db30bfe575", "sighting--47c5dfe2-5544-4477-903f-777124f77deb", "sighting--12d714a6-f03f-4f1b-a855-93b8a1af132c", "sighting--a8e48ceb-8180-462c-b058-b8de0162afb4", "sighting--c476c423-366a-458e-8c5b-74b8b60f56b3", "sighting--ead8cb3c-0328-458b-b51e-a8896bf432e7", "sighting--1471ed9b-a418-427c-b39f-6a60e2d4bb7e", "sighting--a4e774a3-c9e2-4ff9-81e4-7c75051d62ea", "sighting--e0aee1eb-622e-44c9-aa7b-833207c41a8a", "sighting--ae82d2c2-987d-4c7e-aa73-80bec3146fbe", "sighting--d38dd864-d8be-47d4-b912-84d8178e1292", "sighting--934a711d-169d-41b8-9b87-f12292e839f7", "sighting--29c083fc-f7b8-4cd7-97db-c71c2ef9275a", "sighting--f29b6faa-5210-4fab-b284-9d7fedafc98a", "sighting--3253a6d2-fe90-4ea0-a449-11ec1aaa75e6", "sighting--3946c111-431d-4404-835b-fa8d4b45aae9", "sighting--d43af750-a8ac-4393-9477-0199695970e2", "sighting--96de0d89-c762-4a0a-bab5-1bbb9cd6eec8", "sighting--80ab1967-cf03-4eb4-858c-d07c4b0185d4", "sighting--25a43fdf-39bd-4609-b1ba-00fc283978c7", "sighting--25fa2c19-8cbc-4842-8302-129d77485073", "sighting--4da4a399-7582-41b8-b58a-5e4047db8122", "sighting--c6b7f7d8-f93f-424a-a67a-8b3d1442431d", "sighting--dd0c298b-c521-4321-ba35-75b04c461ba9", "sighting--7523bb9a-183b-487f-a901-4420e0e367b2", "sighting--d785aeff-07ca-47b7-9c91-53eac498263b", "sighting--00ec87a5-0246-4d57-b5b5-25047092de39", "sighting--d18d0347-a05b-4da5-b882-1e2053580aa2", "sighting--7733db91-0f5b-4e31-8741-d55e683131cf", "sighting--77e80b6b-e544-496b-ac9f-91cce9a7cc2c", "sighting--e354ccfc-b35e-42ed-830b-fb901be3dc10", "sighting--e05f35d4-a804-4377-93e9-9a055b576536", "sighting--d76c90f8-9823-4c58-9e65-4b30fca4d9b2", "sighting--40970841-aec6-4986-8311-378f74fb3001", "sighting--e4d76b92-1985-4398-ac1b-1ca33f59f9bd", "sighting--8ca9ffd3-ada2-4272-bbb1-ec63468629df", "sighting--eebc14d3-7b73-4f0f-8243-ad642d272855", "sighting--297aef8b-1cd5-4d5d-9d33-59c207a2632b", "sighting--eb9718b6-ab85-43f8-b3be-298b5d36e667", "sighting--6c29fcea-6a4d-46d6-806e-751ecd51479a", "sighting--288aa9d0-cc9f-42fd-934c-8198ec6060b2", "sighting--0f8ea323-d84a-4c13-b5fb-2bf7ab37a967", "sighting--36502eef-97e1-4d58-ae25-b3454232deeb", "sighting--65869461-4685-4f91-ae37-7a57d2440e16", "sighting--d9e5f4c6-1c55-4b0c-bf8f-455ca83873e3", "sighting--0383b510-25a0-4795-b9e1-9240c8dc5e04", "sighting--6b69b3d9-c4a8-4947-b36d-761873f98582", "sighting--3a0755fc-a986-488d-8266-13671858daf1", "sighting--2d216d0d-4607-4b36-b545-58bd4f1f5071", "sighting--01b6c0ba-266f-4e38-9571-fe1636d825bc", "sighting--65bec487-3616-49fe-9d07-df246873dc6d", "sighting--d962c412-ebb1-4602-86c0-36ab80f0764e", "sighting--6cf2b09b-da96-4748-a6a0-2c1b4dc89906", "sighting--ccea661d-e2da-4213-907f-d146b82e8cb3", "sighting--cd0b3bd6-4092-4f23-bb71-bffeacfcb818", "sighting--0a8b36d5-4514-48fa-9af9-21f18872975f", "sighting--e99ecb3c-4bdb-4411-819a-4dd47039e573", "sighting--1e073e66-28f8-49af-affd-91778dae4bbd", "sighting--cf147ed6-1cd1-454e-ab76-56b5c402253f", "sighting--6304964b-b8aa-4285-b52a-70cc98624c1c", "sighting--35559fdd-53ee-4047-8770-c6f690053b95", "sighting--d29b1067-bb04-4e86-9eec-74be88764eac", "sighting--6a0363e0-94eb-4c10-9329-8faae09b4276", "sighting--5f62a1ce-d8c4-4ba7-8840-3c5f24511a99", "sighting--35e92e8a-9898-469d-b0a9-3f6251c33809", "sighting--cce721f7-5750-4024-9836-a798239f6fad", "sighting--06abefcc-ea70-4292-8a00-59b4217e9c34", "sighting--9ca8fe3a-16ce-4e21-b5dd-00a4a2ca1f50", "sighting--a07d82ee-1f0a-483f-b2f3-c3524742ef8d", "sighting--12babd74-41bf-4ac4-b38f-50d0b65400da", "sighting--525a35b8-b15c-475f-a7ba-ef59a5bf1054", "sighting--5f6e88dc-f6f5-46f7-b8fe-13223afd2ad6", "sighting--a274923c-284c-4a71-949f-2567e248b968", "sighting--55a04f3d-9632-4a56-9675-fc5973b281b6", "sighting--df2d1fb6-b169-4e7d-b47b-14c0952e906b", "sighting--9f38de8a-ebf4-40ae-b68b-d510e9ae2792", "sighting--51b7870f-f497-472a-afc5-f9e3faf2492d", "sighting--a00fc293-9b59-4000-9393-fabc9eeb5838", "sighting--d99d2e52-abb2-49cd-9b81-208addaa7198", "sighting--1ac4221d-c6c0-4781-a727-c1b03e6111b3", "sighting--7bb36596-9c6e-4955-b2be-5315cf613039", "sighting--8a8afeee-74f8-44ec-a7e6-3bd45a810bad", "sighting--d0d2481f-d951-445b-9c4c-ce9e2fc5e43d", "sighting--a8df37f1-7a78-4f65-a4d9-d8ad14962bd4", "sighting--c5d82c74-de7c-42c8-98dd-f749b7177621", "sighting--e869ac5d-34c4-4874-ae40-1e00c2c00364", "sighting--768ec4db-b7ca-45f6-ae3a-c2094f931181", "sighting--fb6b8b60-9120-42e6-8bac-20ae63484a62", "sighting--543e6485-fd92-4c52-824c-56cab8f8efbe", "sighting--edc7325d-21ef-4f00-8d6c-f3a1652aad36", "sighting--eec2392d-d86c-4b85-9049-2a10939954b5", "sighting--31d44fe5-9d48-449f-af23-eb442407251c", "sighting--93bf79aa-0554-41f2-ad48-730a8fc91dbb", "sighting--6da9a0ab-8e18-4aac-a33d-b8aa215afc0e", "sighting--1e5cd452-a629-4065-a125-cdfd665f264a", "sighting--57597abe-3721-45ae-8f0a-59755542c716", "sighting--688c76a6-5eed-43c5-bcf4-d1954fdcf547", "sighting--b84030c6-37fe-4921-b430-3bdce2c3f5bd", "sighting--b8f6c02c-a618-468b-aef1-e14fd2621e9e", "sighting--1e67a3ee-696a-4d47-863e-38fe8fd9a587", "sighting--5811f162-51a3-4dd9-bac7-12c35951ca2e", "sighting--40f50243-bf07-443d-9331-03f9d061a9b3", "sighting--4e7769a1-5d76-4665-a176-7c333e47254f", "sighting--e8714551-e2d4-49b9-a99e-f1e4a86e27c1", "sighting--8df1e338-b340-43a3-a802-ea1f60134f31", "sighting--f90d5efe-06b5-45df-b168-e6020fd7bafe", "sighting--5c890a41-343a-446f-822e-d9d6ad0881a4", "sighting--1a025cf2-037b-4ec4-8204-07f5173d2b86", "sighting--a36374f3-5079-4103-a03e-260c56411778", "sighting--8153f432-853a-4632-bc96-db46f5308da2", "sighting--2681a876-34c4-41ef-b78d-dcf010a410e7", "sighting--60799d26-9013-4c5e-a189-e61587fd98f4", "sighting--d9744235-4a2a-47a7-91d3-94b691093dc7", "sighting--a366f6a4-4855-4b58-9267-6465b4c4a80b", "sighting--8750b01d-6167-4d5c-8887-9efcc1d11afa", "sighting--64d3a749-e7fd-4de5-913a-2c8cd6c4945c", "sighting--dec36c34-ee5a-40b5-be75-2fc4efc7db3e", "sighting--3d403e5e-3390-4ab4-b5c0-b4672cc873b3", "sighting--a28739a7-9bac-4f21-876d-dfb5c6f973ef", "sighting--81e299fd-3a3b-4fd1-ac10-8503b75e21c6", "sighting--c8595320-0192-4658-9b3a-b0b73b91974d", "sighting--787a435b-ac82-416d-820e-44189f2392ac", "sighting--9d6408fc-2b16-40d1-ab6d-720066941b3d", "sighting--612519fc-f95e-4d94-bc98-0b09ccc06474", "sighting--7ff8e17d-5cb9-4996-9f7b-02ff3ee44228", "sighting--02ea3358-b5cf-48c4-b157-add5dc02ebd9", "sighting--34969ced-1c51-410c-9d04-dd0c6219b9c4", "sighting--04b62a1d-ed26-4021-94d8-c655e9e87821", "sighting--a010c80a-9445-4c62-951b-80630c74043d", "sighting--c0b48a46-916e-4c19-870e-de32e45a3a3a", "sighting--bddd8506-6aa7-4fe5-abab-4d96f8e87d64", "sighting--c9dc02ea-7f9b-4bed-bc49-b03306ba1093", "sighting--f3e21feb-32a0-47c0-8a26-5b9f98971127", "sighting--18870fa8-15c7-4b3b-994c-43d4ebede638", "sighting--2d9476cf-698d-4cf4-ad76-28304c899a74", "sighting--fb5fc089-dee1-448f-8b8a-ecd6475a7be7", "sighting--8be1d860-f4e2-45fa-926c-aa035c373b78", "sighting--43a4b1fd-2629-45fa-a53f-3b589f15463e", "sighting--2394caf2-7621-4510-940c-c6f4ea9ed2c4", "sighting--f8192389-bbb6-4661-9ab7-717bdc58b3ed", "sighting--a0d8a989-4f0e-4883-8d61-93ef9200f189", "sighting--db0159c2-867a-4085-bf99-f6be67683ef4", "sighting--c892fe98-3a06-418c-a04b-c1d8beab287a", "sighting--47c7a114-bd40-48bf-8740-8383fc59e102", "sighting--eddea6d1-1e6e-4bd6-84b0-1fb0e8cbeccb", "sighting--87405015-8ea4-4a48-88bd-5c78627b06f1", "sighting--780a4e50-9748-4ef7-9a6b-65d3a65564c8", "sighting--0053bcc5-f72f-41a8-80c7-25f0ca290dbc", "sighting--e0e2e88b-fd4d-4339-8171-a52c7f1394e9", "sighting--b5b38c60-ed1a-4018-b268-2fdcf264029c", "sighting--33b14919-5909-41ac-b2bf-70efed045ff5", "sighting--e890796e-fe99-4113-9d2f-9b0e3e69f111", "sighting--fffca36c-3499-472e-8da5-ee7ade35aed3", "sighting--d80697ed-39c3-4c56-a010-36bd8c37e476", "sighting--431a7fd3-5dd6-40ab-8d45-e30d63985aab", "sighting--4471edd2-4c09-45fb-89f1-88b14cd1a4e1", "sighting--572b0b4f-5633-433d-9ae1-6b363eeda58b", "sighting--71033348-f56e-4767-885b-541d5644216b", "sighting--750c8867-15d8-45e4-8e24-f9c98b61f135", "sighting--7596784b-e90a-4c79-904e-90291edc8ae2", "sighting--85516616-a523-428f-8d3e-44477b177c1c", "sighting--21793827-a437-4106-8c7f-733ef3305ef7", "sighting--ef1992d4-eba7-4172-a76c-debd0dd8ea7e", "sighting--f9a167f7-1499-4484-a4b4-7adb6d58e454", "sighting--305eccd4-53d2-4317-9ded-c9f339498243", "sighting--555f64f8-c851-4029-aa73-cd8a03ad0a98", "sighting--0a0f199b-afbf-438a-acc3-6e8f9ccdc3a6", "sighting--5ff32825-3770-4371-805d-ae8d7f78b781", "sighting--e8e59816-264c-4712-9814-ef7c4167dd3d", "sighting--0cace875-0f1b-4db2-988a-b9658580cd46", "sighting--d2c2c213-7fcd-402c-b1aa-684ff31de0f8", "sighting--c725d2de-25d6-4be2-84ba-510f690364c3", "sighting--0cfcedb7-6585-4ac1-9361-2728001d6eb4", "sighting--7ccb39c9-c1ab-4133-bf39-1368ef161c97", "sighting--cf0c1a43-bde7-49a1-bb9f-e3db87886319", "sighting--dd952f48-7d2c-4345-a3de-c2a41c355545", "sighting--59ffe764-69ef-42ad-b83f-cc7852a72e5c", "sighting--4c9b2f3f-213e-4066-aee2-c8ec30a76ee9", "sighting--f00dd1d8-25e0-40e7-aafc-d64421f93669", "sighting--a86f7520-48ff-48f1-b656-ffb4e4c7962c", "sighting--d1047081-4df6-4fe4-86cc-6224b85ff839", "sighting--5b10ae2c-dedc-4578-bb2c-c81727d3b438", "sighting--e22ab241-35f2-4996-aec3-69b22ac3c147", "sighting--db8d43dd-bfa3-45f3-91c8-e5f5b127d9be", "sighting--a110e80e-f541-4fc0-8fd7-0e0a99ed9201", "sighting--96acf6ac-8191-42ce-9713-d62fa8924669", "sighting--71ddad6d-1b81-4ef2-8bfd-c4270ceebb00", "sighting--c57a49d5-9272-458c-808a-b899c3bb1415", "sighting--676d2593-6563-41a3-b81c-b6a7eda9d26e", "sighting--d8e47746-5eb4-4a0c-b75b-f10efc160d30", "sighting--81aebaf8-ef56-4004-a0b2-9af415b64bb3", "sighting--89bd1915-e761-42fb-8629-acd1f980491a", "sighting--ae164f4a-169e-45e7-b282-101192d0ba22", "sighting--c82d7d6c-a877-4a94-869b-59e96316be3e", "sighting--a29a222c-4638-4910-8fb7-42d46bd79440", "sighting--ac45e07e-b963-4bb4-8110-1661778a992d", "sighting--2745226a-572c-4b4a-8d28-1958b8f331a3", "sighting--b75fc16e-71d6-425c-bade-2e86d6361cc5", "sighting--b2d732ba-dca2-490d-9d8a-118df2965abd", "sighting--7ec1c519-6b6a-487f-b6ed-7776e18ef7a5", "sighting--41b510a4-70d2-4493-9c9c-1720f7778b8c", "sighting--d87549f9-0016-4895-b65f-e68fde85c4cd", "sighting--6b8b59d1-6454-4d6a-a8e4-c8b66bcc4662", "sighting--bc36c584-3d0c-46fc-a2e3-b4832a9f50f1", "sighting--ee132394-1c78-4af8-8bab-209f8f22a317", "sighting--6b826604-086b-4076-b852-420479c6a7f6", "sighting--e378e66e-0696-4618-9bae-d24c6a93490c", "sighting--58e6caf8-7830-4493-98aa-0d5fd69757bc", "sighting--32717e84-251f-4f32-94c7-360e9234547e", "sighting--6d663407-3219-4532-8bde-5f775f09d161", "sighting--1f674f3e-1c77-444c-b9ef-a8189a646836", "sighting--0ff15260-a94f-406a-8aac-0667608e427b", "sighting--8fbd2aa7-942f-4064-a1ae-93041dcec3c2", "sighting--ce321557-0e35-47c4-8894-b3021f3177ff", "sighting--8d507e15-7afd-4a77-9709-78499a2b439f", "sighting--f4dd7a57-867c-40a1-b7c7-0fb482c5ff6a", "sighting--4c01cb36-5244-40c1-b3ce-2c36116e0dc3", "sighting--271ec3a8-5ebf-4948-9bd2-70b0d90fc328", "sighting--d9354166-ceac-4703-a592-4b25c4135279", "sighting--37291161-e13d-4e49-8d01-b737f4da1644", "sighting--63178fac-843b-4ea6-8dad-24e6e84a5b08", "sighting--82ade22c-2a92-438c-b26a-79cdce9f3b52", "sighting--c2f2c123-5dab-44ae-b046-9fa1c13c5b47", "sighting--343f894d-8265-4124-8fd9-7e9805c39b3f", "sighting--6a608767-9fbe-4f2b-87db-b806e656efe5", "sighting--9e6661ca-3de9-40eb-bcd9-e50dd848a88f", "sighting--b5bc1c61-1172-4fae-84cf-b74c432f8ded", "sighting--9ceafe3a-e157-4a6f-b628-24eeb1f6d588", "sighting--8f721ff7-7fae-4368-8d67-cf35b0916533", "sighting--c5c73fea-a0cf-4174-819f-e23a143c8963", "sighting--c449bbf9-6d0e-4bef-b0c3-a886a449bd94", "sighting--bdc5ba2a-f1b7-4431-a389-bb0a9a119c37", "sighting--ec0ee8cb-5f6e-4200-a709-1fa2fa77112c", "sighting--18c47594-08f4-4b7a-b7d6-eef6fd07e5d0", "sighting--8e4d295a-d2ab-40f3-a958-64c683ec8ca1", "sighting--98059082-1309-4a55-9621-14a8f9888841", "sighting--88be0d6b-d78f-436e-b41d-453979c6261b", "sighting--868b5f2c-fa19-4315-9cef-571d2d053d68", "sighting--29f45f6e-0cc7-472d-9e88-e08fb1790cd3", "sighting--bfb42052-598f-41a0-a9a1-519135fad116", "sighting--84e678e7-50f6-494e-aeb3-c341e51940a2", "sighting--3b0b4129-1802-4b1c-9b2b-7067d99a0985", "sighting--3e6e1b81-3267-4de9-9c3a-8bf6ab5e8253", "sighting--51012674-ab9b-465f-9489-3415a25c44ae", "sighting--27489bbe-9e4e-462d-af13-62f2acc53b8e", "sighting--08d03670-c365-444e-890a-a0f9a76f7c24", "sighting--4071156d-3084-451e-a16e-9fe1249cad9b", "sighting--ef9f4fdd-eaf8-4e13-8b90-99365a2812e1", "sighting--ba40bab9-d7c7-438a-a189-a8f045279087", "sighting--46907dc2-145e-43e4-960b-92c15a9a44f0", "sighting--b7553ce1-d290-4572-b12f-d04b993f53f8", "sighting--c4a003c5-68ec-4efa-8c40-dd1ceb953d29", "sighting--6c5ca90b-3477-433f-b822-c7bb0e3c3a32", "sighting--e364c2bf-c80d-4240-a011-35b118392c63", "sighting--4722fa4c-7462-4ed4-bb4b-dd517d9fe82e", "sighting--6180857b-54c3-4848-b348-ff1279c00970", "sighting--90a7c94e-3975-4515-9ab0-9c604a99669f", "sighting--1ae27f54-9942-4537-9235-6ccf5d027555", "sighting--a614ad42-f360-4867-833c-5fb380924075", "sighting--3ad9d78a-09b4-4b18-96fd-ca948d11535a", "sighting--c78f5341-8825-4da6-bad9-dabcd1c86dfd", "sighting--a36259ab-9741-4973-8035-d72884b99afd", "sighting--fcc19819-b1f5-4c58-810a-a161bc361646", "sighting--cabfb2de-b6b1-4fd9-b81d-e4c90d73af83", "sighting--44cc9884-e72d-484b-95e3-51be681d1f35", "sighting--68f0d66d-c573-4dbc-9444-c7871000d5e7", "sighting--acb2b014-dfda-4437-bd76-e1eed19509f2", "sighting--259fd83d-559b-4c2f-b092-04be604ed500", "sighting--89e9dffc-ca52-4b94-bbeb-e4c8018006ac", "sighting--c071a9fe-5b2a-47dc-85cb-1be74ede8a2e", "sighting--0f84e691-e7f8-44d2-9307-2ee14b690202", "sighting--b7690ca2-7a05-4cd5-bca4-6589bfb5686e", "sighting--84cfaf63-99a7-4336-915f-a2b1d1e637ed", "sighting--c64f1b34-0584-4b8d-aae7-3e407fe71173", "sighting--932d3f3e-2507-41d5-9db7-14299d92c65c", "sighting--5449fe7d-aa03-41b2-91d4-1602751fb878", "sighting--020a40bb-a3ed-478b-a249-2a0916bc821d", "sighting--b73a820d-4174-4946-a055-eda0681f0e9e", "sighting--9e27ea89-2beb-4af8-9a56-3d114c4fca1b", "sighting--e8eeeb32-f28e-40be-b751-6d42d0df5add", "sighting--a54b95ec-d59b-4773-9614-61042e679d3b", "sighting--f5de25fa-19c2-49e6-be38-b4fc53bd7518", "sighting--90cf6b0a-ca19-475c-ae2b-e62a45e5f8f0", "sighting--aca2f886-8b15-4289-beee-4f59c8c2cb18", "sighting--3b97e3ba-2bfd-42eb-bac8-abe8343bb67e", "sighting--6052e99d-4178-4b53-89a7-a66e46be78a1", "sighting--d857b570-1f80-4d1d-9431-c57a1d834d64", "sighting--c22cc2a9-3331-48bb-98e6-e3ddbe7ae146", "sighting--b4f3ff7f-d599-4359-b1e0-5380782ad039", "sighting--28bd5c19-0a69-4973-8a4e-9fc506110bd4", "sighting--9d2b59dc-d92b-49bc-9360-ea063bf03069", "sighting--69e91279-3817-4aac-aa98-7d83c13c15e6", "sighting--e19f0454-8b83-4fea-8126-8ddf64e33ef8", "sighting--c784cbd0-7f4e-41d7-9300-4b55df38d0af", "sighting--99e8af7d-2803-48af-8c75-768c95d4b22c", "sighting--177aa23c-ccb0-4f7a-93f2-2df9b839661d", "sighting--f858d686-1df6-4607-b274-31a31a5ed931", "sighting--321d8889-0769-453e-8c27-0c47c2430740", "sighting--2f90aea1-057f-411b-b422-e3a1a552239b", "sighting--57c640e7-9000-443b-bf6e-57325f7bb476", "sighting--020c9f5d-c5df-4399-8fdb-d15c6ebf88a9", "sighting--dd7fc1f6-c8f4-4d1d-9d51-814df0366e04", "sighting--b0561525-915f-4cc2-8561-35527c388dae", "sighting--bef83271-51f1-483f-b9b6-e2ae1b34ccfb", "sighting--a0e2a5ac-95d0-4f16-bedb-23dc1ae40e38", "sighting--7e7ed03b-0ee1-471a-95f4-7e410569f35f", "sighting--39e51fff-2076-489e-bf95-3374eaab3ab2", "sighting--5e04651a-6a70-4b6b-b74f-7cbab54afa16", "sighting--4aeb1320-83bf-4e23-ab88-acf53b6f270e", "sighting--3feec66b-3d3f-4769-aca7-677b3cc8c7a3", "sighting--8dfada42-81b1-4725-ab97-9931028f8ee8", "sighting--691e0bf5-f915-4c3f-bd2f-23dbeb4d9ed2", "sighting--a23b69a4-c32c-4fa2-9834-8a37d1abef72", "sighting--91465014-9a51-4923-ac0e-3fa456260ee7", "sighting--5337bb54-4678-4e78-8af6-02357d587940", "sighting--42b36b57-5640-4fa3-97d9-9cceefe39a01", "sighting--7ad66dcd-624f-44ce-bb90-cfef1ce357d0", "sighting--a80a20ad-1345-44a9-b2b3-9907cb376886", "sighting--0aca692c-9b0a-49b1-8f30-99e9cc227843", "sighting--8b332fd4-0a97-4d9c-b683-8f654f34cb4d", "sighting--1fef1924-b951-4093-82c8-4588225a2cc3", "sighting--898b3a50-b6cb-4ecd-9522-f6d68fe7ad24", "sighting--036871f1-b07e-4d80-a4b4-574051cd6698", "sighting--e9363821-fb91-412b-af08-b6281144b4ad", "sighting--21c71a05-3e3e-4f96-8760-265c04e6cca1", "sighting--cb3841dc-bf2a-4d7b-bede-79de07909d68", "sighting--2e9a72b0-0c9d-4108-addd-9ef45ec3047a", "sighting--70f0db5c-fc49-4b8d-af0d-08ce2672c277", "sighting--9f2ee57c-ae76-4b21-8b3e-06a7ce14668c", "sighting--f2bbb4fc-c4ac-41ca-8d21-f903a45a8703", "sighting--0e4687c5-9f90-4a01-aa6e-45ec1a97d48f", "sighting--c4a643d7-0447-4e2c-bb60-3929c7ca231a", "sighting--7f091e16-511f-4dd2-9ff2-4b41d9e6d22d", "sighting--1bb9ab4d-54f6-4422-992a-a07c757fb8f3", "sighting--c9e0b717-a9f7-47bb-ab6d-2c5ba298790a", "sighting--1686dfae-8376-4921-8887-3b3bba97675e", "sighting--a33af70f-060b-494f-ab78-a2450e82c26d", "sighting--55190115-b738-4977-90bb-0373adb9e828", "sighting--2d8bf1d5-c236-4103-a9c9-470c935a99a1", "sighting--3e12fb2b-19e9-4cc5-8e23-b05cb2e58f3d", "sighting--e652d1f8-333c-42ca-8b00-2d48a99f161d", "sighting--6cf4aa2c-4055-4798-9ea6-958b127a62c3", "sighting--56bfee22-b1e0-425e-b5eb-c8237ddde287", "sighting--354ed8eb-08a9-4640-8d77-72c37a51bb34", "sighting--587c69c3-2452-4e6c-a802-c2da75718321", "sighting--cf99a3de-46af-4d39-9cec-f6e986e12b96", "sighting--c5b5418c-ad27-431a-ae88-ac9912870f80", "sighting--d3e94949-038f-438c-8776-b05af32c93f7", "sighting--3138d435-d995-4953-b2f5-5c85ef326986", "sighting--a712c617-61ce-4d96-a8f8-a8142c8376d5", "sighting--2375b7e9-0b35-4b61-93c8-6622009a7e10", "sighting--bc1ca505-0b97-4965-ac47-149675544e5f", "sighting--503a9b81-f2a6-4244-bc1b-8b72ce118f1e", "sighting--1e3fd6b1-39c3-4edd-ba99-54000d392e2c", "sighting--70ed2949-139c-46b7-a604-dab9f28ee36a", "sighting--ece8783e-be6e-46f2-9b41-78edf6b7132b", "sighting--8cfdad2f-79c0-42e5-a9d3-c37c82bd2db1", "sighting--f6230c25-e185-4616-a24d-896510946a92", "sighting--543f03a8-b3c6-45f2-a54c-31559c24b110", "sighting--33d2eb36-8c35-4453-99b8-831c7129e737", "sighting--5b1706d1-8ee5-44ca-a5fe-b9b86675435a", "sighting--5780fda4-d7a1-493a-9032-8bbe10fabdf9", "sighting--50e2e3ad-4069-4350-b056-ba173adee119", "sighting--3bf8883d-d03a-4920-998d-63704eea026d", "sighting--3140b5fa-3768-451d-892a-e32a760ceadc", "sighting--d552e34d-de2d-4f7a-8a57-3c0b546bcd7a", "sighting--63c5566d-aa2a-4640-81ec-995363aa7ff9", "sighting--d56bd23f-377f-4c12-840f-76de7d3340d1", "sighting--1f66051b-71c7-4c0a-a4be-8cdae551f9f1", "sighting--be95d3f0-9b83-4f69-800f-d44efab861bb", "sighting--cb9a3e3f-aa05-4589-8253-70a57061acd5", "sighting--3d72bcae-ab06-4537-93f6-40ef721abed5", "sighting--d09a2142-433a-48a6-8d19-bcf1068642ff", "sighting--f9535243-092f-4a9f-b75e-8a662f896302", "sighting--704eeccd-d821-406a-95fb-01ee4d9aeb3c", "sighting--8c86d2d0-75ae-4d2e-a6c1-f6cbf7be7482", "sighting--64964246-9d49-406a-a788-b836a05cd50f", "sighting--a0434238-075f-447f-890d-4470750e1a8a", "sighting--01f03900-4756-4ddc-a965-6191488eac70", "sighting--f74d83a2-6fbc-46b8-b4c2-3ff820705ec4", "sighting--df53dee9-25c4-4088-8b14-2f965952efad", "sighting--8a616aa2-1c2c-41ad-8a88-d8f73271b388", "sighting--a8642f55-6fe5-40d5-af34-f8115b2d0908", "sighting--67aa0adb-354b-4cba-8318-0a8c9a9f0a5f", "sighting--9f40da52-c3cf-4ec3-8a57-d93dc327f395", "sighting--eea3f089-7856-4cd2-962f-4c988f042efd", "sighting--38229200-cd4a-4b14-83b3-2fa1c7dfcebd", "sighting--c5ba2449-b995-4164-9a46-9d9a02f75cc5", "sighting--a1a13744-c6cc-4550-b577-d7b76e8f8a07", "sighting--602ebb7a-a9d9-46a2-9e6a-56170e593ec9", "sighting--5490caa6-226c-445d-9d09-cb7dbb009e46", "sighting--71e9348c-c288-4bfd-8112-1a64d271ea73", "sighting--b525cfbc-90ff-4850-843a-fd790305f80a", "sighting--3adb2081-ef43-442a-895c-840b4fdfbaad", "sighting--2aaf60e0-a491-4a8c-a491-e1f1e6f96f7a", "sighting--4bb60790-f3f5-4fb4-83c1-8ba4f01e7897", "sighting--d2ae98f0-3f39-4ad7-968b-5e9589911c8b", "sighting--e0012d88-e8f8-4bd0-aedc-5956c11fd72f", "sighting--4a575fdb-6c3a-49fa-99cd-dc3cc1651b34", "sighting--43241d62-8baa-4838-8311-f7deabdaaaab", "sighting--61bfcb7f-1b19-4a28-8b24-dc4783c2da96", "sighting--1f13ed71-3dca-4e13-ba6b-aec55ae8a62a", "sighting--5e84695e-1445-45f8-958c-b626d068bb80", "sighting--b3a05dba-698f-4dae-920a-133a9eaed88b", "sighting--6df412fd-8da7-410b-8924-e4fd572d16c8", "sighting--fe57215d-080b-47d8-b01f-36a1e47175f8", "sighting--3d663afa-5c78-42b6-a7ef-604ce7fb3377", "sighting--ade7a8e2-b431-484d-949f-46b75266b7eb", "sighting--ea3abfb3-d07b-4f42-8367-fb0515d95d80", "sighting--8b294b0a-da46-4cc8-accf-5aac51f7e5da", "sighting--9c25156c-55f0-42fb-b923-20ecde72c095", "sighting--77516271-22db-4198-ab6c-5abc54cb7e8c", "sighting--7bafb204-338a-4895-8eca-f25a50ec5465", "sighting--3c18da66-ca54-4a0e-9ba2-835159e45b3d", "sighting--e7705702-97bc-4d56-b31b-fcbe985dbeec", "sighting--f6488866-09f2-4a1c-a586-7e24b94da3ab", "sighting--8466c8bc-f517-458b-adce-21e861c5e375", "sighting--2ef3fc4d-16cb-4e05-ab00-4c77c55fc2ac", "sighting--b2017bec-f3ee-48eb-a5e2-f65fcf5d9c5f", "sighting--c79f6ed9-8bf6-4875-88fe-1868660c9ecb", "sighting--25c8ceaf-5dd4-47fe-8092-0673c1851f60", "sighting--83e81f06-f00c-45e5-ac79-2ab768e8ac5e", "sighting--7561758b-1f82-4735-af1f-a604ce93c6c3", "sighting--bfe6d27b-0e6a-4a88-9a62-c08dd5544cdc", "sighting--7da1a871-4b14-48ee-8721-0b16096e0ba1", "sighting--0ca6a3ea-61a1-45d4-acba-6d29e1d30fec", "sighting--76245bd6-9902-4272-a1f6-a0d34528e2b7", "sighting--46847186-2ea1-4217-8817-61ad377a1628", "sighting--929a5f73-9f02-4039-9a69-b861d000f1c0", "sighting--b7a0d7eb-fcaa-49bc-9cce-6252e25ccb1b", "sighting--65e62f7b-218f-412c-bdd5-69723f77c8f9", "sighting--ea9ef024-3f74-48aa-bd05-934ab033c7fb", "sighting--d33a29d5-54f8-4e96-b63b-f988b5c184e8", "sighting--bbf61231-955f-4326-a2d3-a25b7d2bea08", "sighting--a522fa47-4ae0-452e-b7ca-15e452e20f8d", "sighting--35e0068c-1deb-4606-bf0a-cd021ca4ef5b", "sighting--5bc07051-54f6-4863-bc30-d16327ad54d2", "sighting--19ac69ca-1705-4d09-a8de-1181fb350956", "sighting--28c3af82-71d0-43b8-852b-d9aada912865", "sighting--00b53c0c-66b6-4335-a7ac-e85071c87cdb", "sighting--aaa7ce8f-c56e-492b-8737-ca5da5bf9754", "sighting--0c95f3b6-4004-400e-b08c-4e47af41e0f0", "sighting--d5a5aa6a-5099-4d33-a4f3-0aff9a221592", "sighting--4c393266-1ce2-42e8-98e5-60d46a99f79c", "sighting--c37a7668-94c3-4e54-ab01-9ab3469adcb3", "sighting--560a04a2-948e-45b5-a562-7291845b3c69", "sighting--1d2da227-4cf6-4ee9-9a3f-3e6af4cd2b24", "sighting--159331d2-ca08-4cca-9888-4cd5ccc045e3", "sighting--0f8f99d9-f38f-4a44-89f3-b7fc7268c4ff", "sighting--895efb6f-0bb7-49ff-bb0c-ad7ed73f8150", "sighting--3f734ccf-9702-4f60-8705-da177b9c4060", "sighting--ca415126-0f68-4688-bfa3-3ef869d7992f", "sighting--81839209-fc3e-4128-8277-b507bd578957", "sighting--a4adf62f-d278-4fe4-8038-c4622357e8ad", "sighting--ffd79492-9558-4e33-a3fd-d1832a2330a1", "sighting--745ca5f8-ce05-4b3d-bfdb-759d10a547a0", "sighting--0279b407-ea97-443e-8b4d-cff1ec5b7298", "sighting--9e98da5f-f58d-4d3f-b8e8-ff9f7e7c4909", "sighting--be38c705-946a-4ed7-b854-91a197772280", "sighting--feb1ddff-8181-4148-a27f-86a31ba3c4ff", "sighting--3224600e-b43a-4b16-ad46-6c2dc8a8ecac", "sighting--48f1334a-419c-429c-adbf-ffe46599bb98", "sighting--3c888a3a-f808-480a-b6e2-60e47a181772", "sighting--8ecba1fa-7c1a-4aab-ab5c-b1788d70c176", "sighting--b5d4ac7e-67bd-4e03-83cd-2243fb55c6bc", "sighting--c09efdb5-5197-4e81-930a-ba51a892fb60", "sighting--059bf88c-352e-48d6-bb8b-d4b8f086f19a", "sighting--d6a1d8b0-5c9a-4dc7-8b94-ea54de8de8d0", "sighting--05293799-068c-415c-8efb-38efae9ad851", "sighting--5d731b55-e224-425e-b660-5abd5aa7a31c", "sighting--6013b046-bace-4b67-b3ed-439d4fa84515", "sighting--55c5ecb5-5e45-43bf-943d-09292fcceb6f", "sighting--78eb9383-657a-4d94-9892-b366e6d905ef", "sighting--d4faf25f-a54e-447c-86db-9a7eb9e93ee3", "sighting--4390d093-692f-4b1b-be01-9bb12abba7cc", "sighting--71c89f17-796e-41b3-83f6-a0ad0fd36e1b", "sighting--d5a6b80b-e5a5-4fd6-8f83-e5aee7a6b651", "sighting--c6b8480f-8079-4547-b284-59f5f893f879", "sighting--0414aa69-9b91-40a4-a203-186e69312e81", "sighting--a60d9434-05ed-4dcb-9bdc-499ba99081cc", "sighting--10a6d03d-b422-4f75-9980-d856064f0057", "sighting--712af673-8a05-4667-8d1c-bd7b5d5c2bd8", "sighting--5f3d7cf6-7607-4083-9fb0-2a5d4c512e5d", "sighting--79419dc6-e508-4faf-a472-9a9c0ceb39a9", "sighting--61a6c515-0b96-4918-afc0-fc0750ee9e6d", "sighting--77c19644-0dcc-478c-92d8-fa1729b097b8", "sighting--75fb1a77-cf0c-4b23-a854-1cf9678d5256", "sighting--efc37a02-391c-4dc4-888d-0eab10e19c29", "sighting--daff4f3c-d46c-4eb6-a7f0-4dd78f7db98c", "sighting--8ffae6ad-ea78-4489-822c-e117901276d5", "sighting--3f7f7112-f247-4ee5-bb72-72946ab2277e", "sighting--118350ef-488c-46ee-bb43-655921d0ab36", "sighting--60decad9-fd6f-4503-96a8-08fc002b5692", "sighting--9fc58849-cde9-4bd0-bb15-be9bd56eee25", "sighting--8bc424a5-43ac-465a-923d-bfa60e7f02a3", "sighting--c63de7d8-8d9a-4ddf-a517-8c1874ec827d", "sighting--ace97099-cca4-4981-8fd0-402a050047a1", "sighting--024d6189-b884-45b6-a383-9cd684386940", "sighting--9c65b393-9ff8-4500-a635-a844ba362fe1", "sighting--6ebcc1c3-9a70-4d10-86c4-84f9e8832dc5", "sighting--f85c6a46-9ab3-495e-a179-7f884d5bb576", "sighting--72152f40-f7a1-492c-9459-1f731dc67176", "sighting--c529d34b-9518-4d78-ad95-a8dda17d2511", "sighting--6bbad872-03e7-4b87-94cc-c7c366f1dc44", "sighting--baa26469-7831-48dc-b7ec-ed917c7f8cda", "sighting--01f88b23-1f60-4ab9-b86a-a433c7230b5f", "sighting--89c366bc-21db-4d12-83ee-6f7b054d9264", "sighting--ab0a4691-de56-4ba5-a442-866239e90e83", "sighting--4a477310-7e78-402e-8e66-f65dbb78f4e6", "sighting--36bf49ac-909e-4e90-8fcc-42317c68a666", "sighting--80dcd18c-0f1f-438e-8ba6-3cecfffef279", "sighting--bdc0ce8a-5792-4b5e-aff3-dec8f4f5d251", "sighting--92dfeb7c-73bd-40f4-a78f-ab36e402e482", "sighting--9d9dd2da-dbec-4202-958f-3e75ab78d790", "sighting--ade6ede3-e978-48ac-aa94-b18611897049", "sighting--9761ca88-fe8c-4172-94ba-fc82b76557e9", "sighting--86ed6c4a-47d5-466c-a835-b121a60404fa", "sighting--c6f576ee-8e7f-4ec4-b28d-67af48844be9", "sighting--590c9fa3-0c48-415a-b274-7c7d1254c216", "sighting--272ff4ad-d8fa-46e6-91e6-a39c5d8ed692", "sighting--c501e828-854c-49fd-81ed-bbce51c8fb47", "sighting--872baaa7-6470-4787-a2f8-6053f0be4722", "sighting--e7f3c248-ef6a-4fa5-b5a1-e365b42e79b7", "sighting--6597004b-25a5-4c50-97d2-4a911794da29", "sighting--9cdbc19e-5228-4d15-af57-7aa8ac13f6e3", "sighting--58f75f97-1c6f-45f4-8101-5508d0d383b1", "sighting--c42b3a1c-76f2-48af-bed9-5705e9acfc00", "sighting--d41aafc7-5d91-4f89-a521-dd591184d959", "sighting--71773168-2ee2-4bea-a422-9b5aacf956f2", "sighting--ba78fd99-3c41-4ce5-8a72-ac73771ec360", "sighting--9d496187-2a86-429e-a74a-f5d4a47d3f62", "sighting--da8a1e66-a1e4-43cd-ab6c-8221271f3530", "sighting--caa450a7-837d-4597-aba1-5a36328d5b8e", "sighting--94b89383-5557-4f75-b832-c33b51915a10", "sighting--ac3a2c5e-bc56-4fa7-a948-7cde20b670b1", "sighting--99a4e339-0c97-438c-a889-45cf083e6617", "sighting--2786533a-07b1-4540-92f9-8e931b45ef29", "sighting--55e40ccb-014f-46a3-83f7-cae73d6e566b", "sighting--bce01f69-6b73-4f27-9d89-85bc97c6f522", "sighting--a614b13f-353a-4a58-9b37-a962ba01a3c1", "sighting--44656b6a-9dfa-453b-8678-91e5e3f26388", "sighting--96087d53-9265-488c-a27e-714ff01faeae", "sighting--ca183df8-c272-4b82-9031-49ac6ed0cd70", "sighting--f028cf17-ddaa-4a7b-9b0a-53e3ef1ed99c", "sighting--7bcde66d-6a64-49f2-b2fd-02612e1f6ba0", "sighting--04866541-5e8b-47ec-98d4-a8fbc152046f", "sighting--dd96856e-a084-4a23-b5d6-33bced639a53", "sighting--01e12568-fa27-4d86-bec9-b5e79f0c9300", "sighting--0651d774-1736-4891-88f0-ce4bd1d1531d", "sighting--ab1c7a57-960d-44a1-aa46-2abdb21084a6", "sighting--d1ac1511-6d6a-4617-aaf3-cd113271ce9c", "sighting--c980212f-6b6e-48c6-90cb-b442f52d0a2c", "sighting--03d26b9c-b47c-454b-8e65-6ca64a911c00", "sighting--6df19b35-9897-4382-802d-2a67c92820b1", "sighting--53ba760e-953f-48f4-b416-fe216830ba72", "sighting--34b78d05-cc01-4da8-8eac-8cf700b4865d", "sighting--a4a0ac5b-e7e3-4aeb-b400-826630d16d99", "sighting--d6609f94-3dea-42de-855f-750f3e613fb6", "sighting--d703e16d-8861-43e5-bc2d-242bdd06f7a8", "sighting--13bf6762-c26c-4457-9559-f10f1d482904", "sighting--104dd1dd-fb28-4fd6-9d46-25f63c378532", "sighting--77d765a2-cd45-425d-a75c-9f74d1c52789", "sighting--c6a3e95a-7876-4d21-ae85-1fd6b4f3ca54", "sighting--61052b68-1979-477b-998f-0f825b01758c", "sighting--4b4ea6c7-c5ef-4e39-b97f-c3f86729f644", "sighting--f915212c-0bc1-4430-85f3-1c91b7857ddb", "sighting--90f067fc-8261-40fd-b478-3ce8588e8c6f", "sighting--97f8bae5-0344-490c-976e-ed80e49554cf", "sighting--2198de33-87be-4f64-8f7b-3e62762b03b5", "sighting--e10b0e14-4eae-41be-8c53-94bc86ba3d4a", "sighting--a07d9442-b375-4cdc-838e-a12492f4042d", "sighting--41836788-55f9-4168-b87c-0fff2587c212", "sighting--4a71f763-9bdf-415c-9ae3-7bb38e207842", "sighting--b75bbd99-c22d-4ebf-a102-34ee17ebb300", "sighting--642b1155-f1ce-455a-964d-ffcbcdfd4c92", "sighting--c2ad86c5-039e-49a5-941c-80b83c1c3888", "sighting--cc594959-8c6c-41a3-95e1-57545a7f85af", "sighting--0c60891f-db42-43aa-baa6-fd0008d01328", "sighting--39b68b44-ee8d-4f08-a350-2d8c69b317ca", "sighting--04e8a6dc-4fbe-4e7c-ab81-726f36846a97", "sighting--94878124-933d-4240-b05e-d7d7a1072cc9", "sighting--22f612ac-787f-486b-ac42-34a6a0be89e3", "sighting--ecd75033-0ec6-4978-86be-f43339577d86", "sighting--07a085dc-7296-4d09-807d-9ae8e5b1af79", "sighting--b03d1188-be3f-4886-a776-3644ec452a5a", "sighting--054cbd54-36a8-486e-b990-961d71fa29ba", "sighting--041cfdaa-4ebc-4c9f-af41-0f27b3cc502a", "sighting--12487a24-5781-4829-9263-a7fd1e9d8719", "sighting--305e54d5-e31a-40c6-a0ac-6b52e7abc315", "sighting--432d7ca8-468f-43c0-a584-e40c58ac8bfc", "sighting--21b0b087-47a9-4735-b138-309a091b4af6", "sighting--3661bf80-4d5b-402c-9d73-74f8c49aa40d", "sighting--a510e4d8-10e9-427e-a67d-385087e8b925", "sighting--c1b2bfdf-8233-427f-b1c9-abc0514356eb", "sighting--cf5b5315-06ce-403f-895c-362032000b07", "sighting--e9edc66e-2e78-41a4-8949-d0860cdc473d", "sighting--c6a7d4cf-8cfb-4ff5-b759-dee10d278933", "sighting--cf4aca3f-b029-4fac-9261-01dab3da5910", "sighting--a71574e0-e2b9-4136-a453-e16f96820796", "sighting--8cfb2123-201b-4c56-bd86-bf278229a580", "sighting--a579d4a3-bcf2-4864-a6d0-d410d0bf8073", "sighting--c0d0ee9e-b812-490e-b5ff-9a836f8b5c6e", "sighting--d2d90e37-c15c-4d46-b492-72aa24ceaf64", "sighting--f70dba8f-f913-49e4-a56e-f9543c4efe2a", "sighting--9d484d68-bcba-46ad-80c4-9b2067b35a8b", "sighting--89fc8cc4-efe5-41ca-9ff7-434052fa153b", "sighting--5e03e79c-1a5a-42f0-b17c-c38c1b6bf01b", "sighting--ce6d152e-d55c-4109-ba02-a0b0b5c3a87b", "sighting--b8290fdb-04d2-46b7-82e6-58d722c90f3f", "sighting--f0427ffe-a7c5-48f4-8486-f83e908d5bcb", "sighting--fc4a67ab-48d5-42f7-8a74-1cd82e037e38", "sighting--7da6fcb0-1c64-4af0-9fac-73dce3ab68d3", "sighting--046be2bf-79d0-48e9-929e-8995a04b9608", "sighting--5117a5eb-19e4-4e29-882f-cabcd1177c6d", "sighting--88da46c0-13d8-4d7e-a7a1-680add82db5b", "sighting--ca9b1565-9c68-4b44-841d-1ab6aab0e01e", "sighting--1d1721ee-0c7b-4a2f-a117-ebb186004e59", "sighting--a7e570ae-b19a-45d5-b11e-d23705bc73f8", "sighting--ad4fe963-34ed-459f-803f-e2cae7e293b1", "sighting--c3d6a505-1ba9-496c-ba89-fae9901c2864", "sighting--43cde0e9-a057-439b-b1e3-bf7a9b2aa842", "sighting--3e2e1aac-9a5e-4f64-ac64-698dbbaa1451", "sighting--3e624d8f-1a89-473a-b58b-4577877100a0", "sighting--f56639ab-1153-4c84-8ee3-717dab9034b6", "sighting--1a7ba6d4-f572-4ba5-9967-b7fe8af775b3", "sighting--47780f51-c145-44ca-9927-22ee00bfcc87", "sighting--fd77732d-0708-4e2f-b54f-4e6857f36a21", "sighting--70c8da30-8b6d-41fb-9f33-37fe78f5b488", "sighting--12f221d9-91f0-4930-bb25-6954bcf002cd", "sighting--a6e688fa-04c4-44bd-93f8-c5e0fe9dd902", "sighting--c93d4f0b-44be-4c18-bb71-f6f8d3c29f1e", "sighting--1b4afccd-44a5-4fbd-bcff-f29b749a4078", "sighting--bb9635c7-ddd2-484c-8496-d2fc304f0d1b", "sighting--c85983db-d225-42c3-8e87-d3a7f9e8e074", "sighting--4848d54a-7eee-477f-b246-086e66074bb2", "sighting--72ce061f-ab82-457c-baeb-2b3293b1e466", "sighting--d6e75a9e-8d24-4a71-9cf3-58125205e611", "sighting--f5e678a4-ebec-4e5a-9842-ce44af647f04", "sighting--a4f4f4ad-a8c1-425e-a0af-94549be22dc0", "sighting--01c1d45f-418f-4bf1-9232-bd7e03ad5628", "sighting--89ad97d2-19be-4953-80de-1a29c6076d40", "sighting--50371dcb-ac82-4c75-9f47-08451a3105cd", "sighting--6defb1e7-1112-416c-ad65-34181a811f98", "sighting--0b3594e9-6fde-46d3-9bcc-1da7a19b9d17", "sighting--4262ee2b-868d-4197-8561-da55b7f90b75", "sighting--119de41e-d400-40a2-8e9e-aa7b2cdb1eb2", "sighting--32fc5568-c12f-436d-b9a2-3b8ab8df80fe", "sighting--5013708d-66fe-4ee9-9cb9-a4e7aff5887e", "sighting--d98b8232-781b-4680-b78e-0ebcea72366f", "sighting--ff7dd49d-1c46-48dc-83e7-47745ed7a265", "sighting--275813b0-6d02-4e67-a7a4-9b8a58ce043a", "sighting--328a7d0f-f746-4ed3-8468-c348e4fe3c8d", "sighting--3b25c6ec-4e13-43f3-848e-4c6b710fc3f0", "sighting--4b14319f-fc9f-43df-aefd-4401907a5976", "sighting--e1a43e91-c5bb-463e-a9a9-1071ac0d2903", "sighting--e97787af-17bf-4130-a1e7-ec6775f68e26", "sighting--9e10c0f8-e233-4fc9-a60a-adf13c621710", "sighting--10c2a786-978c-4da8-a693-4702e253d303", "sighting--794f3fc2-f64c-4264-93c7-f8ec35d68cf6", "sighting--f0aa07f1-afa4-4e76-9867-7d124fc42ea9", "sighting--6a8342c8-8466-40ce-9a0f-7c1d4f01360a", "sighting--5830716e-fa23-4888-8c84-d6efd4572006", "sighting--6623a774-ec66-463c-9a0d-a669247f7c2f", "sighting--f25af561-90b3-4971-b815-54a7ace67529", "sighting--ccce945a-7e10-4637-8c7e-36df40426fc2", "sighting--ceb49965-5fdf-481a-97d5-797aeffc3b68", "sighting--5da2fef1-77d8-4a08-8902-39d9a7728e60", "sighting--373a93c9-f6f0-4e7d-b26d-05ebc916168f", "sighting--a36d8cea-8ec2-4811-b6aa-56703ad9dac9", "sighting--d59f7a99-1173-47b0-a70f-4278a106bed4", "sighting--81e7d9b3-d3f9-4963-b471-0439c1a64ec9", "sighting--5567d12f-7e8f-4efc-9b4a-b9565810bb82", "sighting--89c8b75f-8abe-470c-99a2-908d345f29ee", "sighting--c29c0a87-a2b8-4430-bd7b-4c5d9eff7099", "sighting--62c9aa48-e729-4af6-8b3a-c0db2dae188f", "sighting--1aec477c-19aa-4004-ae4e-a5869ff12c31", "sighting--30ab7871-6c69-47cd-ad93-1b5c834e4489", "sighting--3f5e3db9-e716-4f5d-a0da-71441aa4230f", "sighting--8021fab3-2b45-4af0-a363-aa22245f2f6f", "sighting--04eb21ee-5a0c-4393-b744-1dabb7ebfd93", "sighting--95e1ccb2-8513-4086-bcc9-763154850013", "sighting--eca97e37-7506-4d6b-a994-8dfc163e86c8", "sighting--91a21651-bff4-47cb-a505-c1bae139b7dd", "sighting--66b9216c-473a-494c-bb3a-71c43cc387ef", "sighting--5b61495e-0853-48c0-a70a-93544bf3188d", "sighting--1940c43d-a9a9-48a9-b6df-d778b297c99e", "sighting--a3936dac-8669-4731-8d51-d80b6df0b86c", "sighting--99b4afe7-011e-4f3c-8c8a-1a75177aacce", "sighting--99d23c0b-d8b1-4fb4-9148-a9516446def5", "sighting--264ae493-b436-4a3a-ac9d-c7d2f503fd59", "sighting--a24ffaf7-d0cd-4da9-9f1c-3f910f718148", "sighting--97ce6c8d-9a37-4a97-8892-4c8e5fb9edac", "sighting--829c8c7c-400c-4f83-9cd1-a700e21259ba", "sighting--8895327e-0339-4d5c-a4fa-d3d101494c5b", "sighting--277cd9ba-4e6b-43de-a177-9162ecf7d314", "sighting--8071fa26-c416-48ef-a6d0-b19112d2a3fa", "sighting--87e6ba01-6f9e-4655-81ad-350ea94cfbc9", "sighting--19ac30c2-f32e-4be5-b937-46873657cc22", "sighting--87cf2007-9b79-4a79-a778-3b41f2981f92", "sighting--2920e268-7cda-45d8-9a97-326ca6e8c503", "sighting--1dfa7c27-dfb9-43a6-a645-430981cfde7f", "sighting--8571a0a1-018f-4232-862c-29e4eef3952b", "sighting--8c4a4d79-1e5a-4596-8d9b-4a35fe0676d3", "sighting--5e7dce17-5ff0-439b-8ac4-226cc655a9bc", "sighting--d3d03095-8b60-41d6-a4db-0b4a8090bab0", "sighting--a4acce58-ffa0-412f-be29-f098bbb04ea5", "sighting--35e404df-c148-4441-81bd-83571af07646", "sighting--a0f82f74-54a5-4700-857e-20a7a9341962", "sighting--08bf7542-3c7d-4c00-9971-5df7a27bb61c", "sighting--6ee88d47-ab13-4731-a77c-6d4d1af9d22c", "sighting--f67bdc17-f4e2-4208-969b-dda834484e61", "sighting--761c4b7c-1a8d-49f8-9833-c135480ebbc5", "sighting--06bad9df-a255-4ad3-87a1-006e46c38577", "sighting--7713faa3-c188-4f45-a90d-eab1ed0b07cb", "sighting--5ebabdd8-50ab-4a1f-83f5-6eda23aec0c7", "sighting--681f4c93-eb38-4b2e-8ba7-d951021d3148", "sighting--0f59e931-7702-4f7d-a998-fb90cd57ed71", "sighting--0718cab1-a250-4164-acfb-b46bfccbb72d", "sighting--83ab561b-4125-45a6-b9dc-f297832b13d3", "sighting--0da4dd88-5b69-4005-9b62-f8e59cb231eb", "sighting--2c89c6d1-c51c-4a6c-8eb8-7dc9c766800d", "sighting--2c62c788-55f5-4b23-8e4f-6f1b2a914c74", "sighting--8a3ab319-6558-470b-94ef-fbb97b890969", "sighting--7f1e3df0-46d6-4791-9c26-e0ca32bc55e6", "sighting--c445cdfc-ea0b-4847-8817-048b354ea938", "sighting--23b5650d-4ef2-4f74-9773-a328058f2af3", "sighting--f4891230-f191-4d60-b2bd-f5545b68efca", "sighting--2ab4d639-7f9c-4387-8adf-c8e59e0a3c7e", "sighting--d63e7e9d-451c-4647-9980-f0ee6f3dbe17", "sighting--7bfc2bc6-d15d-43da-bf63-89fdb0295cd2", "sighting--d0c682a9-e0eb-4cbe-9451-23e5ccdb9a20", "sighting--682295b1-8820-4240-a53c-66b9bb4264a4", "sighting--fd024ecf-b9be-4e0e-9562-5e9b21e4bf58", "sighting--8de64160-e18a-4cfa-ac49-cc359af565fb", "sighting--8e0799e1-57ea-4cd0-b043-e81da50ddd6d", "sighting--12414c67-a50e-45d6-ba29-56fdd3823359", "sighting--9addf8b2-61e7-4fba-b8b4-b52cfac3fc0a", "sighting--36ba1144-0fca-4cef-bd4f-fea3859da6a1", "sighting--dd535cf4-dc51-494b-9937-1b361938aa9e", "sighting--5390b53e-ee1e-4e55-a830-d572d3fa1de7", "sighting--789325d5-e2aa-4b1f-b0fa-2cc3095d3f40", "sighting--e5c964d7-d3a0-46fe-8e94-46a3a95c8747", "sighting--39ee2630-5e8d-49c9-b428-c748984fe91f", "sighting--edcae2b6-a29b-4640-a322-880b2cac95ca", "sighting--61d254aa-a2db-44ad-98a9-405376c5b956", "sighting--4947fc30-4d4d-4f66-be9a-198314a0a40f", "sighting--8443e76f-3bab-4686-8153-6d00310288fd", "sighting--00916d06-afb8-4bd2-b33d-ebf71355e33c", "sighting--9cf228ae-02d6-42d3-b623-4057d1cbf4a7", "sighting--7c2d018d-3755-4a8b-b339-0fac03aa3e11", "sighting--b082960f-c13c-4f82-a92b-b363b009a3d9", "sighting--c2dfca66-30cf-4e57-b9cf-9155a26ca4c1", "sighting--a9e8f967-9578-4a5b-a634-7052d4107828", "sighting--229bf5c4-f80f-407f-af3a-38ee6001a2aa", "sighting--8efb031f-3c5d-47a2-b68f-c4ca0cb98fba", "sighting--2ddb395b-dd96-48a8-8d5d-6aacaa7b09a7", "sighting--a690ee45-c619-4172-8b11-4de1876f5e5e", "sighting--1db3403e-721b-49f2-9780-690ea8d42750", "sighting--34160304-5b9f-435f-b8ed-5acb13394a2c", "sighting--f21cc313-e850-49cf-97a1-9d4a568c8301", "sighting--6d6ff842-c004-4be0-9b33-f616dfa8d6b7", "sighting--68e592eb-dbfd-4479-9a83-a86685e922b7", "sighting--962f43ab-44fa-4c20-a7d5-f204679cc701", "sighting--0ae5473d-7279-4d47-93a2-e4f168edbabf", "sighting--6fcf973f-c9c9-46a3-ba18-a802120450bb", "sighting--a0f5659a-be9c-4a89-a6fb-d31c670fd679", "sighting--2dd073c8-f322-4772-b1de-430e3620ac10", "sighting--0b0a1672-dc41-4c75-9eac-907dbff96650", "sighting--3933423b-2fca-4457-b548-cf903865c2f0", "sighting--6f151145-d104-44ee-9e40-d674d08139ef", "sighting--c264e42c-268e-4787-8f45-1e1394e02d1c", "sighting--baa24616-f742-4e1d-b1d8-61fcece33ad8", "sighting--a4aa72a6-34e5-4a67-a2db-d422d3c58762", "sighting--967a0a0e-1230-4f0d-860d-8c1a5748fa57", "sighting--87e2afa2-e87d-4f31-888f-bb768aec6c7e", "sighting--5b05f1c6-636d-40e5-bbd5-cd1154b3ab6a", "sighting--e57517d9-eb3a-4ef6-8a85-43980a2f960b", "sighting--58acf552-7ce9-4da2-a6fe-93bf87cccd02", "sighting--035d51f9-8984-440f-8d96-d5ee3dfda0b4", "sighting--ab8a154b-e4c2-42ab-a821-25f738860d9e", "sighting--d233ad9f-16a7-4536-a2e6-9ea18fafb39b", "sighting--68da4ee1-5b46-4fb4-be38-9348fccc4458", "sighting--e3572535-20c7-4bf9-a5b9-c68904baffce", "sighting--0e0233f8-a01e-479a-a166-d7eda85387b2", "sighting--445fbfb3-ff96-4068-bee7-d4aef3549a1d", "sighting--11a5ed63-2eb6-40ea-85d5-79339726ebdd", "sighting--f918c2b6-26cb-47a5-9e32-89f48513cac2", "sighting--5e783922-466f-462d-960f-1ce9cf51ecfd", "sighting--f4bc425a-a9fd-44ad-8631-453bfeaa7664", "sighting--43b9d7ec-1ebc-4a14-97db-1bd89b1e4326", "sighting--c04b9ffd-7141-470f-bb35-b492706b0a97", "sighting--195b7418-167c-4c73-899a-67bb602b8116", "sighting--37e42a80-4606-4e27-a7ef-cc4bd066823a", "sighting--5124f208-6cfe-4683-b4a9-26eddcfc6d09", "sighting--885ed1bb-160f-4bee-9c65-6e2939b0401e", "sighting--0ab98f6f-3898-4a47-bea0-07cd1cfbbaea", "sighting--27d71dd3-84b7-4ff8-93b8-4adf003b00ea", "sighting--c9ab981e-4d5d-4733-9e33-41310907b131", "sighting--a92fabfd-933e-4629-b911-f167911023ad", "sighting--3033ecce-eeab-4f35-9434-c38ef0f52209", "sighting--98a83e1e-1f2a-4ef9-b985-9d5b0244a852", "sighting--20255f7e-c208-4010-a554-435b35d854a4", "sighting--5a28422c-e64c-4e4e-acc7-9e5aa5e59c13", "sighting--3ebd698e-84c6-4fd1-8361-8313476f4505", "sighting--7f179565-3bce-47c1-886a-0b1372bc56dc", "sighting--89211b98-3f66-4d64-837c-4cc47f13873a", "sighting--c00be757-5ab3-49a9-b4c2-b6f126bc7f48", "sighting--2ceef488-104f-4de4-8b7b-f68ad6a368f1", "sighting--09f73ce2-3b1c-41a5-8d6e-f8b369b5ef02", "sighting--8d048bde-f92a-47a0-9d3a-0dafda53077e", "sighting--67e58c33-a2b4-430d-9668-e811516e0736", "sighting--edf7e2bf-add8-4742-8765-ff426774093f", "sighting--29aecc63-4493-4932-882d-5e2d56773706", "sighting--06a45dca-a69a-4214-b9d3-31430fba903d", "sighting--7d96935c-dc1c-430b-945b-eff669b5059f", "sighting--48a1d568-4dd7-45b2-8cad-78c6006a2fe7", "sighting--142e1394-50a7-4932-bc28-97e683dda2f2", "sighting--bd334f8b-c531-4e99-90b6-3c786196bd29", "sighting--fe0f38af-ad8c-40a3-875c-91f82c749940", "sighting--1b25ef97-ebbb-4093-98f1-f2adceb9641b", "sighting--35637809-ce7a-4d3d-8430-5bd51c6d7e51", "sighting--a393c98e-63c2-4ed0-b045-e80db0a3dd4e", "sighting--a612e402-04ed-4726-a859-86107ab4f7b5", "sighting--62b18f53-18c5-4e37-97d4-74f303930dd5", "sighting--98e372e3-25e6-4c5e-8caa-8d3586fdf298", "sighting--42dbf646-468c-41a2-b267-d8530335151b", "sighting--ad209322-9bfe-4ed0-89f5-abbf04ec17fd", "sighting--51703f76-2604-4663-8c8f-7b62da9e8de9", "sighting--e0447b50-7ced-4813-be4c-4df56a0f910a", "sighting--eb51e2a1-5ebf-450c-9d64-dbf2f604e78d", "sighting--67f92f75-0150-4672-a87c-9db2d6b389a2", "sighting--677a0689-0c99-4553-8f66-e2ca9ac96d55", "sighting--962d53dd-7828-452e-96f5-2e5c5a7851b0", "sighting--e58de9e8-2419-4163-9038-de09a49d3064", "sighting--5b327c95-7731-4b39-8dec-6de45655f59a", "sighting--ef5d318e-138e-4ef5-9352-42bc2e69c3da", "sighting--ffc63197-5bd2-443a-9f14-ac67498e1319", "sighting--163d5ae5-8a5a-49d6-8c73-3e88b91ffc5d", "sighting--6e8f127f-ae5b-44d0-8fcd-769ccd275dfc", "sighting--382e32fd-d3ec-4c0b-942f-50771e53c740", "sighting--1fbecd28-b0e1-43c1-abd0-cfae2a1ea8b5", "sighting--46af6c84-2c81-4809-851b-94421d96f556", "sighting--85c05dce-4aac-419e-aace-f81d0c7aa64b", "sighting--9c097c18-fcc9-4bb8-b0eb-e432fdd8fda1", "sighting--2ee00072-4e9a-4213-ba1b-c7dfb6a2a628", "sighting--37b1c4c7-2940-4866-9ee3-0965107dc2c3", "sighting--9733fdf9-4810-4667-ba8c-a001fb1df888", "sighting--2b62cd1f-69b2-4063-94a3-28ae960e6142", "sighting--689e8338-f54d-4c41-b190-51d2b7eb9d51", "sighting--de1982b2-2286-4f22-ae63-79faa4461389", "sighting--eb1c47f1-6960-45c1-b069-bfbdcc53fd5d", "sighting--b243f8c1-7106-406e-bc66-796c3c17ff8b", "sighting--84a1dead-5744-4670-a06f-546ed3145d62", "sighting--7418daf4-e4b2-4c76-95ca-aa7c0c9636f7", "sighting--6142c47e-59ae-4e46-b4a3-0fa940d3c599", "sighting--5680e5ff-ba8e-4215-900a-bbf60dbfec78", "sighting--7f7d251e-7171-4721-82b7-23577df6c33a", "sighting--932df4b2-b69e-4355-b5aa-1707db01d70b", "sighting--e9a48246-332c-411a-ac76-366fe55d049f", "sighting--47e22bb2-dea6-4769-aaea-0c92b8393db0", "sighting--a3306eed-6e9b-4aa2-a2cb-f73a8a8b69bd", "sighting--ff691d61-e7c7-4786-810e-70108902f338", "sighting--27401ca6-1c8a-48e7-8712-97f27085ac8d", "sighting--c6589b15-aec7-4047-8219-a69df3fe0741", "sighting--ca38e2be-4eb5-4b4b-a743-dd15d7681976", "sighting--40f466bc-7bcf-49dc-98d1-a77ef5fb11f3", "sighting--a6b9ebcd-e029-4d17-b1db-ac7f3444a109", "sighting--4c1256f6-e5fc-451e-8e64-f2274d2a438c", "sighting--3abdfd32-2f03-4509-8bc3-16b8ea85fae6", "sighting--890ff64a-6e53-40c3-b636-8f2298c43e81", "sighting--edbc038b-4932-4a2e-8873-7a274891eb93", "sighting--09f506d0-61db-49a3-aff3-00bbf1b89960", "sighting--6e945974-95e4-436f-a6a8-fd9b5cae0c8b", "sighting--c4ee6ae1-37e6-45ea-a036-acbfbf72f8b5", "sighting--43a9b173-a904-4fdf-9a15-0409eb52e5b9", "sighting--24a9c0ba-4aed-4c7b-97e1-0692aa1e2f40", "sighting--6421b64c-4144-4ca1-b8ea-68c7ead37859", "sighting--be7f54e6-b315-4569-8368-f4c41a5d5b43", "sighting--11db5b26-50dc-4cbf-affb-5c23e30388ad", "sighting--ff7314c9-e686-4193-988f-82216f8f580e", "sighting--8611c7e8-c779-42bb-b319-40f50d0d6950", "sighting--e58691a5-9837-49fc-b297-6e79baa55f34", "sighting--50d9aa1c-dbd4-4783-8d88-8779dd4f4fab", "sighting--9a94be95-d0b8-4a39-986b-7021ca7d5012", "sighting--c0a49f41-0337-459f-864b-4fbaa21ce3eb", "sighting--188a6153-d925-4ca2-8a4c-68b0cd23bcdc", "sighting--959cdfd4-24d2-4af5-a453-81eae6b3a3ae", "sighting--c17c3780-d3eb-4fbc-8087-d63ec9c88c31", "sighting--792c212b-3b5a-47d6-838a-c7a76557a791", "sighting--043e11f6-98a5-49e4-aa7d-bae9c3253fa5", "sighting--cd2adbbd-77e7-4129-86d7-3330caad4010", "sighting--8a484f9a-4ac4-4503-bd95-d4e75029a4d9", "sighting--2cb3b910-326c-4d29-ba8b-17bb2f50a4a9", "sighting--cd5d10ec-2ecd-40c8-a5bd-17953210f737", "sighting--df01b89d-e15a-45c7-a0a7-09cd904dfca2", "sighting--66bab8ab-d30c-4aa1-83f6-a84bfbb5baa0", "sighting--84b109bd-3c19-4dc0-a900-2f420cdf0d7a", "sighting--ff6f3b5f-c1b2-48d0-9d80-b9700ef6df7b", "sighting--d2a73686-f9ac-455c-9221-a0c19dffceb5", "sighting--2cba7f04-7d64-4a53-840f-1b0f3ec74bf2", "sighting--9351be12-ca95-4bed-af6c-e0fa87c4143b", "sighting--539ac05e-1ac5-412f-b388-aedb40cdcb9f", "sighting--7bf48b89-4f06-473f-92ce-3190ec17f63d", "sighting--3305b054-075c-4029-a40a-f4b7da437e9a", "sighting--4d2a3ae5-2627-4d01-9c6a-4c849d55c756", "sighting--6d20afc4-11cb-4760-8ffb-b4107dc5c11a", "sighting--2dc21caa-4cd6-47fb-a39d-e32148db2fa4", "sighting--23494932-9179-4c64-91c9-1d8718dd7274", "sighting--2a82448a-2d15-4689-972c-37e7edd6107e", "sighting--a0897fd9-a563-48bc-982a-4b10ab176141", "sighting--086e461f-55a9-4473-ad5e-d9dc175780eb", "sighting--a0bdc147-e8e7-43f2-b327-ad56cf1d6fe7", "sighting--3a8b45c1-6f5d-4f1e-97f4-64b85e1d7445", "sighting--f4f30369-c28e-45b9-b900-bd15613c73af", "sighting--6bceff04-ae75-460a-8a43-5db86de7a06a", "sighting--a962ad04-c282-4fd0-8711-629a3de2cfcd", "sighting--ff676a7e-01f6-4158-a14a-8b1c4c24e500", "sighting--ca4a51dc-b954-45ec-bc59-557bd64a08bb", "sighting--ef24af0a-0000-4d71-b3e8-4a5a4ba8bfe9", "sighting--f78bfa35-5d26-4d89-a39f-cedbf8085ab0", "sighting--9a537370-64a8-4156-aabc-790c13689b96", "sighting--5e7e7461-60f6-41e4-ac3b-46644575bb21", "sighting--3b786300-526a-4f37-8215-47bc19289dca", "sighting--4b0a2925-0813-4c59-84d6-4858b358ac0d", "sighting--ce1b7d3e-6f1a-4a42-bd4a-d9188eb91c25", "sighting--7b4444d6-089a-4cc4-bd3c-8e2aaedee6b8", "sighting--517e2583-cde7-44e9-abe9-b1dbee3e5292", "sighting--8f0a7081-db7a-4dcf-b6ef-a5288a358e52", "sighting--2a1c52af-b937-41da-8e77-d5eeff892b67", "sighting--706f2e3a-6729-466d-915e-a55a0afb26f5", "sighting--9b276b64-82e4-43c5-9323-b3adac9faef5", "sighting--0a3822bd-8874-4f11-ad2d-512d4304b3c8", "sighting--b01d8245-14db-40d1-9ee7-9b619ff7d8cd", "sighting--68ae34b1-7cbd-4b28-9874-d003ce399ed5", "sighting--380d658b-8bb0-49c6-985b-52744619d52f", "sighting--e7178501-ca34-4b28-b1a1-42e68795f75d", "sighting--cdbca1c9-58ba-43ff-9fc6-7c12bdd2a89f", "sighting--14456672-c72e-48e5-8d70-5d1cc0398367", "sighting--e2cb3bb7-b24f-4ce3-8a99-5a1671f7f9da", "sighting--751693c3-0a3b-4f28-bfa1-cd236f4c913c", "sighting--7bb5c889-05b2-4314-b426-fcfcb01d07fe", "sighting--321d8795-dc30-4bfc-9502-a37511540661", "sighting--0051e970-c6df-41f4-a712-184fad461f6b", "sighting--37bb8658-281f-4c4d-be04-1184e5086c4a", "sighting--cdf6f6b6-73ae-49eb-aea0-fbf237342b02", "sighting--da8d14a7-9154-4471-bdf9-4877ed76b997", "sighting--b2e52fc6-e21d-4299-b635-50326acb31c7", "sighting--a0c26a92-f333-40a5-b7f5-c7e1f1ddca19", "sighting--0a09c032-56e9-46f8-a240-cb12d5fcbca2", "sighting--bf141ffc-e16e-4cc2-827e-8c004b1d94f4", "sighting--a19c29bb-292d-4783-aac4-bd4421ee2ec8", "sighting--d483b261-80da-47a5-99d0-2fa8ed923986", "sighting--4e72cbb5-2f11-48ff-84c4-f60ecd24cf38", "sighting--950d4ac9-7d17-4eb4-9a68-e25bf4d18616", "sighting--8b1c3bc3-a2ec-4fd9-b7cb-ef1c599fbb40", "sighting--71c9c808-5909-4040-a946-2f593bb5c882", "sighting--22973669-73f7-429f-a8c3-c8c5658b3854", "sighting--723efdf2-19c1-4ba8-b440-aa64946eca34", "sighting--00f91d93-fe82-4215-bb7f-26d62818d3ad", "sighting--a4185571-1cb7-4d11-bf89-8760d33bfca2", "sighting--7c4c6711-a324-4191-99ca-cf774140fb94", "sighting--9f4f6123-2dde-4707-88ee-424084964d53", "sighting--79331955-42fe-4521-a1af-7c9cab0f1a11", "sighting--ff4db0dc-cef5-457a-a5b1-0f153237685e", "sighting--73e0d0da-b423-4471-bef3-e8ae3902c93e", "sighting--e43909b1-0c0b-4b20-bced-8054e53c8b79", "sighting--a2e0e118-719e-418a-b463-2c7116144e8b", "sighting--f482439d-0d78-43ed-b6a7-3e905c83fb01", "sighting--c92c0ae6-0c36-4c16-850b-abc53bdcde83", "sighting--650717f0-a8af-4970-b50e-f2422964d857", "sighting--004771f7-5be8-4a93-bce3-c9f5b9719054", "sighting--2a748369-f608-4ef4-9a7f-1c87e071c974", "sighting--64fab5b8-34bd-4eb2-a8c5-d3d1b4bf30e1", "sighting--cc92b3e7-0bc5-4f53-a493-7c700e738814", "sighting--0cf6d105-b185-4e97-96b2-24ea7bf8b38c", "sighting--f0aa5aba-b9ea-4e2c-9384-6e9bd17c9e04", "sighting--2589c73c-99ee-4e53-85b4-7caf38f7e5b3", "sighting--f89e38fe-0736-46a5-83f7-8bdd2001e632", "sighting--7b2b7330-3f9e-4746-ac6f-ba29832686e4", "sighting--33d7a0f6-f138-471f-ac7f-9b6c24da197c", "sighting--d91cb8da-c86e-4a44-8d4e-211fea7e2111", "sighting--8246f9d9-d89f-41dd-add2-7f762e9dcd37", "sighting--eea95045-a3aa-4880-9be2-d2076f2af047", "sighting--29ee35dc-367e-47a6-9134-cbf1f134d96e", "sighting--9da57a4d-252f-4aa8-810f-fce3f2a42b0b", "sighting--731518eb-4ddd-4348-bb46-38fe0079682b", "sighting--2aaa173a-daf6-4254-8299-6900ea2f7d5e", "sighting--f58916d1-f6dd-4175-86f6-484d7d29de9a", "sighting--b1528a15-d165-4016-b862-dc1fa9f9d883", "sighting--2761e484-593d-4962-b3c7-8fdfabe64bdf", "sighting--9f021ec9-209a-4611-b885-aa832cc261fe", "sighting--92864312-d4ff-4505-b2f1-194aedb46eac", "sighting--e47c626f-b458-4c8e-bf24-35c89933a73e", "sighting--ab585c8b-18f4-46c7-9177-b2db8a418996", "sighting--5b4f8b74-a5fc-40b9-b3fe-4d430d58fb38", "sighting--1eabb48c-c01e-48a9-8008-c820be25b1be", "sighting--24522fbe-21e8-453d-9f50-811ea0b728c7", "sighting--41f561d3-52f9-4cd3-89d2-e86fea541d68", "sighting--68ab2712-9bcd-484c-8683-27ef66f4bff8", "sighting--1dd5c92d-9cfa-4be2-b001-ecdfa24d33f2", "sighting--70a8930b-e567-46af-950f-fe4292380550", "sighting--f9fdd321-b8df-45c6-8c7f-ab1202716ea9", "sighting--52020afe-5170-49b8-b2b3-cc4b912aa874", "sighting--8a04a548-49ac-4cec-806d-8e4641bbd7f4", "sighting--ce789783-ea9c-4c6d-a238-e19c5b0d5a0e", "sighting--b71e56bc-d9ae-42c4-8c62-bf7df197fc69", "sighting--f2a9ccc4-d577-417c-8f38-080380c69e81", "sighting--b5e2147c-8cc0-4794-93d8-1fb5cfc95aaf", "sighting--0871ceb9-2991-46db-87e6-a583a4b1f7c0", "sighting--fdbe8f70-85d2-48bf-97ef-5bd8830b648e", "sighting--92374055-f82c-4b5e-9c72-f81788e839c8", "sighting--49bd4dc2-692d-474f-bc24-06ad77fb895f", "sighting--100f1886-0976-45e9-9e06-f0651bb72ecb", "sighting--4980ad90-d666-4d50-a4d0-4491083a2fa6", "sighting--9bda9c06-28ca-4432-bc22-988f69f0d21b", "sighting--74e4e363-3a00-447e-963c-5f85f7c89df2", "sighting--6e2e9a8d-ee9a-4c76-a2f8-0f3b38edbf09", "sighting--d4a8e6a4-0ae6-45ae-a77f-8fff93443792", "sighting--477038ec-ee2b-4b94-ad8e-a2c941c8e211", "sighting--9263bdd2-3ecf-411e-8081-b844a6fe0157", "sighting--c675f22c-6fb4-4631-bd9a-00b27b2ac16a", "sighting--8cf5e2a2-3d25-4539-abd7-dbb7185e684c", "sighting--63b723aa-8d9b-4069-bb76-73b70ef94377", "sighting--a9fffcd3-8ced-4f01-8daf-648925433299", "sighting--a721c757-2441-4b6c-85a2-19229803b749", "sighting--6490760d-2b09-4a80-a165-49f46c19fd10", "sighting--cc5d5f46-ebe0-4f68-a1a7-a3bc97ef99b9", "sighting--68e5eaf0-fc43-4a7c-9703-b781c5f5482d", "sighting--e64136b9-423d-4a49-ae27-be9ec142f5f0", "sighting--bb0b861a-af67-4fe5-ad39-471ba22a6291", "sighting--aca08369-b9a2-4096-bbba-d02e13aee79b", "sighting--175e9da7-d06b-4a0c-9908-173f094bbf83", "sighting--af76ed6c-e755-4119-bc48-ed3c68de940a", "sighting--2e1254d9-d781-4ab3-a162-b2017c15eaeb", "sighting--d3515a96-7ce9-4d7b-95b0-0faa10e1229c", "sighting--91cd51d4-f73d-4baf-88c5-1aaf432326ce", "sighting--b5557dde-84e0-4c72-905b-96689cd5a6b8", "sighting--daa5abda-e89d-45a7-a773-04a2bd26ee3b", "sighting--f4717c7e-6a29-4a89-a04d-4311ab48a7a6", "sighting--0d481ae7-0ecf-448e-b544-5785dd337352", "sighting--364ddf0b-f485-4e98-a502-6a48bc25d3cb", "sighting--ebcbfb22-752f-44b1-9ce4-e6e3205b3cd8", "sighting--1244cf96-c42f-4f01-87be-30eef5d9c5ac", "sighting--90e491b8-d2f6-4e15-ad81-73e535db3c57", "sighting--58b280cd-adac-4ee3-8cb4-1289c9d6911c", "sighting--a366fae2-3890-48d9-be0d-bf1b567ba2cf", "sighting--7ef7a9a3-429c-4c6e-82ab-636c9612542f", "sighting--6782f005-3557-4915-8b1f-112339f9b003", "sighting--0cc4dbb0-dd51-46f8-868e-e9aaea3e6849", "sighting--e483d4c6-4f24-4ad9-be01-3a5ec9a346cd", "sighting--fc20859c-4f6e-4fd5-a8f4-8091e787359b", "sighting--e3d19b40-aac0-47b7-844e-84cb6fde13b6", "sighting--a58e1292-1e3f-446b-9891-cd438b251f9e", "sighting--ee9c6ed9-7ddc-47ac-99a3-c77d10ef633b", "sighting--406b23b3-d605-468e-bb85-5f230527ba1f", "sighting--9f2cb597-8ec2-4f91-9477-64509739114d", "sighting--6db20ec9-817b-40c1-acdd-5449974ea656", "sighting--0827e3c2-1da3-4a04-8455-e526962ebb05", "sighting--ba1d3b1d-6b43-4cdf-8037-7a7fabc82593", "sighting--2c2a3e97-2594-4166-9424-6db320b2b178", "sighting--118c850a-f582-4819-960e-cec90d116e13", "sighting--7fb37478-c630-4f06-bbc1-efa1023ce96e", "sighting--f75ad05a-f59b-42b8-a3c0-906d3d83d476", "sighting--b2dc1351-feb4-42bf-8fd6-a0c72b3007d7", "sighting--dc657f75-5a08-49b6-a6f3-74d2393d0ab8", "sighting--6fd45e98-0e05-41fa-ba59-53a092e8b8f7", "sighting--80bd1c1d-0b30-4c06-a64e-42ddcdcd44d2", "sighting--958eeb15-0706-42dd-a7f0-3e341bcd5a33", "sighting--2a79af9e-630f-4aef-b260-30c99e924fc8", "sighting--a88c16fc-646c-473f-92de-a6f0225cc280", "sighting--5e744443-8f65-4925-80d6-9414efa5f909", "sighting--b0d79014-8397-4914-9eb7-7712d84c0435", "sighting--5f65098c-c9eb-464b-9be8-8420de943809", "sighting--63eaf8a7-7bde-4da7-ac4b-db0e6942c654", "sighting--a7d508ce-429e-4286-a89c-c82dc72669f2", "sighting--9124a65e-7442-49fe-b83c-a03f55a0c6a5", "sighting--51cdd3cd-fae0-467f-8113-778d3665628c", "sighting--8c1f3d81-d9d8-475c-98c6-7fc1d3deafea", "sighting--e841b1c2-d9f1-4aa5-b9e5-a8647a183972", "sighting--5c8d4763-11f1-4d6e-a7c6-df3234c50121", "sighting--6b403ae0-addf-4560-8532-59fee3fcf103", "sighting--d2a504c8-fc11-4dd8-9e42-dcf99a43d49b", "sighting--f6b7f5b4-650d-4b9d-b1a1-522b4807053b", "sighting--c22752a8-0b63-4796-a2bb-5072f325c94d", "sighting--d64cac64-67b7-4887-bab0-350f555420db", "sighting--26554b18-deb7-47f0-a2d5-d1b280720f81", "sighting--c4376b16-b12c-46de-a1fe-8c7b46434c7f", "sighting--c5a53c82-83c8-4636-bfcf-4e7bce3069bf", "sighting--3a8372e0-ab6a-4b9a-8118-5a1ede8f9aad", "sighting--edebb1b2-2ea4-47b2-878c-3224efa5ead7", "sighting--fbad4735-08c1-4bdf-a704-c903b3cd0e78", "sighting--a72f7f58-7fa2-45ae-9ee4-006d13ded6b3", "sighting--94d84b93-a160-4a6a-b995-dc9a82d0d505", "sighting--e5a90e3d-bc44-4ec0-aa7a-11c29822e17f", "sighting--53b1b0e2-75c8-4dd9-b170-cd5bd644eede", "sighting--4ea78e74-5086-447a-a9a5-4e58a32b2018", "sighting--c0670f05-c27e-4326-be64-c2d7605cc136", "sighting--a7efa62b-7552-4d30-9a1b-d3f48bd57cc4", "sighting--185436d1-7572-4c3d-bab0-830d3cccd80e", "sighting--06848deb-8bf6-40a4-a217-ae69ab5292df", "sighting--be27a50d-03e9-4fa0-81fb-ae93409840ce", "sighting--a668d01c-ccba-4374-8905-7bb5d994ec68", "sighting--e27bf976-4167-4697-8361-9702dce95f76", "sighting--fd827171-78c6-4ba1-982d-e312b7d1f318", "sighting--6b743b8a-fef0-4e40-8390-ccb6396bf7bd", "sighting--74cc87c7-f452-4e05-8dd5-294a3e4dd120", "sighting--a980e479-355a-4ce5-9618-3b7562780064", "sighting--799b40b5-897b-42bb-aa9e-9911fdec5678", "sighting--38059707-b528-48e9-affc-b370d011aeee", "sighting--c656fe06-584c-49b1-9375-5a0e2517df23", "sighting--a1594838-3c86-4d59-999f-4e96a76c14e6", "sighting--31581239-c5d3-4bd7-9fbd-20c3457b92a9", "sighting--83334dd2-01af-44c2-9ff0-08cdeb365f3d", "sighting--fb4179cf-3c56-49bb-8212-59d3d9d5cc7e", "sighting--6873e75c-cf1f-40cb-9f6a-c7dbae9fb612", "sighting--328c32f8-c6e3-43d7-b172-428f97da56ee", "sighting--5ff88dc7-7bf2-4915-8792-06ad6cabcc62", "sighting--bdb6da11-8d27-4566-b605-18b24420e9c5", "sighting--16b1ba88-e4e2-49ad-a907-19963c17fb71", "sighting--598f462b-a00e-4e0c-ab4a-04acb240d0c6", "sighting--a262d6e4-f115-4525-9719-a02f1e7697bb", "sighting--c7e3c948-0689-438e-a6b4-ccb4af04e50b", "sighting--d4a116a9-c8be-4cae-8fd8-adeeb426f51b", "sighting--bf0e6a2a-9a43-4867-a1b4-16c0ecd94782", "sighting--32473cea-4565-43ec-bacc-20669c19918c", "sighting--0e3c06a8-9f9f-42e3-ad5f-d8552b229d4a", "sighting--c10ac2f7-cfcc-4ff1-aa47-7febed7582e2", "sighting--87475560-e8b6-46e9-9af7-f53bccc4de09", "sighting--c3a49f22-acaa-445a-b88e-7291677f526f", "sighting--981e24c8-f8e3-4e3f-86b8-5268c7dfbc48", "sighting--e138cbff-d88b-4939-bbdc-705ffcdbe028", "sighting--5e32375d-a0e3-455f-9c0a-c99f2b8764fd", "sighting--b8969719-4d95-484a-9ab6-9395f219d7af", "sighting--d55a5402-4090-470b-aac9-cc21bd2a6b63", "sighting--abe34d4a-3bc0-4702-87e9-8c4d6aa34a87", "sighting--37e24d9f-a965-401a-bc14-797747189f4b", "sighting--39fbc7f8-1688-43f9-ab46-4b58606ff4cd", "sighting--140a0cbc-cd10-428d-9042-68e43ed1e8e0", "sighting--d18c3ce5-1640-4262-9ab8-b069124407bb", "sighting--b8c5d53f-2009-491f-9837-bb891af71615", "sighting--4e866661-b835-4019-a20c-9cdc3f970c44", "sighting--5997d8a2-75cc-4fbd-9e27-2a88a6157089", "sighting--12b85e7f-6659-4733-aaab-733548cb6e92", "sighting--b6dd85e6-0eab-4316-8091-0acf840810f7", "sighting--48269618-2c78-4b41-a066-3bb2351ec664", "sighting--50ab58cc-f8f9-4b16-8901-ffbd7a0b4c01", "sighting--f484f976-80b1-42d4-9626-d33d4988b74e", "sighting--61e7a025-5c04-4d1d-8790-f938dad7c56a", "sighting--4244bf3d-1467-4990-8c43-8a39a0dd1055", "sighting--8fa23d62-06a1-44b2-8751-06477599f296", "sighting--3835f429-cf0d-4833-8d5e-683bc99f176f", "sighting--be0d2a14-9e9c-4f8e-95af-3dd89fd05f02", "sighting--75dfe9b4-64c9-4f14-b90a-8bb1a57dc37d", "sighting--7cd8d2a3-4359-48f7-aa84-99e45ce61c55", "sighting--2d06c58d-b3e3-48b2-b754-4a8f1e60fe8a", "sighting--d2280fbf-0e86-4065-b93c-49fb4fca2037", "sighting--1d148b38-623a-4b68-8b9b-7542bfd604c7", "sighting--55106286-bd44-4f92-8a0a-3c8b16478758", "sighting--6a150c24-1f96-4eca-9233-221c52a7f76c", "sighting--321c80a6-dd6b-43af-bdf4-c26c7087628b", "sighting--72b2592b-316f-42d3-8e63-2b903f737232", "sighting--b16f905e-3c0b-4c07-833d-959c1d3266d1", "sighting--8e771ada-b62e-441a-a985-59c1911df3b6", "sighting--f947c171-b02e-4bf2-a9c2-35891aadb21c", "sighting--1c589816-9bcf-4c81-b472-d47af0752253", "sighting--e515d2fc-8219-4d99-a5f7-0a7db634badf", "sighting--5d9bd1d0-0ff6-4721-a4db-55022527e601", "sighting--82e17066-e2ac-41cc-b3d2-1a82f473ce22", "sighting--471d1a44-9a33-4415-9add-5729d44c82e3", "sighting--630ead21-b801-4302-9901-9a1e8c23d69a", "sighting--6bbfb74f-c70d-43c4-b1b1-884d873b7795", "sighting--b5e05b13-4762-4e25-ae08-1ad844a5b57c", "sighting--3d84adc2-efae-4d2a-ac7f-68fbff837831", "sighting--fa7479a8-a969-4699-b2a4-45afb9df8ecc", "sighting--38d463a9-db15-4c5c-bdf4-9126301aceee", "sighting--f8b81fd2-e151-4492-b91c-e032a0f540cc", "sighting--817285da-4882-4a33-b7a3-faae9990f8da", "sighting--71cff2d9-1ac9-4845-a989-7ff944ec9b54", "sighting--e6047809-ba69-44c9-a6f8-fa3698852e76", "sighting--89e89691-ce24-43d6-949a-c63908f96170", "sighting--ac3d4922-c332-41d5-b2fd-a54237215f91", "sighting--cf021ae5-00af-44a3-b663-bbc10b59fa94", "sighting--bfbdc051-8176-4cb9-a269-33317b0dd3e1", "sighting--88daa773-2142-43cc-b7dc-eed8ecff9a47", "sighting--90f17cc7-f500-4daa-ac15-7b6ecaaa7fd7", "sighting--83910866-c443-4ca8-9a4a-47d04bbc737e", "sighting--655694fd-faae-4321-ba7b-590252d1d084", "sighting--658ae61a-810b-4b91-a1d8-d1812de048cf", "sighting--7f5fd50a-53a3-403a-a8e6-63f674af1502", "sighting--eabaca97-f53d-4a78-b800-38d56532be64", "sighting--3321758f-ba15-4430-97a4-71bec88a2c17", "sighting--2abd563b-9410-469f-bcf5-070a5c6e59f5", "sighting--d8a5cdad-685e-4851-96eb-a5cb1490eb19", "sighting--205bbf41-aa6c-47f4-bf70-3db7b4bc4336", "sighting--e28168fc-5e46-4718-8ae6-0877094037cb", "sighting--c65f1c02-e2c1-4a89-a4d1-889f73d359fa", "sighting--69d16d09-e377-4c1c-881e-10ff009c5104", "sighting--3d2ac2d7-3a7e-4978-b7db-3aab12a379d3", "sighting--37604105-3f16-45d8-aea7-5ad64eef4d47", "sighting--71ad9aa6-aef5-4ce8-99b2-bfa7c9de0355", "sighting--5c69bab1-dd6a-4b87-ac06-2706034103b4", "sighting--ac0061ab-f5a5-4b84-9366-96e9675b1d5f", "sighting--6c3413b7-c879-481e-90da-03673fb9b832", "sighting--f0a57543-d69d-47a5-a14b-78cca0139748", "sighting--3d9b1a64-1208-495d-8df8-04f18c41f1bd", "sighting--1f3bc563-5f7b-479f-bd8c-7251abf4e43d", "sighting--4fd4bf3b-7e53-41c3-a837-4cde67c00cd5", "sighting--7f459c60-ff71-4dd4-aa42-884047e68ebe", "sighting--e8adcdaf-e916-4df4-a143-b163450aa5ec", "sighting--5b924695-f63d-4db4-88e6-5b878c67dac6", "sighting--87302d17-6db7-4d29-aae6-6540f877e876", "sighting--35b924d4-ff78-4533-922f-f0b72ce261c2", "sighting--8b4a409e-8d1d-4def-b7a7-41fa60908259", "sighting--e031b0ff-858a-4c22-9610-5765c8230a71", "sighting--041049f8-063e-4c18-b561-2de265f32d93", "sighting--af9252cc-7a96-4d9a-a7d5-35b7a7af06f0", "sighting--849498bb-0caf-4307-a13e-d26864d3cded", "sighting--c05f316e-5eec-46b6-bb4c-e3ebe80a2231", "sighting--d906f23f-beaf-414b-8a5c-1469693a3c2a", "sighting--7d6a12e5-2e37-4381-8397-12a36e75ad4c", "sighting--aff322ed-de65-40a1-9528-dca3d150ca62", "sighting--8d16e29c-5175-4cd9-8cd6-83bb2144e05e", "sighting--8ae01623-f522-4bd9-8e12-09c946700242", "sighting--87d3beb3-0727-4539-a522-633b1894c9ed", "sighting--728b0f74-3b44-452c-81a0-34fe1d262efd", "sighting--f4568fcb-6dbd-4a87-9a80-0faa2f7fd9dd", "sighting--72ff4efb-e639-4c63-bcc2-3288109c1910", "sighting--c9410df1-b3ac-4572-b419-31b9ff40d688", "sighting--f227fe49-e9ce-4d3d-a988-608748b9722c", "sighting--61101d73-b03f-4adc-aafc-70f031ed20d0", "sighting--28b55ea6-72b1-4042-abe9-4cd1cf248ec7", "sighting--9bf4a218-74e2-4bbf-bee0-618c0c06e075", "sighting--0475dac5-a535-4982-b24f-dc2ca0e421fc", "sighting--4565a06b-9750-4339-bec2-fa1e0917f78d", "sighting--92370875-c2f1-4763-834d-f48e8d267162", "sighting--7aff7642-df2f-4a7f-9393-2365a4cb741e", "sighting--4302d26c-7de3-42a4-84dc-d12f9ebec728", "sighting--9b43dd30-b4bb-425e-97cf-24194ff46ba1", "sighting--06ef6079-4a30-4b21-bad3-2ae877d926f6", "sighting--9c2fb4fb-6996-4301-bdbb-02ba5ca99800", "sighting--7ca4c18b-a5cb-4773-80df-a784808cc410", "sighting--9fc35e68-7661-49df-81bf-d85302820e8a", "sighting--9fc5b9f2-3d8e-4e38-a5d7-18e4e4d3d5d5", "sighting--40d0cbfb-7240-4ac4-9dfe-a1ce106f8be5", "sighting--ec27c261-cb72-4728-aa71-d6c4ae833c88", "sighting--d5f1060e-6808-4020-a3ca-ccdc02e366fa", "sighting--95d9c85e-63c1-4ebb-9a84-f4c13e84b2d2", "sighting--04570b70-56b2-48ec-b737-f3966f21daef", "sighting--f5f0f306-066e-4032-8c07-beadb1fe05d1", "sighting--a201613f-7a30-4507-a1a8-0d1f1fbc4377", "sighting--cc0cdacd-e401-4331-9a39-0daba897c3a3", "sighting--7bb989d1-6c04-4f18-996b-407354e210fc", "sighting--9f6d4782-c93d-4ce1-badc-082efac5c429", "sighting--fc763412-dd98-464d-9543-c8a3b38f484b", "sighting--73b04739-31d9-4f12-b9db-8189e51b9dc7", "sighting--c2264be5-ca96-4546-8f1d-50c356f7575a", "sighting--25868024-2793-4e84-a5b2-e4170511e530", "sighting--30b39a5a-8f6d-4257-948d-755854f11730", "sighting--698219f0-794c-48e7-b19d-a0b0ca72b8ab", "sighting--efdb77ff-f410-4a4f-8ee4-4ca2dfddcda4", "sighting--a8a89fe0-fa82-471c-a83c-714532cdee38", "sighting--522c2495-caba-4c31-bcf4-a873cb652857", "sighting--8ff37468-83d8-4746-b2f9-ec77b7c7e94a", "sighting--4c21e15a-d087-4ddc-a70d-ed88a800b0c5", "sighting--3ce087dc-876d-484c-94ae-eb70862915e7", "sighting--5b7ad062-ba4d-49f8-9149-8f12d3d8e1a3", "sighting--d7b92f1d-b8ea-43aa-8566-11e73357218e", "sighting--2626d729-884e-42b8-a413-418c897e974b", "sighting--182f98cf-5b53-49ad-ab20-23798334ee1c", "sighting--6b99f83f-1e51-488f-be0c-a727413b8f80", "sighting--4c9f19b4-8996-4e7c-bb50-f5034d8a4c7d", "sighting--e5de4e4e-d8ae-4721-80a7-c34b4fb94f64", "sighting--f5a08860-328d-4236-89c8-51fa56e3dadd", "sighting--fd10a990-4a4c-4e96-9a6a-86d14eba0233", "sighting--0a48848a-fe9a-4385-8399-d84eba4cec0e", "sighting--597bc374-d654-46cb-93c0-7aaa948ee032", "sighting--58441d4c-967d-49fc-8673-c2a39d5f10d0", "sighting--fbebaddd-ef5a-46e7-86c5-ef07c93d1161", "sighting--e24e6a59-0a16-4335-b207-77a60d61eeab", "sighting--a2ba8eb3-b040-4aef-887d-9e020b6e7915", "sighting--7ca6cbf3-a086-46d7-b859-ca2ffd336fb3", "sighting--6aa89eba-fb1d-4caf-94a7-3f49bce77376", "sighting--1c24097b-55d6-4a53-8403-d7aeb3841669", "sighting--a8b79d89-fee4-468a-8c5d-48cbbcfe7e48", "sighting--63974bea-d601-4540-b4fd-93fccbae26f5", "sighting--9560ff22-794d-48a1-8616-55b463626d77", "sighting--3684462d-d8cc-4067-b55b-b9f7a9b4507d", "sighting--a1e6f3d8-f91b-498d-876b-2d2b7c96d5d8", "sighting--f66dc0f7-e20b-457b-b85c-0d6e2abd0392", "sighting--dfb818c7-b0d6-40d0-91ae-0f6cb8822e54", "sighting--8a64b164-bc06-41dd-9746-ca71e109b4d5", "sighting--9896a5d2-48bd-404c-9bde-b78a4e493865", "sighting--eaf73339-5e94-44a3-b0bb-d0fbb4f39499", "sighting--965405bc-75cf-4851-a63f-900d24128614", "sighting--68f63eb3-7d16-4bd9-bd02-00a7ad19b57c", "sighting--fddf3b1a-3226-421c-92df-384e43a59bc2", "sighting--8a6e0311-aaa8-4290-ae1d-126e044884c6", "sighting--cab98cfa-c4b3-4ca0-953f-8da7f2fe5af6", "sighting--fe89526b-fbb9-4812-a1a9-f4ef5d5664a5", "sighting--eba2a1da-9a02-4a42-add7-486fb5ea46b5", "sighting--fe6cfb52-d02d-4e44-9e7c-e09837ee7068", "sighting--986f0cb0-6abb-4c11-813f-f22bbf8d9ea8", "sighting--a19f831a-e21d-46f9-8c54-18ac72b1de3c", "sighting--615ccf82-e3a2-46f1-83f4-b00af3be7d25", "sighting--4140a01f-3db6-4aaa-a657-761b67a43847", "sighting--456d4fc2-5d2b-43d2-a7ad-7dfe6d41fe88", "sighting--218617d7-1c4e-4e5a-8e2c-a05e36e8560e", "sighting--48f3fd06-4a68-4915-a389-26553bb6fe78", "sighting--42cc3318-988e-4a17-8363-15e0783028f1", "sighting--112f77b2-6694-44b2-a705-5a1cc8f81a85", "sighting--e9846099-e371-4260-8643-7a15145875b9", "sighting--646e4c53-ec60-4922-ae71-5d43e535b1f8", "sighting--b3be2689-d683-4475-83ad-b788998fddd3", "sighting--e8f52e9d-0acf-4eb3-8bbb-536149914c79", "sighting--f3eb4a86-9d29-4a71-9d68-eac084dc09c4", "sighting--c478651b-3538-40e7-8dfc-67cee0e6c326", "sighting--3b3dbe76-6507-43e2-ab5c-20648c9bfeab", "sighting--14644cf2-983f-4bb3-8658-a10759a91435", "sighting--8beca70a-93ea-4fb0-97b9-7314cd55fc41", "sighting--72d6ef2d-492b-4595-9c49-d236c03c0637", "sighting--e0bc199f-a71d-45b4-914c-5a0747c12bc2", "sighting--fa0d6e2c-43d3-45d1-b442-11bcbf473dc5", "sighting--15aec8cc-6e39-4407-a0f3-8f0a0023a849", "sighting--c9088faa-f7fa-45fb-85e9-6b811810684c", "sighting--8f78b847-a07f-483f-a1ad-0d2ec9d7d944", "sighting--76e3b5de-c41f-474e-bdf0-617ac32a2c6c", "sighting--dee56be9-b9ac-4b24-b247-178cc1028aec", "sighting--fc6b84fe-d821-41e5-a10e-96fa97ddff95", "sighting--b84a5591-38a0-4787-92a6-ae78e1a5ebd1", "sighting--ef2fad04-db06-4ca6-bb3d-aeb7d267e4ee", "sighting--98020025-d150-4b37-8762-2c6a6e7590d9", "sighting--01fdd30c-e179-4f4f-8306-f676352b17a0", "sighting--d5302e58-c6b2-4fd4-b7dd-ed6a6a861a61", "sighting--95e62ada-0864-41dd-ae09-c5924ab68ad0", "sighting--04ac0206-0431-4c35-a837-68ddafd82c5c", "sighting--ed443dfc-e8c3-461f-ac05-d2be51ac005a", "sighting--0b8dac79-e51e-452b-bd3f-4ce15819aaab", "sighting--f27e512e-f413-408b-b96e-c69dcce3674f", "sighting--918a9922-49da-4756-984f-4289b06b68cb", "sighting--c8224e06-b53d-4ca9-be70-97a7205983da", "sighting--d2b93bce-afed-4214-9367-475735c31436", "sighting--090479df-4b5b-4a2d-903d-af850a747519", "sighting--c8e2c2d1-9dbe-43b2-bf6b-185d9f0be97c", "sighting--87715d3a-4116-460f-9e15-4122a96d6c8b", "sighting--c9a6af79-31b8-4a99-8787-1a9e9ecedaa6", "sighting--46699d28-0d2b-46f1-a0ed-b521e0360243", "sighting--82709185-8a9c-4249-bd54-47226a511f6b", "sighting--ce9389bd-f0dd-4809-a00f-842efc37bfab", "sighting--2ef76016-1e47-4d1e-b074-911611829745", "sighting--525a6615-177c-48ed-af86-e6f7153b8782", "sighting--9493acfa-a54c-4bea-8a8d-b6b15cfe7e18", "sighting--3fd3aee0-2d07-460e-b6f9-1b79bf673e3e", "sighting--d930f3cd-42d2-4844-8ce1-abf58dc77ec0", "sighting--a91c629e-e6f8-4413-bce2-b817be85f58a", "sighting--bf0de557-f8a1-49f1-a91f-32befd9411f7", "sighting--3aa61d8d-1a53-4ce3-88f8-a7c7c3d23dd2", "sighting--497b761b-8b92-46a4-bd8a-e5e561d5aefd", "sighting--ba62f7ae-c103-45c4-bf26-e354729ff557", "sighting--a7991741-3d47-4d4c-a2f9-5a226b12455c", "sighting--0217e074-b369-4897-bece-7697ddbfc546", "sighting--8e8685b6-ebdd-4cca-a9db-455944adbf4a", "sighting--8840339e-a316-420f-ace7-abc98c46d905", "sighting--9c294e5d-57e9-4938-8764-6bb1f7ec558b", "sighting--9d27ef04-6848-475f-b5ac-2be9407ee277", "sighting--d1f3fbd8-d96b-4e4c-a11c-5fa8c1eea153", "sighting--9ab65d6e-80be-48ba-bb72-fcdcf97135f8", "sighting--d2e73db8-e587-4246-8ef5-9c9914156cee", "sighting--f5e5b0a8-cfdd-492a-9838-462d512dd6a5", "sighting--6d40c1ad-7544-4791-b0c3-0455e426fcc9", "sighting--436d2468-239f-43cb-a5be-5d84ab66769a", "sighting--5f7bf1bd-f797-4c02-bb51-7b5a53e7d84f", "sighting--421a3da2-e2f9-4885-b865-bfc08e13b65e", "sighting--57eb85f6-a19d-41e2-9108-56e100265258", "sighting--86bbe752-fa7e-4a29-9dfb-f390e49d407f", "sighting--c63a6ff4-e3ee-4666-82a2-9ec13122673c", "sighting--9f66af6e-1e72-4f90-b536-eef26a7bb432", "sighting--7c72188c-5ca2-44c3-848e-b550ff02dbe0", "sighting--ea67fed6-c6c0-4469-85db-58f7d6acfa91", "sighting--1c510af3-43a1-43f5-a465-d340c812c7a2", "sighting--7d58a707-247e-4e13-af01-04b5eac17f3f", "sighting--e73c7d74-b523-4834-9375-d2ba22f23534", "sighting--1b99989e-951b-40ab-815f-0cbb7c6d7683", "sighting--7baaf37f-e63b-4be4-86e2-ca65ec73e77a", "sighting--a5dd015c-6af1-4666-9e15-3698729d1c04", "sighting--d090bd0c-209d-4846-aa5e-35f7d6ca7fbd", "sighting--c68ffe19-15b7-4a7f-beb2-96d5a70c103b", "sighting--04d9db43-1e24-4904-8e6f-a00f0971c31b", "sighting--c3a75645-3c5c-4f0c-a803-0b02d7e975b8", "sighting--29247608-95ab-4e9b-b3f9-f8658bd56d76", "sighting--e42465d9-d1e0-472e-9388-915f932b6e36", "sighting--685521a4-1eae-4a53-bf81-636e07bbfd74", "sighting--a8351b63-1b62-457e-a038-cb5174d71b8f", "sighting--504ec6f7-5c28-43ac-a297-55f8c7b48c9f", "sighting--9d84f291-82d0-4031-a37d-f1c1e5c01fee", "sighting--c3f30138-4818-474f-8fc8-33b53eac15d8", "sighting--772b69d8-8317-44a4-a6d2-cf01e7b0f444", "sighting--9cd2024a-76fc-484e-82e1-254cb5c5876e", "sighting--ae720535-2814-4f1f-8b40-25dcfc9e5cd0", "sighting--a33fd056-1cf9-40c8-8dc6-6959ef777d4a", "sighting--7a7689f1-54ca-48af-8b35-2a0fbd121e65", "sighting--b3e5f1e9-ad1b-4ad2-aaa6-781e16c9ca8d", "sighting--6743c557-fbf1-444d-b66a-fd71c9a57596", "sighting--24fc8777-7763-4c43-abb4-1db8d69637d6", "sighting--35c16beb-24fe-4c90-9935-0c33d4b0c56a", "sighting--5b90a01f-cdfd-4851-85eb-53065afa70a1", "sighting--4cd0c664-d442-4d0c-b3f8-6a33919c7b50", "sighting--c3b2b448-ff8a-4a0f-8aec-492bc4c4d6de", "sighting--5f3440e5-1ce3-4f9f-9a9c-933a2f7854b4", "sighting--1a710d09-baee-4467-a8ed-4039eb532122", "sighting--f0eb184b-2da2-496d-a510-586dabc10898", "sighting--08cfc1f1-5ca8-4af6-9a1d-098da35a92c4", "sighting--7c65bce4-b669-45fe-aeb5-b7d4d54f2971", "sighting--c1a143ab-f294-48af-96c7-fc19dfdcc100", "sighting--04189122-d5a3-44b5-a4ac-c054bef07139", "sighting--e342999f-b8f6-4910-9bf6-c942df676b8e", "sighting--0adad16f-1cec-4470-afd4-f4f4b416039f", "sighting--0ecc5750-38b5-4875-8f5f-dbfe7499fabd", "sighting--2430b099-8265-4554-ad05-e8743dc2a68f", "sighting--ac7332ba-1031-4a99-a41a-dd3ef5397f9d", "sighting--b526d2b5-7eb1-4917-bd7b-8483785375ee", "sighting--c8b17691-9fc5-4625-a9d3-555dcfb409df", "sighting--7042b4b1-5e4d-4116-9b74-508454d9055f", "sighting--8eb43ac6-eff7-410b-9c0e-d1dcef04108d", "sighting--351f41d5-d37f-4921-b5bd-083483a29e10", "sighting--c1ca4237-f7b9-4687-8051-5b297df5f074", "sighting--f4ca11a7-b12d-4617-ae31-3fcc5b590004", "sighting--f1697b68-f296-464f-b8d2-848ac51cb037", "sighting--76335fc1-3808-43f3-b60b-3fa82b4356ca", "sighting--1ff64847-b718-4fb7-a594-4918698e68e9", "sighting--b5a7c7d0-3aff-4813-b9eb-577c32b24cf4", "sighting--06f5e65b-a3eb-4c20-9831-2dca8e2b9d76", "sighting--54cc9899-9aef-4cca-a6a3-529cecf7bd19", "sighting--5d6d16ad-368c-43cc-bbad-604d4362d5ac", "sighting--27182888-9a8e-4d14-a464-b5d14f743cf0", "sighting--08b0e81f-216e-4042-b56d-9e459b6f7b06", "sighting--48d8449e-87e1-4938-ae80-4e4aba0ecb42", "sighting--80fa0451-f849-429e-921d-62bb217fa8cf", "sighting--d275eee1-5c97-4599-b901-82383f0943e0", "sighting--7178f955-8637-45c0-af21-cf1d54bef49a", "sighting--af12e1a1-3c9d-4edb-ad1c-2c794dfaad9a", "sighting--5a2df929-659f-4362-b962-c9e0267e247c", "sighting--24df742d-430e-4507-8ca2-546a24a22799", "sighting--6b9894d2-d22b-452e-8f8a-beca7fef77d3", "sighting--dbe02692-6796-4eba-b129-1c9c7652db1e", "sighting--5b4ce592-07e2-4cc8-99ed-46cd2b8c9bc7", "sighting--41837a1b-12de-4cf2-9f4f-024878308c62", "sighting--d760e549-e9f8-45a2-8c0c-ca80fd359891", "sighting--38fba9b6-ba07-45bb-9098-8e202cae6b0b", "sighting--b4725dc6-ce99-4725-8b24-1188feb425d9", "sighting--8425d45e-15d6-4f93-8604-2383b34128d6", "sighting--1b288d23-9eb6-4ceb-a174-4147931c3f03", "sighting--2d58dbae-fc2d-4065-be97-9a9989051c2c", "sighting--52216ea4-7497-481b-8981-138fbf57fdd3", "sighting--252870fd-8e21-4f7f-b9cf-44e1843d753f", "sighting--b9e59de0-a654-456a-a06d-85d6e278d358", "sighting--bb1b7633-08eb-447a-af7c-ab72a7442159", "sighting--78a5a961-cb3d-4732-b7f7-c57f23b5066e", "sighting--6aff4881-2139-43dc-be09-e58c811016ae", "sighting--2c136253-3a1c-4c95-a6c4-430c8d149c1e", "sighting--6b890f51-cfb5-4635-a7da-c30f082d54f3", "sighting--9a991c3e-335d-4513-a335-fa27998276a2", "sighting--6d3efa0f-0447-407d-a60b-24e44e769d89", "sighting--418ee2af-8c77-4cb4-a952-f59ce7b27c47", "sighting--8261ea09-ae7a-414a-82ca-a132d40ef6cf", "sighting--552b2d34-53c0-4a2c-b13c-4cb68c6cf591", "sighting--36e51974-f3b5-47e6-884c-b112cb23407d", "sighting--a0aefd22-4a8e-47c6-ab72-0a908a6e6683", "sighting--1d2ee8b7-d6fc-4edb-93e5-c10fa6c60004", "sighting--22b9765c-f91a-4ea9-a946-ad8f9b880862", "sighting--b4e6f6d5-4e5d-4423-bfc9-45ec207a8d76", "sighting--d112c62a-d0ba-45c7-b144-e50e5a56a459", "sighting--acfa857a-54fc-4675-b1cb-8cf951ea49d1", "sighting--ac1d0320-8e73-4d06-989f-6f90cb85d31b", "sighting--2222fb8f-5315-4f7f-a921-0b99ff9d2b8b", "sighting--cc92ffc0-6224-4147-b362-167a4dcbd38f", "sighting--c2d88435-638d-432d-bd40-43061fc7b59f", "sighting--e41604a1-46b5-4bcf-b8ce-9bcfc88eb5f2", "sighting--e73af370-e049-41a3-ad58-5b3b4c08ea2b", "sighting--7ce1cea1-6143-4bd0-b1de-77ed836b144d", "sighting--c7edb56a-428d-40a5-b455-50fa5c07cd9c", "sighting--d09aa572-c299-495b-b283-b471a05b9e3c", "sighting--f1b7934c-5a06-467f-8ed3-8d96d47fd932", "sighting--55bd9777-b5f1-4ff6-9890-b2be32c34fe7", "sighting--d1fee129-3ab5-454f-bf63-1cdd85940638", "sighting--58100d5c-4d84-4dfe-b959-1880dd67c2e7", "sighting--8da89a5c-1dde-4807-9141-2c3bd8630f04", "sighting--d553534e-dad8-49a1-9e17-ff72e5f48c30", "sighting--0a3eaea5-5a11-4a7e-a056-bd7d515fb4d5", "sighting--a279341a-01fa-4c7a-8b12-825b50a3dcf2", "sighting--ba154541-70ee-4867-9482-4897aa981836", "sighting--9828eff6-a042-4d30-b3c6-9a64d7bb976d", "sighting--43ae7f64-b701-4d5d-b733-a42431cb46d3", "sighting--0b7d7ebb-94eb-4f8c-9bce-6aa7669b3164", "sighting--4a1f064c-c0c7-4c3a-9d3c-02d799edce20", "sighting--403d1920-3abb-4ac8-833d-823139302cdb", "sighting--eda09957-05e5-4e7a-aa39-f72f97948681", "sighting--f462518b-7d73-445c-9382-c2fa55bae552", "sighting--15d15e6b-cc5a-4b53-95d7-c2bde04685dd", "sighting--aea1f8d4-2f7f-4497-99a8-344aa5398ec2", "sighting--08b8d714-63f0-4042-bece-3b5f46cc4ffb", "sighting--07f34f2e-b9ce-49f2-b2d4-10021315bf90", "sighting--f952a4de-4d0a-45b1-b928-b49f6641e86e", "sighting--72f50d2a-3deb-4c70-bb64-95ff1c6a8259", "sighting--028947f9-8c94-48bb-83e8-f4831a491a44", "sighting--406900bc-b1f1-4031-83ab-396bcf81ffef", "sighting--e2476605-28f5-4a05-9655-bad5d7ca1d5e", "sighting--248d72b3-27f3-44ad-ae71-4836ab7cfe27", "sighting--f45e9be7-bf68-4bcd-bfbd-0ca20149e9b8", "sighting--a42d5237-65de-4db4-8ad0-831cc47e6c03", "sighting--ce2635c5-ef78-4771-b08f-15f8da210daf", "sighting--99879c3e-5e74-4af3-8d21-7994795f0b58", "sighting--52d61a08-4765-4bbb-98df-3a54b73d75f8", "sighting--66a517da-13fc-4919-a567-17a42281c7ae", "sighting--cb591fc8-ba7d-4cec-8f90-200cda8831a7", "sighting--e4d4a7a6-18b3-4ba5-ac44-a07cb707b3ab", "sighting--dc146bc2-c8ef-4680-84e0-8cb1fcae8e31", "sighting--ede3898d-3c5a-4c10-8df3-552214002737", "sighting--2e3a6fd5-e1c0-4011-beb3-c86b58a62f32", "sighting--8d0889dc-346f-4177-ac21-7428fe424a52", "sighting--f5fbd02d-c985-455b-b330-5db25f96aa93", "sighting--e4a53c22-50ce-4662-bbce-fbed7c0c40f7", "sighting--9b3fdb91-ee8d-4f7c-a19d-72a517b238cd", "sighting--6650ef90-fdb7-490c-8b62-023fe6d2cd5d", "sighting--6c889cdd-ccdd-4915-aae8-264be07d4741", "sighting--061d48f3-71ea-4ba0-9fc7-2f412a04cdb8", "sighting--100e4374-6369-4b43-bc01-80e13f31c998", "sighting--1f7a7987-07b5-4cdd-a5eb-1c780eeee691", "sighting--38b75d93-c8a6-4c67-9903-d9182a8f9019", "sighting--b2fbc88b-4576-44a6-a4e8-6cf6a064cb75", "sighting--0f690e86-5754-4ac6-b29f-d010f38d02e9", "sighting--200950fb-a326-43e5-8707-dbcd9e4ce41e", "sighting--a9c5f5cf-75f9-45ff-a003-e92e5b27a873", "sighting--e653a7b2-70bb-4656-a416-25098ca2fcee", "sighting--63d5d82c-ae83-4605-9d78-29bcd8c2bea1", "sighting--8d3c80d4-32c2-42b6-a6ee-a4f6b2e7761e", "sighting--cda9e3cf-9d99-49d5-9f71-f8c5a2d24748", "sighting--77f584de-325e-4583-a2b9-a3b52ed23504", "sighting--4808f8c5-4ac8-4f7a-bca1-cb8df057eaf1", "sighting--b418cc58-7281-4057-b192-aa43726b6709", "sighting--0b5eb234-04fe-442b-a670-2d518009d8ea", "sighting--21bb40b3-716b-41e6-90a1-eaf9cf1cf90e", "sighting--90362559-c725-417e-b981-a17b49b8159d", "sighting--b18df758-ff55-43e0-9784-d2e6437ee4c3", "sighting--8e72f3f1-bf8d-4200-8341-8e4890c6b5a0", "sighting--9ec82bc8-5348-4a36-ba8b-67bd817f257a", "sighting--9cad8abd-3057-4094-bb38-1457c63ff13b", "sighting--58f61d20-b445-49a6-9774-a5ac4f94cfa0", "sighting--f894c9ac-a3fc-4f1d-bcbf-1d7ec80a5831", "sighting--eedb280d-684b-46d8-aada-b46cb5e7c7eb", "sighting--346b921a-73ed-422e-b95a-bac4ca52e4ac", "sighting--6063c2e7-3823-477c-910a-13cbb3a526e8", "sighting--fdf6d26b-1c33-4548-a69a-e92d4afced1e", "sighting--3adaf310-0abd-48da-9911-151e814cd7ed", "sighting--6f43065e-1307-4395-a2bf-8117b7ef77c4", "sighting--119cb1d6-a36a-4411-93e4-2a9b5eaab663", "sighting--6fa37374-db9d-4237-a40b-744909a891c2", "sighting--25f28001-83fb-4beb-bc1c-b93d07f15d44", "sighting--bb110b3d-da47-458f-968c-eef4366552c7", "sighting--54177b20-808f-4d20-b22f-0ebe8c33e824", "sighting--34fb6263-17a6-4c97-858b-b5ad0f3fe3c4", "sighting--55c0c140-6f37-403d-b6c9-071376fa1aee", "sighting--eb6a58d8-73b3-4674-a557-73ccdb4f6241", "sighting--970f8622-c17f-43f9-80e5-fb4dbd3dd123", "sighting--b996ab30-a6d0-4790-8bfa-b5e18256705d", "sighting--090f6545-ef82-4ce9-86d3-c7ee5cfb2ac9", "sighting--8147893b-0026-4e23-be37-b56dcd6a7a81", "sighting--ff2b551b-e042-4241-a891-8460356e16e8", "sighting--b77095b3-a24c-4c70-9549-dcaac7c37b8c", "sighting--7e3f777d-42ad-4d04-8bfa-24144dadb3c0", "sighting--04480519-9078-495b-a6c9-bcde053fc435", "sighting--6a82851d-a946-4cae-90b8-bbac80ef9d30", "sighting--4d396675-0748-4d94-ac52-25acb4a5b855", "sighting--76960260-cda7-4540-b4bc-2aa60a015d40", "sighting--59b509b1-742f-47e5-b77f-3bae5ec08a2d", "sighting--21e801ed-69f3-42ae-8fa0-094c88303544", "sighting--6b315052-3941-4080-aca4-41ae93b399b0", "sighting--f40f00be-149d-4538-abeb-b4f6044224c5", "sighting--171facda-5bc0-43ad-89d5-044d72a6c06a", "sighting--90fdddf3-7250-42e6-9de6-dbf7b3d702c0", "sighting--0a520c6b-d53e-4029-9840-974630deda10", "sighting--296a0a9d-533a-4295-8d0e-443242ea8500", "sighting--001ce021-1a65-4e34-9477-561346149695", "sighting--d10d89c6-4e83-4477-8528-c0e88d9f77b1", "sighting--a16bfd2b-e583-44d5-b11e-a88dab5062e4", "sighting--8853ebfb-6dbb-4eac-92ee-5534492ee7e3", "sighting--c29ffc50-6043-420c-9b11-915552644481", "sighting--f964db9b-4df9-495e-b44d-6aaab155f65e", "sighting--84a08553-1aac-4a46-8afc-af040849800c", "sighting--2f16c8b2-019e-42bc-8df8-9e5d5c95e304", "sighting--61a23d90-f1b6-422f-815d-4b8760afc052", "sighting--1f1457a9-da01-42ba-a165-ae59dcf06d62", "sighting--36e500a3-9173-4d96-97bc-5533e4541728", "sighting--1abb748e-35c5-41e7-b112-1e1f5d421b05", "sighting--ef639eae-7b83-45a4-956c-f973385ba762", "sighting--3a370da3-e628-493f-8b5f-c048dd264931", "sighting--301c1ecb-6d2c-4c56-93d5-44351590d08b", "sighting--fdeada8a-be44-4fe5-8ebd-11befc5e0ed4", "sighting--225e4f51-3430-49c9-b662-064fa344c2c5", "sighting--61362080-5f2e-488f-a0a5-abeaef63c433", "sighting--f26ff552-b565-47cb-acf4-210590f584ba", "sighting--82fd7f97-b7d3-4a42-b6bb-2c65b3ae4331", "sighting--d2818bbb-0f11-4958-b98e-5bf2d8a46e7d", "sighting--5afc6d0d-3c63-458f-a882-bcac8d45be2e", "sighting--6357c8f7-4de9-4d09-ba9c-30e0032a28d3", "sighting--ae7ed13f-0411-43b5-82ba-e046ff917bb7", "sighting--b9b55b3f-1677-44ef-8c9d-bc0fa273c86e", "sighting--43b55b8c-9085-4dc2-8253-33a55cb52cc3", "sighting--7ad738ff-d5f5-4df3-b2cd-1413b363ebb8", "sighting--cb09cdca-bfa7-40ca-b48a-d48060e2f1a2", "sighting--28cede76-5030-4b45-a3c2-dd81a87a969a", "sighting--778585ab-18c5-4cbb-a37d-4f64fb3cbbe7", "sighting--6007d682-4854-46cb-b581-c84bb49c2d9f", "sighting--d7d8219a-853a-4391-bf1f-991dd007fe7c", "sighting--28a14a07-a88f-4528-88eb-335251ea1c2a", "sighting--d45cd2e8-ac89-4fc9-9700-db25278446b5", "sighting--b5a0561d-f8af-4e40-b23d-2f643d3b0be7", "sighting--1f2c2d26-7174-4e9b-a0de-226bd5295398", "sighting--b044ca0a-0322-4a98-b32d-765d09f0066f", "sighting--2f8927b3-1db2-4746-9a52-63d70d090d48", "sighting--14cc09e6-7d6b-4d3d-b0c5-e2390d8eaae2", "sighting--4c959916-137c-461d-97b9-b3d9b17feb29", "sighting--5cd1772d-c978-4fc9-915e-240b16621cb8", "sighting--e14f4f37-63df-4c79-92ec-e9a63357f017", "sighting--4d12b1a2-b921-4a7a-bace-9e57120c91fe", "sighting--d3cda7e6-4615-4824-ac5a-6893f864e01f", "sighting--735b8748-79a9-4425-a2d0-68986cef8cfe", "sighting--0febd6dd-fc6c-4725-b1bd-5bab7f504fc9", "sighting--10637abf-63f4-4f27-8f8d-402bc55727ec", "sighting--3506f84e-b1c1-4019-b397-24f738328e05", "sighting--e36d045f-9c61-41b8-a2ae-d04047ad8dcb", "sighting--95114b98-d1bc-46fe-aa93-4b28697429cd", "sighting--abd79312-ca5d-4289-ab45-9786c3ae5f52", "sighting--965c27ce-9b75-4450-88a2-f0e070e620d1", "sighting--141384cc-95f3-4418-b88a-b44f38e73237", "sighting--6bae1106-a2c0-4ab0-9ba6-997071a84f6d", "sighting--b806c587-4882-4555-8079-443cc543b51f", "sighting--90278740-08b7-4cdd-adbd-f7535298d348", "sighting--06c3a56c-9223-4abf-8975-9cd57cfd11ba", "sighting--24da46fe-6fc8-4dbc-909e-3fd74b4ad767", "sighting--bf684ee0-c197-479a-bb8b-865eb7bb22e4", "sighting--2414042c-0e13-4dce-a677-cfbfc95c1116", "sighting--ef4525c2-e2ec-4505-85df-0160d50ec815", "sighting--b86751aa-1236-460a-8aa3-3656c9724ab7", "sighting--a2475043-5e45-481c-93aa-f26f2dcc7633", "sighting--3cf0791d-0867-49d6-877c-341497d7f8a4", "sighting--5080aefd-3bb9-456e-a5d8-44439f82e8b0", "sighting--adcadb94-aa34-4d33-b68f-d5b27c2aec94", "sighting--72c5811f-c7bc-40dc-9a44-55e76be9aec0", "sighting--79a34cc9-c7e0-4c59-a5d3-2e4ad527cea5", "sighting--7cd0e378-a097-4ad9-91af-bc24c0259d49", "sighting--df202a62-109d-4579-864a-4ad3a57745e5", "sighting--74241474-6690-4fd1-ad3e-5d3233c66658", "sighting--6c0e4fc4-1292-4c0e-b341-45158f60812c", "sighting--bdff3e4d-c87e-415f-82b9-75d4d3f164ef", "sighting--f1a2b15a-4cd6-440a-ba17-9e9e8ad5cb48", "sighting--27fdfff0-af8d-4073-893e-abb5b3d65df7", "sighting--afa71d17-c86f-46dd-9c59-55dfc213aa18", "sighting--0ff350b7-1291-4614-8c21-b68697c48193", "sighting--7f802b9e-eb2e-4934-b5af-aa39b34a4d6a", "sighting--619f7cb3-83f0-48bc-a589-15258f27faa8", "sighting--4dd15a11-a4b9-47ec-b3df-b682bd5c1e7c", "sighting--7e40646c-eab2-4d86-a0ab-4b5c2685e6fe", "sighting--2a0fd3b4-efd9-479e-a908-c50636930596", "sighting--39012ab2-6d79-4d17-a8a2-b078ff588b68", "sighting--c855a0ab-3f8c-49eb-8cfa-4fdc5531d181", "sighting--421bd5a7-71f3-4ff8-bbc6-5032f6c3829b", "sighting--5a8c472a-cccf-4fa3-8a03-761984f1946e", "sighting--6e9522c9-f9a9-4c74-9465-ea62cb072134", "sighting--67e97160-2a70-4b6f-9242-32fe2028aa38", "sighting--2a88cdf0-5701-4e07-a61f-07be1949aaee", "sighting--2c6f2da6-6457-415d-ad75-819fcbe94293", "sighting--cbf8eefa-618c-4b3e-af93-ffc036c2025f", "sighting--7a2ffd28-b6f3-44f0-a8c3-13bcccab9d2d", "sighting--61c42783-5603-453c-b34b-dd4da3636338", "sighting--da5ea828-7d6a-4cbe-98a8-6cf03e10ef0e", "sighting--17a5e952-ba68-4dd6-a8af-3be4880c3e58", "sighting--0fcdf0c6-43e9-4a67-b951-6c92f24636d4", "sighting--cded181c-4d05-4fd7-89dc-f969d2524cd6", "sighting--66a17454-5e36-4fb4-a60f-1fdd8ee12443", "sighting--685b0b93-3237-4e9b-9412-b765ac119761", "sighting--f03dfe4d-b1b3-4257-b4c0-78bfe39d986e", "sighting--cbd01bac-c9bd-4b44-9301-4901f6225a47", "sighting--05b0cc8e-5c0f-484f-ba8e-e3f5885f05d7", "sighting--dff617bf-ef23-4845-b2cc-8f1ae8463594", "sighting--644fa029-a709-47e3-8dec-822136f72cae", "sighting--9a6a5297-a895-46c9-a68b-3232a0227c65", "sighting--ddd21fcb-221c-4e54-9148-6b31483046ae", "sighting--92b96a2b-8200-424d-b13c-a45865c84815", "sighting--3515319b-1b93-4bee-80b7-c77800a79876", "sighting--e6b8a871-7eff-4fbb-82fd-11afef755bb2", "sighting--b5176e38-cbfd-4760-8f67-479030c938ad", "sighting--5209f1b3-1061-45b4-a4f9-65a24d25376a", "sighting--2adee276-aec8-4c25-82dd-f01578ee35e2", "sighting--97827a1d-7f7f-44a5-b36e-964279e5d7cb", "sighting--1c986698-c684-4a34-b260-039c3e01b4c0", "sighting--aa19795b-379a-4ac9-ad60-8ecd978e021f", "sighting--13b76770-b57f-420a-9aa3-e40728fe0dfc", "sighting--4bcb19d3-ca7e-4923-ad52-d2a0a0c58210", "sighting--576c84b5-4af3-4b37-89a6-e00d4bca4512", "sighting--afa35a3a-5960-4a8c-b7fe-f20ff7597426", "sighting--e8e50a62-8d4c-49c5-8c59-a6305544ced0", "sighting--47db1048-8399-440b-84f9-4202f62b7ec3", "sighting--8888a71f-008f-40af-b79f-d81ab8d472d1", "sighting--341bf9bf-a990-45c4-8781-caece5bd1864", "sighting--026c6701-1e36-4b63-bb44-c83707336583", "sighting--51776baf-3875-475d-871c-69d51cee74c5", "sighting--364378cf-f4c8-497d-8268-5dea75d08868", "sighting--3ec23fc3-398a-4551-8624-a371162ccff6", "sighting--ba995b35-97d7-4581-95ee-158730552cd0", "sighting--74972a77-37fe-4787-aa21-d5a8cd15b4c0", "sighting--38265f00-413c-44e6-8e2b-95164542b6b7", "sighting--edf32fbe-24ec-4313-814c-e80f1e089b2c", "sighting--810446aa-904e-4c21-a21d-b7645cf56641", "sighting--7e6a1777-552f-4571-b0b1-f427bcd08444", "sighting--ecf7cbdb-604e-4d51-840f-d0b556b3a436", "sighting--37ee8ecf-ab3c-4ae6-9ab2-7b3135c550c1", "sighting--a15d6c21-5569-46f7-9d0a-79b880269a12", "sighting--c303f341-685d-48fb-9e79-2e36a88de12d", "sighting--fd843270-1438-447c-8d96-70dec9d63b63", "sighting--3fe3fd9b-43b8-407e-8a50-479b44bf8170", "sighting--14261ea7-784d-4350-82aa-59bb48e68f68", "sighting--892b938d-6e03-4d13-9834-cca5d8070097", "sighting--345bfbdb-4814-41d4-9ddf-27e93315c734", "sighting--3f0ed7bf-9b5b-47b9-9060-c62e7270a9db", "sighting--c5c3c9b4-0dff-4ff0-ada7-532ecb224e72", "sighting--304e43b2-1729-452c-af3d-a212cf002a4a", "sighting--b91914df-8bfe-4c55-825a-d17deb5fd570", "sighting--be09149e-f46d-425f-9317-bac6adcd7237", "sighting--76b11081-5a8b-46cd-94a5-22c6b51b01b7", "sighting--f4f3bc62-e540-4019-8700-7dc383927960", "sighting--0d891fd4-345b-45ee-b53c-0a8ef486f307", "sighting--b97ba3eb-e9ac-461b-85f2-44c22f58efee", "sighting--6b7017b3-e5bf-4e7a-acae-2853d5c1106d", "sighting--6fcb5dc8-1fd3-4b66-83e6-bd16b1ce583e", "sighting--7a4a27d2-37a7-4501-adf1-1eb6aa5d6575", "sighting--ecc42cf2-81dc-4af7-af35-158628b348fc", "sighting--08f11f22-bbf6-4818-a4de-0e80c8eb4d21", "sighting--c76c5721-fd45-4a92-bc6c-b5d06b701622", "sighting--2140b8f4-9e94-45be-868a-72754e996259", "sighting--ae19ac07-cd18-4d67-b633-e601d0206058", "sighting--fbc202a9-4469-4fbc-b1ec-b0a6ea14163e", "sighting--75a8f8c9-4d7f-4d60-91ea-689fefffd60b", "sighting--5dbc8e78-6512-437f-be58-71e911b23d2e", "sighting--84500110-7723-4ea4-bb3e-8b5088258c16", "sighting--570603e3-1f2c-46dc-98a3-776434c2be78", "sighting--bd31721b-9595-4662-bb7d-94b2f7bfde59", "sighting--fff46fc6-79e3-436a-a5b0-4e5b4ee8ba3a", "sighting--d3d990e7-48db-4aa8-9ed1-a6aa4d98e0a1", "sighting--e7fd53d3-2eff-440b-a85b-0c113b91d17e", "sighting--8c06615b-66ed-428e-9272-3f459062bcab", "sighting--18b3544e-d27d-433c-bc76-368483b4172d", "sighting--aaa2f5a5-9066-43f3-b054-865881709d04", "sighting--4a5932d8-da1e-41fc-b17e-a8dfdc628ef1", "sighting--44b59217-8d3a-4934-b9e9-6937c9798ca3", "sighting--df8c6cfb-ca2a-47dd-8b21-0f53f73b91cc", "sighting--73d15780-8406-4f70-a3da-c750ec34f296", "sighting--5dd709ff-a32f-4fa9-a75f-51fbe4037c50", "sighting--5f13b524-6912-463a-987a-f84fefb1d9f2", "sighting--1c96ea21-3885-4971-b139-e0007d852d8b", "sighting--5273ce5e-e8cb-4cf0-ad9e-bb5b2db3dc3b", "sighting--5833113e-6221-4d5c-9ad0-5c7a709ceb7f", "sighting--c120772e-f46f-41f7-a224-aa2b1e8da5a4", "sighting--bf8e0ca9-6b61-423f-ac85-f81f33824348", "sighting--7536cc20-5e3a-42ef-ad50-fb2b6e0de6bd", "sighting--fd10f3b8-78ec-44ed-a2be-e99f809b780b", "sighting--392b00f5-a56c-4f58-b5a6-593b36959759", "sighting--be0f2a75-89ba-4a2a-9e55-ef5ae5e607e9", "sighting--8feea8e0-d47f-480b-bfc6-521706381dc8", "sighting--f78cb861-8421-42db-ad5e-41e0727aaa58", "sighting--49c1221d-63f0-4a41-8720-aa02bc2e0936", "sighting--44178f04-925b-4475-bb38-cc3e0ae0247c", "sighting--d63816c8-deaf-4b32-9d49-00e7acacdf12", "sighting--6cb5fb74-d631-4408-b1bb-07ee48f05057", "sighting--b42d3c74-cd70-4307-b1b6-f6e07beaa11c", "sighting--e0529b3b-90ed-4dce-9a85-93e308906ee5", "sighting--9812d343-ff5e-4289-a8ac-7e8a32b863ec", "sighting--8bc2e619-ea02-4f64-b266-d5f7b5355e85", "sighting--5522925c-9e3c-4bbe-8de0-49630354b9dd", "sighting--f3cc4af0-9e60-4458-becb-153acd932222", "sighting--b78a770e-da69-4f0b-91f5-e5aefe412d72", "sighting--a01cd524-f470-488b-b588-915d92b8ac7f", "sighting--b7b0ccc6-8056-4668-8517-5da2c57ec46e", "sighting--4707abe2-49fb-4e7b-bd27-b616e0b89b83", "sighting--d669f4db-fafa-4fb6-8aa5-f62a6d5168b1", "sighting--d14274cb-4da1-44b9-aa21-c7d8c62e7c12", "sighting--dd17126b-4196-4cf4-afde-24448b557c38", "sighting--a5a9023a-9da6-41b2-93c7-767044894350", "sighting--1c9af170-9fc6-4879-bec3-38b34d5de806", "sighting--e31da060-df79-493e-8837-adb904dd7c28", "sighting--baa4be68-df05-4b55-a377-883d47da3932", "sighting--c0258592-fa6e-4455-a526-b156b9c7e19d", "sighting--29d28a90-a32b-45a3-9077-f7a21013d74a", "sighting--08969028-10db-4077-929b-d9fe1125d5ec", "sighting--3c89970e-9546-4a51-bdd9-f32f45e0f03d", "sighting--e2e12a09-90ac-4c8f-a9fb-23dcb117c1cf", "sighting--d1de778d-9b03-4237-bc05-3b19d6ac1400", "sighting--f0eb2a70-f8dd-42ce-82c2-f39e8149738c", "sighting--b8f0ea4a-f09e-4eab-bf8d-dd5b873917ad", "sighting--a7a29af6-5c11-4b00-8c77-6c193f1bbf40", "sighting--8855f54c-283b-4ba6-a3cf-8baaba6389a1", "sighting--5b5ef76c-b94b-4349-867a-f9337ddcc683", "sighting--7c84ad71-7472-45c4-b77c-408b52c42b24", "sighting--17fd3454-3150-49be-ba20-4d978db7c39c", "sighting--3259fbc3-3aa2-4fe2-af3f-84d9902f20fa", "sighting--77b3e9bf-adce-49dc-b6b0-1e94cbe75cab", "sighting--a345d563-2c05-426a-b6a7-a644b08cf018", "sighting--68825d17-d12b-40c1-8ca0-63cba739df4d", "sighting--70eb0fef-0f65-4d44-b3cd-711838c6265d", "sighting--cc396690-7963-458b-88e1-a7d43d1cafd1", "sighting--aa78273f-40d6-431c-baf9-da78a246ed5c", "sighting--70e02ab6-042d-4462-95bd-9ae1e94c02a2", "sighting--81af8abd-e27e-4e5f-a677-0adf6af4f7fb", "sighting--8087d529-de32-42da-bdf3-2f62c9966d56", "sighting--43930371-b34e-4e4f-a162-00d70101adfa", "sighting--1e3972ba-e1a3-4930-b3f7-7b33c11ad3fe", "sighting--ea22b90a-e097-416a-896f-4c6daec26dc4", "sighting--58978b40-129f-485e-a76b-54dacefe9703", "sighting--4a292d3e-7d45-4a25-8e6e-00167d611d5d", "sighting--13b4935d-ac09-4f24-8ae7-9416df20afa2", "sighting--a627c7ca-5f28-4c5b-9720-8496cb1d78e2", "sighting--fb384d09-169f-45f1-a7cb-356bf53270a3", "sighting--3fd674c2-341b-40b2-a0de-3ad22cadc8b9", "sighting--164eec09-b445-44c5-a04e-c63f4cbe198a", "sighting--35a9e781-8a7f-4a1d-bb67-0b3b2236440c", "sighting--f220f83c-82ff-46c2-87b2-b818af0fdc83", "sighting--7cc94394-2838-469c-b170-c3ca9555a721", "sighting--bc924e19-7d92-43d2-a4d8-a3ac38fcb1db", "sighting--d1e01367-07b7-4b05-aaf9-132a2371c9c5", "sighting--2f7caa83-7bf3-4ab0-9c0a-bbcb572aeb7d", "sighting--81051c14-30e4-4ec3-8b12-c55ec2d562f8", "sighting--5c18fc67-28aa-4720-8f35-c06429e72974", "sighting--61bc9a95-64a0-40d7-93b5-5ea8049fbac2", "sighting--43ea01fd-6d66-49c5-9956-265e82f4c0f2", "sighting--4e6f7668-56b6-4261-a457-feadc99aeb40", "sighting--88c3ec1f-688c-466b-bbae-3eeadcb18213", "sighting--b1805cc6-c022-45a7-9bec-5c821152da05", "sighting--de62d0b0-c2b9-456d-8192-70aa120711a3", "sighting--20734119-ffd5-4714-aec7-8b4c563bb57a", "sighting--2501a8c6-8424-473a-931b-8e3514dfa7e8", "sighting--9394878c-bcee-4fba-80d2-290cade68573", "sighting--24890668-03cc-46ea-850e-bb5fb2af7853", "sighting--52fcccd8-91f9-42ed-a329-a4e5b5e3c0f2", "sighting--82cfb3c9-f0dc-42b1-8b9e-120b67f04de8", "sighting--8103d1ee-4b24-4de1-8b93-2ddae86be575", "sighting--0050bf73-1fe4-4cfc-a1d8-4492b1821a6d", "sighting--f02fcbdf-2f18-4757-9077-4be098d2e9f7", "sighting--9313cf44-5766-4ff7-99bc-ab8c3b6840f7", "sighting--69f0ef1d-0eb7-479a-86a6-8010ade6dd6e", "sighting--efa0e122-e2bf-4d02-bcdb-c85ecea0d1c4", "sighting--7bc8ed26-292d-435b-8b02-1f4796f0d52f", "sighting--e675e2e9-194b-4a4e-94fa-e1d1bf5e3d8b", "sighting--72cede3d-f9cf-438f-882a-4ba8acb4b4b7", "sighting--b1d353c4-4923-46b6-a65a-9d0edfce9ff3", "sighting--933a6703-38f9-440f-8e60-be866270c022", "sighting--7d3589cd-9083-4242-a291-203ae718f9e7", "sighting--96f37582-4e61-44c5-9760-51c186236184", "sighting--a89087a3-4412-43e2-8bd3-6947f360610f", "sighting--e7e599ee-d9c3-4b52-a966-4b3de2174dbc", "sighting--16c0305a-c74f-4135-81c7-5bcdbd492d2c", "sighting--5222de5b-5a1b-4588-86a1-bbdc0c3fc94d", "sighting--6f8feeaf-9e41-4fd6-8a47-c1a0866bf118", "sighting--94839ff8-dd2d-4b9d-940d-41ad2918ce34", "sighting--ebda6c70-89a6-4d05-8577-2e7f6adead94", "sighting--1b503949-663a-4157-b76e-2885cebcf968", "sighting--3acb3025-b527-46df-8a00-96930ba65921", "sighting--33a74a57-1dc9-4c8e-a21b-41dbdba9f14b", "sighting--34d69384-7a0c-4c34-95b7-d64de1a43f82", "sighting--69ea4abf-6e11-44c2-9b99-3557e437a07a", "sighting--57be43d7-4bd7-4110-a6a9-2f5460080c78", "sighting--b3ef0e20-40bc-45bd-bead-f1753a42b60c", "sighting--50e12739-f102-4f7e-9749-4e651d9fe61e", "sighting--7efbeb22-5e63-472c-a0fd-26805bf50471", "sighting--d2fc5351-1cb6-43a8-b802-6bc3959c4844", "sighting--572beae6-febf-4aef-9ce3-6752b3177b5d", "sighting--745dc2d2-7f8c-471f-8a3d-810656ebc723", "sighting--dd42f996-0f8a-49a8-b65e-3d3b989a815c", "sighting--e5139b5c-09e5-42c7-8b5f-5d5f330d7424", "sighting--7c375c20-0f57-466f-847c-94b98fd56362", "sighting--e70938ee-e393-4057-9b6f-87d42ea33ad2", "sighting--a9ae1cbb-5d37-413c-a11b-55d67315ac0b", "sighting--0e1f1e49-8ea1-45d4-b49d-0ea066d1e725", "sighting--265fdf92-08f9-4826-b603-2188cc8fe1d4", "sighting--824a6363-bf07-48a6-90b4-0c2460e5f008", "sighting--6a089187-a61f-42ee-b58f-7e0157c3e1d4", "sighting--3232887f-e845-4c8f-9fa7-40ee3f8719fe", "sighting--87df2199-944e-45e5-a851-8f1100dd4a8f", "sighting--d455f01c-7939-437b-bd81-a15147ada068", "sighting--1977f9f2-2214-4558-acb9-90600b58bd47", "sighting--6704aaa0-1e6c-445d-acb1-95df16a10bfa", "sighting--87ecbc4f-3ea5-4e19-9330-bb7114a1a3a1", "sighting--57fe6629-941f-4d9c-95f4-04534d861c57", "sighting--747c7d35-1443-4944-9fed-101791aed6ee", "sighting--02f5c348-2f66-4b1e-bc4c-7b3d31c095fa", "sighting--e2d94e96-7df1-48f2-bc9d-f38c3368fbb4", "sighting--a32c4e21-0ff7-4533-9195-d1a40edb30c9", "sighting--7ebe5f5a-a52f-42e1-85b5-4ee84c18163a", "sighting--5fa5023d-51ad-48d0-83f2-9759b890c67c", "sighting--c5c6dee8-035f-4465-9947-22269d66ba6e", "sighting--78da006d-e2fc-4db5-a330-5f64cbc93b72", "sighting--7b6c716c-1bf8-4f0f-82f4-2739df0d988a", "sighting--23f16495-85da-4a3e-a2e2-8c3ee65948df", "sighting--5c3b669f-8851-4483-b2ad-c6643ff7c2bb", "sighting--7a5d5a96-6a99-4297-b2f5-7ea8db7196b6", "sighting--358bafa6-3422-44a0-8699-1239d166a8f6", "sighting--bc7bb0e7-e69e-4bea-9306-9f46d2caf72f", "sighting--7760b551-947e-4f12-b5b9-e2d92de01547", "sighting--27e86d93-7d03-46c4-b787-d77bf256be34", "sighting--db1b5cfa-b415-4902-9334-a9eeeed480af", "sighting--813a835c-0251-41af-aed0-2187b646ea44", "sighting--aa862342-1da3-48e2-b4a1-4106e5497259", "sighting--a71cd5e8-741f-4d3a-963a-c8a68afeed33", "sighting--50c05535-f534-44a6-83ac-1462b4479fc2", "sighting--1be5b7da-cfc3-437d-af5c-537626b33ac3", "sighting--df918bbf-341f-4363-b2f6-d7982f7fe53d", "sighting--2364a33f-f124-4e9d-95a4-4f753f25a41b", "sighting--7e291d03-38f2-44fa-b573-62c3161f502b", "sighting--a1a8d0b2-85e1-48f9-89e0-a9cce08bebed", "sighting--aa8d909e-c534-464c-9013-64527ff951e5", "sighting--4413f1ae-26cd-4e4c-803a-5f7eae480154", "sighting--e011ecec-5f88-41df-8a3f-e8c59b66ac47", "sighting--87a33dab-364b-4a02-9227-d9c1980f3f57", "sighting--06209846-b2cf-445d-a2ad-db5e94efd111", "sighting--93434d0b-d0d7-4d07-913e-b05aceb3a731", "sighting--55982fb2-4a34-468d-8b4b-549ad3661bf1", "sighting--373a2add-2717-4285-acc3-be30af3caa4f", "sighting--c69fba4b-4303-4115-97ba-19f257358c27", "sighting--1f350135-f377-4ee8-a63a-cca0abe1c5c5", "sighting--8bda9fe8-f22f-48a5-a8c1-148c1db5b989", "sighting--2bfa5c13-9b12-4bdb-aa3d-a1d6d10fd027", "sighting--ba5e04d1-5eb3-4a7a-9124-e22c9e9a3e9f", "sighting--4f853ae3-0373-4448-a106-cb379a6b803d", "sighting--382137c1-f4d1-45ce-b215-e74ab991733a", "sighting--92c26556-44bd-416e-bd01-7152af1a9ba1", "sighting--b31d9298-b89f-48b2-9c95-37d150569a91", "sighting--88593cbc-8c58-4ec8-a74b-959807fa3b98", "sighting--f8aaea22-dc2e-4943-983c-808ef04a6247", "sighting--e3f86c2c-8c52-46af-836e-ee0e44c54fb5", "sighting--43e211df-f5f9-4a01-baa2-1b688cde9748", "sighting--77b0dbe4-20eb-4270-a59f-f10d4ace1fd8", "sighting--e69058da-ca90-4a85-9087-8456d63a0bb0", "sighting--ff43d7f3-e88c-4765-bf33-af96445289d3", "sighting--97e80e84-9cc4-4e8e-9d40-1820de8805fe", "sighting--5b661add-0ee3-4ebf-ba35-c06a95069967", "sighting--c0f6e6e3-e968-416c-9d23-fdc3cdd8d2cc", "sighting--5b717b15-8bf5-4511-9f0f-a9e1b66f58a0", "sighting--6fa5c2af-bd32-4060-903d-261148522920", "sighting--4a15dd0b-948a-4bba-a227-c8588cb93ff6", "sighting--dd156e54-e6f5-47b9-a6a7-afbd857a0714", "sighting--fe0c2fac-1f88-4011-9170-1553f8309674", "sighting--983e18c8-bc8a-4893-b9db-7e41810bf0df", "sighting--6c86dbf0-d55d-4b21-bd0e-b6ab9ea73e77", "sighting--78a2dbea-ce9e-4529-b303-048c4c2c8e12", "sighting--a5c8a0f3-d336-4eb8-9334-4b7c431df64b", "sighting--ef7bddf2-d9ae-4884-a6cd-547b303fbacd", "sighting--a07592ba-7048-4ed1-ad3a-fc41186a8538", "sighting--c44afcd9-f230-4edc-a04e-ffce97cf72cc", "sighting--802c65a2-df23-4829-ab3b-caf66ea1fe5e", "sighting--9c359b73-7654-4baa-8e74-705e8e70a3b5", "sighting--4a303731-1470-4e30-bf43-1eeb19d8127d", "sighting--a77d21a8-e7b2-44e5-84c7-37932f2e7fd6", "sighting--66bb58b2-5210-42a9-89f9-49f1bee15218", "sighting--3ac1369b-52f7-4ee0-8b11-4ae8c923d4f4", "sighting--9a3f6c77-b78a-408b-9863-38225953b525", "sighting--fef3357f-e30b-4a84-858f-1f105df4f048", "sighting--5da3388b-c7e8-47b2-b465-4f1f05e68880", "sighting--fc502856-2df9-49d2-a15f-6a681028876a", "sighting--f8801d0b-2e41-4876-8ad1-b7a5ccd3d350", "sighting--97bfe4a7-5d89-4b35-a662-c05c729b7553", "sighting--27f42ae7-6f16-4ab2-aa8d-ef26d1bdf9a0", "sighting--96a0c7fc-0529-4178-bf3f-f123b6ebce4a", "sighting--97eaa051-db2c-4222-b48a-3f902bf0ba4c", "sighting--d8167409-bcea-41f7-8bb3-b51123956123", "sighting--9fc32e21-7208-47fd-b0d7-d34fb978be69", "sighting--24d400d4-075f-425c-8c68-68b572b8a9e7", "sighting--fff1b790-2d09-40b6-83c8-93b20c73d3ad", "sighting--8873e90d-e80f-4cc2-96e3-35b1488c753c", "sighting--299b5619-687f-4028-b653-ffe1a61a2d27", "sighting--523bb7b4-8196-4506-b89c-295997efa35b", "sighting--025723bc-6009-455b-b216-05eb67a6c74b", "sighting--4a0da783-f248-4084-8159-577c07657b36", "sighting--c4526447-0330-41e5-9e50-cf15e3337ea0", "sighting--d855ec04-0f04-4d2c-b792-11952b13e5cb", "sighting--4923f19b-194e-4beb-986e-27f8390d2ed1", "sighting--3404c79a-ab1e-4f50-ac81-99272fc58f36", "sighting--63298444-28b6-4515-8801-412f3568ed45", "sighting--c74d02b6-5529-4624-b4cc-2ffe0c1210a7", "sighting--eb95a179-050c-405f-8004-82a119ce14cc", "sighting--f6a5d7c5-6f4c-4401-b965-841252d37309", "sighting--5f33fdb4-9249-47e3-9e0c-2157040b4ea3", "sighting--83c7110d-352d-47d0-9297-d9ca6c4aa2d2", "sighting--da876f3e-79a7-4fc0-b90b-101f193066f8", "sighting--c0b6523c-d362-40dc-a740-7246ecb63f95", "sighting--56dfbc90-2096-4980-ab2c-97727b950e6e", "sighting--eb09aa60-41d5-4fff-b059-c2d5cbb46bbb", "sighting--52489be6-88b5-466f-90f4-dc358c2542c8", "sighting--4942bb5d-90ee-434a-b465-aabdd45f1c42", "sighting--253a3672-7715-47c5-93bb-8c3f1fff443f", "sighting--d8028121-1bc7-47b6-bde6-5dab1a7a221e", "sighting--4b238a5f-e2fc-43f8-8183-a69393066acc", "sighting--953f18bb-5382-43ea-aae7-627a7d426063", "sighting--f22c9d28-411c-4a4a-bea1-79d281ff3c15", "sighting--3d32128a-258b-454b-b25c-60aa20d0c320", "sighting--3af7e553-53a2-4920-b4e6-ef3252d9c0d2", "sighting--ade25be7-09a9-463b-b969-d7c0c00a9052", "sighting--394d3c81-043f-47c9-be63-85d626840e5c", "sighting--f1788f04-f192-4144-bd84-9d104a20003a", "sighting--fe7ad2fe-eb57-49c5-a2f4-ae1edbb15e38", "sighting--e5f686c4-26d9-4bd3-b46b-cd92834139fe", "sighting--e4a315e1-cab8-41e2-a3e4-5214a6af2528", "sighting--8520dc5f-7c33-4b6d-b405-7bcf46f96dcd", "sighting--b8a1162c-f347-414e-a26d-143346b45ad2", "sighting--017828d9-7d15-44ef-bcf5-7991cc12e34b", "sighting--0edc8901-e414-43f3-bf47-fd600025dcc0", "sighting--70c9a15e-c2fb-44e4-a2b3-6ca336a30aed", "sighting--fe50e177-cb14-4719-8ee8-de4632739100", "sighting--8f724d15-9ef7-4837-8dd0-c2a4b9454ac7", "sighting--490c1258-e7ef-447f-8c87-df5bf8350027", "sighting--0ac52d26-d523-4ebc-9751-136b075fa11a", "sighting--dcfcd3b6-d9f4-4753-8446-e27b93037bdb", "sighting--41a46f62-87b0-48a7-ac9b-6d66662f81a3", "sighting--df44c173-4705-42a7-8fcf-200ace7eae05", "sighting--b8b6d365-4933-499a-9b84-b07b1d92943a", "sighting--565ac5cf-40eb-42a3-a96c-4d84c44842d7", "sighting--bc878955-d03d-4153-bdda-550a0da20b82", "sighting--2e1fc3dd-7cb0-4111-9524-c43565a95ae4", "sighting--865eab6b-ef26-40e1-8ec0-9bb5736b361f", "sighting--25b7cd05-8462-44cd-b345-cfb9b5b4bb2f", "sighting--4cb8fb7a-0b04-4465-8421-72678946bf9c", "sighting--990f0b7f-be6e-459c-9c0d-b9bb1e4d30e1", "sighting--a28e38db-ae4a-40db-a742-e31719e0b51c", "sighting--c4d296aa-342c-4ded-ad46-4bcab31918a9", "sighting--6d5c451f-1b27-4264-9296-8ab1956193ed", "sighting--e7d5d87f-d8ab-4302-b3d4-116aa857f11d", "sighting--072de877-e85d-475e-a703-79243928b139", "sighting--e2b422ed-2cc4-45a9-bc98-5975d518af51", "sighting--f171c3f7-9f1a-41d0-a51f-7935e0662114", "sighting--1cf60445-fdab-43c8-b538-34dca8740d23", "sighting--96c2feab-8c4f-4d7a-a8b2-7a0d427299ce", "sighting--78e397e7-e045-4a2d-9559-71b46c822a54", "sighting--1f0d00c6-4de1-453c-8c94-38b22dd30752", "sighting--138a35b6-0b8d-4a83-8ad6-f16a044c32bf", "sighting--835be76f-0b47-4211-8ffc-61f20d5f9985", "sighting--c4166caf-112e-4eff-8aef-0cd12aacaf4b", "sighting--949d2618-42fa-49cf-8eee-a51c2e29b27a", "sighting--6e8dac34-2998-4c7f-91af-7576bf558aa2", "sighting--24929c07-ce1e-43c5-9c04-d2076b4f4ab1", "sighting--587b75df-8f0f-438d-a4e3-a879b50e269c", "sighting--1f00eee2-880f-4c84-951c-d14077e30061", "sighting--10307358-727c-4391-8ffb-08a079e107f4", "sighting--dd0181e7-7d9b-42d4-a594-8695875babca", "sighting--9d5a0797-7284-4579-85fc-c97b9ef32e4a", "sighting--fd37d5d8-a05b-4035-9dfe-314052acaea3", "sighting--9f7cd3cc-ff96-408b-8a2c-dae0d551a0fa", "sighting--8d6cce19-8d13-46fc-9536-d25937717055", "sighting--c642c1e1-70b5-4769-ad52-03cdf8e59794", "sighting--fdf7a936-c803-488a-9656-a12ad290f00d", "sighting--dcd95a03-b319-46a8-8d53-730441189b43", "sighting--93c18898-6a97-4d6c-9fa9-fa4c47c622ea", "sighting--2224f1d9-9a6f-4d38-a505-2cb268244f6e", "sighting--3b7e8070-c239-4e46-a4f7-0ee56f03f84a", "sighting--ddadd73b-acfe-4351-b1c7-ac832e47ddc3", "sighting--d5de1438-c9ef-4f99-b668-fff57bcd7962", "sighting--d348c33a-b19e-4b2d-aac6-dce5c684525b", "sighting--f4d0c37d-a501-4b42-bc6a-f31413206997", "sighting--58472ca9-088c-4014-aef5-957f42e507e3", "sighting--1dd21c91-e2ce-467d-8997-3a5417ea013f", "sighting--1db8c2d0-acc9-4f00-93d9-cef69a81cda2", "sighting--91f4aea9-edb8-49a4-a248-e575da506961", "sighting--c7173411-ce5f-458a-b503-3a8563dcde03", "sighting--279d4f7c-6446-477c-a095-cf22cebecd25", "sighting--ad17bacc-72a8-4b23-b3b6-c2cd271ff8b4", "sighting--da695a9b-aaca-4187-9370-f4fbd55ce2ca", "sighting--059018b4-0864-4646-9e3a-4aa171d2a4fa", "sighting--6aad9390-4f98-46da-bd0f-af1100e8e56c", "sighting--3f3daadc-f47c-4b3d-8390-6f6b710eb9ab", "sighting--0aa340e7-e79c-4b52-b64a-18b6ba879c3c", "sighting--ecde349a-bc2b-4b75-bc4b-823c25261b84", "sighting--3c3b0ddf-be9a-4201-857e-ce068ce9e95b", "sighting--b88c81ee-09dd-4899-9371-4da9460c3615", "sighting--aaf73461-b854-4c02-b4cf-6a4814241ff3", "sighting--3863e57a-8712-49a3-89b8-6fa34b52a8dc", "sighting--2bdf5d2e-7733-424e-bd0e-fbba95a99b85", "sighting--cefb03d3-1d51-4670-be32-37f6a1488b97", "sighting--ffa90ae5-115e-4795-8836-d243f909f939", "sighting--33ef5adf-91c0-4cf3-829e-8e6c496f49a3", "sighting--26d6e783-f15c-45f7-b4b1-33467f5db823", "sighting--ecebc551-e2a4-48f5-bf1e-bc9260930b12", "sighting--382ec309-ab46-4602-8dff-2f7d5f5c6576", "sighting--5637164c-2821-42f2-a5e0-1ac8a3e14023", "sighting--ba982b8a-aede-4741-a09f-17a2ed3efd92", "sighting--1809fb50-7fde-4c52-b74d-6065ac672f99", "sighting--61b8571f-f686-46c3-831d-511047137a1f", "sighting--2cc3c6b3-e4ff-4b14-98d9-62c76d623787", "sighting--1011849b-aaf2-451d-983a-9244418ae37e", "sighting--f839359d-c8cf-466d-8bb1-d9ec0bf40174", "sighting--b60d5fd0-5925-48a9-b3f6-3fc12a98f427", "sighting--4c1493f1-b364-4727-ac47-3ccc1a0f6ae4", "sighting--84eb6803-aada-4375-b716-8167f60dfbe1", "sighting--2e72bb13-8822-4f06-ad49-e5bd096fa9f8", "sighting--c2ad92e6-a700-44f5-8650-10e6d7a1d21b", "sighting--66d55a83-88b3-4fe2-9c3a-1e07a565deaa", "sighting--9dfa9a16-c615-46d8-8949-7bc8a82b0bb6", "sighting--ec641432-8948-4db5-9a85-e55a9854a4c9", "sighting--af34c68d-58d7-4e03-a6ad-9e55eea266b0", "sighting--0f0c9b89-a3f2-42c2-bd8b-b1d466f45950", "sighting--f8381c9c-abaf-47b8-a4ec-4f7016c0e127", "sighting--9c050d39-7be8-41a9-89a1-7e2bb719e2c4", "sighting--8d5819c4-eb3b-4089-a1d5-b8d25f23c8ea", "sighting--4d07b3ee-4be5-420b-af8e-547fa87864e6", "sighting--569c8b26-9976-4472-8e22-f0b7d2cd3e8c", "sighting--3b2812e4-afe4-443c-b9d3-42884f505663", "sighting--7aeac89a-7f09-4ea9-8d0e-75c374967049", "sighting--cb09b547-5ed0-4381-9bca-888e3d21c722", "sighting--b15703e9-b04e-417d-8bbe-1687bf274f0c", "sighting--34a67611-b9cb-4b07-a050-f2c9d15e41c4", "sighting--6487279d-a60f-4157-8ef2-ca9809a452e7", "sighting--19123ea3-af59-43bd-8ce9-40a7f430d6c8", "sighting--d684f771-7ab7-43e8-ba8d-3395773c1816", "sighting--379f7cfd-8248-4932-8ef6-8d599eb98a0f", "sighting--a13c481e-981e-4e23-aec0-d0c040c1779c", "sighting--e4f42122-e207-4a4d-a10a-2f91dc1ae76b", "sighting--ef20560f-50cd-4880-8467-0ee716899055", "sighting--a196a4c7-c48e-46c2-bc87-f5a5bfceb181", "sighting--ce6627e8-a243-486b-961c-eac0d1743f36", "sighting--368c6ae6-ec24-4f2c-9106-7eb94c257015", "sighting--0830915a-c87c-4c22-9751-9720080306e9", "sighting--c98b658d-34e4-483e-ac0f-91bb4cf0fb13", "sighting--0bbd55ff-53bb-45c6-a622-02262ec68354", "sighting--b4e5934f-bc82-4c63-9c59-7c819d7fd9f7", "sighting--ccfe467d-9dc1-4c89-a480-5167bb1e45b2", "sighting--af840760-eda1-49cb-822c-873121331619", "sighting--5514c679-4ca1-49b1-a4e1-326f795ad9a7", "sighting--d6c2adbc-98c9-4af1-a8e3-f3bee0c641e8", "sighting--4ea97160-50b1-4dc8-96dd-c09a5075d9e9", "sighting--08b0d62d-2e06-4b6d-9179-e8f940377110", "sighting--37dcb885-16e2-432a-9807-693bfa60190d", "sighting--98c0e300-929e-4873-9639-e1a696fb537a", "sighting--95a98410-558a-48bb-9865-b37bc54ad101", "sighting--6977e2f8-189f-4d8a-a57a-fe2d8c665870", "sighting--f0e704e0-cf83-4a31-ae16-b845bd5e6193", "sighting--56693c04-ca97-4a83-bf26-e6e9d7263359", "sighting--2eae4594-5305-4265-b913-51d698c9feed", "sighting--9520d6bb-44a0-4e41-a589-f6962d95219e", "sighting--de985171-c2d5-40d1-9968-42bbf65b4230", "sighting--69e1a434-aad9-4376-919b-388c6e5ca035", "sighting--e8169873-2b1c-49fc-b3b6-2638552b04fe", "sighting--c5f26f5a-5c7e-4d9a-81c0-467afc2cac33", "sighting--07f6a67c-bbfe-4e0a-aeda-d62f78c690f2", "sighting--4d4648ae-7027-4c54-8819-eeec1007224f", "sighting--762511ed-0a9b-43db-8146-5e70beb6ff63", "sighting--548ab5ed-27db-4184-b035-c1e4c880cfb2", "sighting--cb350ddc-5c87-46c3-9969-064727e47caa", "sighting--1877f7dc-c160-4e8d-9c8a-cb278c985883", "sighting--cd622744-abcc-4d25-82f9-d75118f4420e", "sighting--ef1fff6d-29bf-488b-9d06-8cc1d754d983", "sighting--ccff31fc-a7ee-4890-a598-daa3a9369e5b", "sighting--c44ed303-0ad7-4d30-a0c5-579f061385ed", "sighting--099dcd8e-5c08-44ee-bdbf-64393695872c", "sighting--84231283-81af-447a-8da4-59a49a70fe72", "sighting--195a8ad5-c312-4447-88a2-48c4e3b1bd3a", "sighting--6f1b7272-bc46-4d2b-b329-f7c644ffac4a", "sighting--50af1ec2-dce0-436b-99f9-47562e0ae59b", "sighting--4b5c1c8b-e341-473c-9c7b-bbed9b7487e2", "sighting--060b573b-2c19-437e-83cc-93f21b477c64", "sighting--63e936ef-1406-4977-85da-c7cbb7535e64", "sighting--cf6ed5d6-5fee-4bab-995d-1d08e1eba4d5", "sighting--02bd1133-467b-4a7c-9314-86fcb746478c", "sighting--d7ff323e-4e75-4a8b-90df-8013caf33a7a", "sighting--782835bd-28bd-4bf4-bef6-2112f3a461ea", "sighting--d63acd28-8e6f-4bee-b554-5ef11be0f85c", "sighting--15f07a54-6d1f-4893-ab9d-4d693898f695", "sighting--3ad56e30-c2a0-4908-920a-a5b0ee55e260", "sighting--ba7476b7-e5ff-44cb-87b1-687e2eecdc76", "sighting--b80d0e38-4b02-443c-bb90-c2611c6da160", "sighting--bbdbc3fb-d8cb-484f-8486-0b5ed5899e75", "sighting--7aff7aec-5851-4a38-9285-7ed41ed3ef12", "sighting--9ee829de-031a-4a93-965c-a936433be02f", "sighting--5ff8b4a8-36e9-4d29-8f50-a15ed26e1908", "sighting--7959385f-bb10-4709-81ca-b4846d51898d", "sighting--23c20241-637d-40b3-8024-730102747795", "sighting--cf2c7d71-df9d-4b62-aea0-31d2b0dff621", "sighting--f74461ac-0efa-45f4-ac60-6181a7be42b3", "sighting--566b8470-9126-4eb0-a9ab-b5c0e98a54a8", "sighting--9826b856-aa5c-4bdb-a72b-0d4260bad392", "sighting--7115a240-9224-4f49-a513-2107ca86c7a2", "sighting--852b90d3-ced9-4728-b5c7-290379f71819", "sighting--e9a215ed-f4a1-428b-bb60-656909efd0f5", "sighting--8549c4ba-9829-4cf6-8766-006e12b40630", "sighting--d843a30d-8126-449b-a7c2-4e6dcf158202", "sighting--ff7686d1-458c-4a01-96c6-a609e4aa67e3", "sighting--93aa7930-6f6e-43e8-a2ac-06a04704aa61", "sighting--a52a1c7e-bb2f-40f5-b47f-9069e54f47d1", "sighting--c3eb1619-53ac-40d6-9cb1-26e0f3799cbb", "sighting--52e3bbe8-7e5a-4d78-9329-7c0fbfcc1078", "sighting--bb3db9bb-bf8d-4249-aa4f-35d35e4e177e", "sighting--d412b258-9ea3-4658-a344-08ace2a357f9", "sighting--b79769d1-348e-45c1-8c5e-6ffeab1e134b", "sighting--dec07df8-fc07-4a56-ab9b-4e9e074bdbce", "sighting--4bd1aebe-cde6-4f01-9a94-75c4e0c8bbcc", "sighting--0941bbaa-3cf1-493c-bc40-73fbbdd91a39", "sighting--b9f6d021-ac00-4c68-aedd-e9f6aee81d06", "sighting--530aedf7-00bc-4596-a06f-ff6848a5e399", "sighting--af9103ef-72e1-47dc-b889-ff440292aa1b", "sighting--e09688ad-5829-4fc0-a3af-fc3a07147d49", "sighting--e500fe8c-7ebf-4d28-b104-2727642b53b5", "sighting--2ff41867-5c64-4609-b29a-425afd90319f", "sighting--80891be1-2658-4be2-95a2-f80488368766", "sighting--cad2bcfc-3f8d-4c29-8ba4-5d5f0f522227", "sighting--00be14fe-b4a6-404f-9084-6ba4bfa01a83", "sighting--3e97d9d4-1c02-4e49-869f-15f4392fa1b4", "sighting--5981f520-10a3-4dc9-bea3-9cd6f2da0fa1", "sighting--bb089219-d15f-4a5f-b9a7-f530b11111bf", "sighting--8ffe8dc6-9be3-4d71-b53f-1ea06864481a", "sighting--20738eb9-fe3a-4250-b878-894f6713d4d1", "sighting--849d93d6-5b1f-481f-b7fc-3c13ab662aab", "sighting--b0050afe-9735-47b5-acb7-c491a232d5a0", "sighting--ea13c1aa-0f0f-47f0-b839-6d4e09d53f56", "sighting--989fe92d-6798-40fb-959f-30d5d0b8ab26", "sighting--a4f895a9-d62a-440b-8a3d-1d7975667fca", "sighting--24d53118-0c50-4e87-98f5-8c6ecb17e192", "sighting--8f58f9b8-87ac-4f83-a8eb-4da6943dadce", "sighting--e944f625-3fac-4922-b790-1ee99136f47b", "sighting--a02d30a2-ebf4-4c06-813d-5772f73c460b", "sighting--92be46da-589a-4d9d-8e36-4cb5b1e18e58", "sighting--3970c64e-d88a-4aae-a48b-05d06555bc60", "sighting--58068cb2-1073-4e3b-a93d-36510bc9e125", "sighting--b34fa1dd-9369-4153-972a-8b1b70861753", "sighting--019e6a84-4ef3-4cfd-8c33-e7899846fcd2", "sighting--4a2877fc-75fa-457a-8c45-da40b379ef37", "sighting--e018de14-f44a-4535-a5ed-7351e9bfd628", "sighting--c8774dcc-58a8-41af-bd8b-ec8e24b81b25", "sighting--63c0c62d-c724-449b-b8ec-1e5cae353155", "sighting--a6113e05-52c4-4b56-bad7-e310e70152ca", "sighting--1aecb3be-d034-43d3-bf2e-a4ae34f1051b", "sighting--34c0534a-7bbd-46cf-ad73-ea2acbb888fa", "sighting--323e8aea-8ad6-4f77-9b77-2af7d11b228a", "sighting--6d3c525c-2611-4ad3-b54b-0bf053a6c577", "sighting--42a3da20-9099-491e-a012-45e13e52cef9", "sighting--d9bec543-4a3d-471f-8d91-d7449d322b0b", "sighting--33d59c9e-a2e9-43ba-84a2-30aa9aa0fc83", "sighting--4200a0ac-07d7-43b8-8fe1-720d024c1e42", "sighting--698ba427-cc56-4149-98d7-5b58a7b014e8", "sighting--9a4dacb6-1b4c-4b21-8fa7-b6176a3a62b3", "sighting--a6953b80-8e97-43e4-86a2-f75b0cd4666a", "sighting--50355c03-fbc8-47d4-82a6-5c94a26679aa", "sighting--18f25db1-3bce-41ed-ba8e-3e42f398636d", "sighting--50a300f3-5b24-4ac6-91b5-e7c327a4cd5b", "sighting--c2f1fbe3-5200-4e4c-b8c5-16ded8147a03", "sighting--bd3f77e7-808a-4ae0-974c-9703952bc08c", "sighting--fab256c9-2b50-4f87-b35f-76e832990349", "sighting--12472d14-56ce-4b51-a3de-37e9b6b217a1", "sighting--5814ac2d-3c8f-4a5b-8ea1-e64de998a784", "sighting--d2bfac2a-82a7-415b-ac6f-5aac6e2839f7", "sighting--a839671c-5de0-41cc-a65f-8249453ed10c", "sighting--bcf55a9e-ec63-44a8-9f1c-919461e70157", "sighting--d9101cd5-d9df-4214-9409-9d6f4c4f23e6", "sighting--98b8c5af-5e84-4d3e-a89f-bcbe6c34306b", "sighting--a2165ccc-fd29-4494-aae2-ea3290de7819", "sighting--adadedde-97d1-42fb-a038-84f390087fe2", "sighting--28ed18b4-cc02-4969-aa3c-fb1b20cc62c5", "sighting--eca9191e-cceb-467e-84d2-34ca537f736a", "sighting--3ec5e58e-7869-42ac-9c99-bf3910bb5bee", "sighting--a6ea8a99-29e2-4a38-94e5-e5236b5d2e99", "sighting--0aa1654d-6100-4013-8313-1dd0957b66af", "sighting--e363b54a-f070-41ef-a58c-733e54b1fb14", "sighting--67dc399c-b507-44d7-9690-c7b57bf272b5", "sighting--e9687412-d09c-4e69-aaf4-e8c72027106e", "sighting--87313cf3-b311-4d49-baf7-1f8df00a34ee", "sighting--c711d155-0fea-45c8-8812-d8331de2be18", "sighting--2031ff6d-347c-4891-aedc-975d4811de69", "sighting--b6041c3b-fc4a-4fc0-a96b-0f75f53e94ba", "sighting--9d69e13f-1fda-433d-bed9-f61c11e606a5", "sighting--480aca19-0162-47e1-bba2-a0fad16c3abd", "sighting--93bbbecb-9804-41e2-a298-d41d1f8db0f9", "sighting--a76704b3-4aee-4973-925c-210669429390", "sighting--f73929fd-1e7c-48ec-a82e-657aea3318f0", "sighting--94363d4d-3490-460e-83b5-00cd016e9c13", "sighting--0d30d6a3-d848-4150-91ca-28aa14b2b561", "sighting--e0e37633-a264-450f-9181-3ca109d0310e", "sighting--724a5403-62a7-4a73-a6a0-b4e0f6ca6b2f", "sighting--3aab0d80-ad2e-4618-929b-7779416ad0c5", "sighting--08e06d60-37f7-4de1-8f41-c5d5da3aec82", "sighting--2c5435c4-9cdf-4ff1-ac72-d5fb3324f812", "sighting--9ec9861d-90a5-4085-903f-8a5a1305ebef", "sighting--60947289-6aa3-41b4-a905-180ec7cede10", "sighting--e9fc2294-71ac-4e31-bc63-02747662c30e", "sighting--5fd4b7d3-c78d-4702-a97f-7fd21b66ba0e", "sighting--5faba232-5884-4f7f-8a7a-026423a81db4", "sighting--977801ab-0c2a-4a06-a69b-27208467d847", "sighting--76803799-8f98-4b83-94e9-e44feab6ecd3", "sighting--b5ddae15-2f2a-4ab7-9da4-a6a16ffe6f56", "sighting--48a84673-3ea6-41e4-9d9d-4a31945a1ffa", "sighting--be3e705a-d62e-40e2-bc66-3041aeaac61d", "sighting--a5d0674a-54f3-410c-a839-a50cbd8d9873", "sighting--fe9b97b7-744e-4725-a826-405f1cb2b672", "sighting--36315c9f-e302-4969-8366-08680934658c", "sighting--40fca793-9d75-42d2-bb73-02c5d2d63986", "sighting--9eeba466-4900-4d57-8eb1-2f0b029ed6f5", "sighting--39c0c7c3-df25-466d-a00e-9e0e3b287d42", "sighting--027fe027-d930-45c5-9cee-9ab1d6db3591", "sighting--7da660c7-6a7a-46d7-a9c4-2ee3247d34ef", "sighting--7b912824-88ed-4d2e-b194-d93114792a26", "sighting--34f10a2a-ee4f-46be-8c2d-885632640e81", "sighting--853ea076-b789-4c74-b2b9-34abea5a31b3", "sighting--0ab962c1-f9af-4633-aa1f-38bb6749cde6", "sighting--840732d4-2e06-4e04-8e42-1d257539748b", "sighting--67cadb0f-1a63-4b4b-9b18-d89ebb646d4a", "sighting--98b18292-8728-497f-b781-003a142e96c6", "sighting--47701fe8-f64f-4489-a035-dfb405db7937", "sighting--52acde96-fcba-465c-a2f6-51f377b02626", "sighting--8172ac29-4884-49ed-964c-3450a8ab2924", "sighting--6a5c5113-6c9c-42e0-aaa2-c0af30eed5fb", "sighting--754d96c5-3375-4278-bfc5-550ac0a737cc", "sighting--367b40c0-a9be-430f-901c-4492792fc60b", "sighting--e23349a6-ac9e-47fb-9050-2c541c8f5862", "sighting--62b8086e-fc64-478a-8898-7554633dcc82", "sighting--c1f130a0-58ec-4b6c-9a03-31ec6bd7a04e", "sighting--952613a4-29ce-43fe-b829-53a62791d0d1", "sighting--5f61e5d8-6bb6-45d5-87e5-14263d982ea4", "sighting--b816eaad-071b-495f-a9d1-cf7e15bfb2d7", "sighting--b5a192c2-4369-44e6-ab35-43195e5ba9e8", "sighting--4069d93e-72b2-4b30-802e-c8a5f7116212", "sighting--b474764e-6fa9-42d1-902d-f84632a9142c", "sighting--42d12fc6-4858-4a80-acd4-f042469b2340", "sighting--28399efd-b269-48f7-89c3-56e91765644e", "sighting--808485f3-f0a2-4d3d-a4bb-0065d8264c08", "sighting--ad950210-8606-475d-b726-870e85037d38", "sighting--5c413474-7905-4498-9b92-c26c8a3727ff", "sighting--d84d1e76-9046-4d54-9733-b065f9ea0ace", "sighting--03beb6ff-51d4-4883-8d91-c20ab43b8a03", "sighting--a22b7176-ff1c-4bfc-ba17-088c788e39f1", "sighting--6d8bc417-fffb-4e4e-bdad-2a00b1811a45", "sighting--3ec5fe62-5ed5-4c04-90b8-aa7ee1cbe884", "sighting--48864885-8263-41a7-b015-5ec54675b7c2", "sighting--8f3fc87c-7660-441e-ae9a-8abc09a9828c", "sighting--a3581ea4-f235-420d-b6f8-98fb1e629281", "sighting--a2211b08-ca51-44d7-b8dc-7bf2a74ae58d", "sighting--ce7d4772-ffd8-4e86-8546-b11d55521df3", "sighting--169b08f4-7985-4f27-8d85-830244f8f863", "sighting--ddbfc2ce-14a8-4723-b105-e7d3f90288c5", "sighting--bdd3268e-bbc4-4e7f-830d-fbf853765fa6", "sighting--89cd280a-9903-4d2e-a277-f37a0fb2a194", "sighting--98720132-647a-4c48-80c6-7189b53b5109", "sighting--7171581e-fedc-409c-8df0-26430c609cca", "sighting--e2d61c83-1611-4f99-bfea-265a01840bfe", "sighting--7ca27880-7ba7-4ee9-a3b4-d73bd70ef1a5", "sighting--19f49f3f-66b8-4bc4-90fc-18a0ce3398f4", "sighting--a5355c93-dcd4-4063-8ec0-0c360481ea82", "sighting--ae0e861c-84b9-4033-8b07-89f8ac54cb78", "sighting--246a77ac-0fe1-4808-808f-59ae560da251", "sighting--782d902d-3dee-45af-99ff-c1ec9395d842", "sighting--383b0c70-0855-44d8-a359-f535280a26e8", "sighting--0c702e5f-72c7-48f0-af2b-9986ca2bb3af", "sighting--866c25d4-3252-45d7-8527-92a8c0e89412", "sighting--2a349eda-1468-44c1-9d40-87b35894e427", "sighting--00207dbf-d309-435d-9ae8-bac158d706aa", "sighting--f638f346-b8e2-451a-8034-275dccce2337", "sighting--f48ebc9d-db2b-404e-9b2f-ed6945e1cfd6", "sighting--01401fd7-b06b-413e-a6a4-d2c790feb77a", "sighting--79424448-7978-4826-a8f5-6505fd66a58a", "sighting--ba1849f0-a4bb-44b6-b6a4-56769e943e67", "sighting--0fe639fa-31f0-4cf0-aaf3-1b748365387d", "sighting--b4f194f2-65c4-4ca2-97c1-9a2f7be9a81e", "sighting--3223d259-170c-44a9-aca7-3cab82e9a0d3", "sighting--73e9c8ef-43b4-435c-8e0a-06556ae32ceb", "sighting--3b082bc8-b758-433a-a560-557469723905", "sighting--4a6f5fa8-1e97-4493-b44e-7408b91fad44", "sighting--287c90a8-5436-40ea-91a7-b37e15a06325", "sighting--e29cb350-d479-4e3d-8664-3b4bd14d3ce9", "sighting--b4457105-430d-43ad-97d5-4314511e5088", "sighting--087558b6-5150-44a1-95ca-a9ffae176e55", "sighting--d9e9b4b3-cf7b-48d4-b43d-3d47e3750005", "sighting--b2e2c9d3-c75e-4041-a7f9-34c62c1b1336", "sighting--3895e583-7fd7-4d1f-974d-05f90cbe5eae", "sighting--7a90a7b7-cb9f-4c33-8166-5217b14a6f9d", "sighting--ec6da584-219d-4c6b-bacd-8c3a1f0ae099", "sighting--e4f2ba13-01cf-423c-bf84-b7ccb5d15bbd", "sighting--497fe18a-3db3-4288-a99f-491de253a518", "sighting--d243c16e-757d-426a-b70a-dd075b9cfde8", "sighting--258f8bff-da40-4e12-8555-e4e5ce7580c3", "sighting--42f5b522-f19b-4869-aa3c-4884b9fbe4e3", "sighting--80bd64b2-6c19-4dcb-81ef-49fde452643f", "sighting--54e3c785-0794-49a7-b3dc-ffb8f6438c91", "sighting--46e5656b-1c8e-4272-a43c-64ad544f94b2", "sighting--d7a19fb6-695a-4185-be07-3671b4902774", "sighting--8254c0db-7c5c-4e1c-ae0f-a010f82546fa", "sighting--6304285e-0491-4abb-9878-169df4a6cc4a", "sighting--5337a120-94ac-44e0-974d-12bcc849199c", "sighting--d7e56cfc-56aa-42fb-9442-9b312a1aa3b1", "sighting--cedf6dc3-5a00-481f-b0f6-97f19d88d07e", "sighting--b89eeb04-8e07-44b2-a0c5-83a94943f4be", "sighting--4fd7e5d2-3df7-4f1a-abea-9608cb8b00d0", "sighting--e6de572c-8976-445f-9fb0-2de97fb78c59", "sighting--4fd07049-4409-4d03-aa71-2d213a7c9cb3", "sighting--4db807ef-fc62-499a-8bc8-cee676c9af70", "sighting--f1ffaba2-e8be-4238-897e-16229bfafb04", "sighting--94d1bf2d-9b23-4227-89d6-52d8d73abcb6", "sighting--46d93f56-1b69-4132-96d8-d186ad02b131", "sighting--43552174-3deb-4045-adc1-75402889c72c", "sighting--c2005291-5140-4bc0-858a-38e1ea29db27", "sighting--8eb962fc-3085-41fb-b0b5-61bf99bc7142", "sighting--d85a7ffe-bef8-4fa6-9ba3-b5af4b22d8f2", "sighting--f9df210f-d345-4384-a5d5-fb1d87729f16", "sighting--eac71b4e-3880-4132-b96c-1e459e22b9d3", "sighting--8dbf94aa-052d-411b-adae-c686bf657d36", "sighting--3a0c6eae-0ad9-4e62-aaca-9552ae1a87a3", "sighting--309a49d9-9073-4800-85c4-365567c7a731", "sighting--16109022-b569-4a1b-949f-cf13e8a19f3e", "sighting--8674f948-ad98-438e-a898-11ceebecc5a4", "sighting--e14c9ce4-4b92-4bdc-994d-f190d315a39a", "sighting--17696963-2306-4b15-b493-da2f66db4264", "sighting--81eafa64-f7ae-4b23-84c9-909f5ea3ccd1", "sighting--7336517b-6d05-478f-ac67-50383a002f03", "sighting--c5a4b094-bcc8-49da-8559-ba1a454a428b", "sighting--2ebbb123-60a2-4bee-a6b9-a5af9f909b52", "sighting--bb66bbf0-9fd4-4688-9c08-3cb4b22f3998", "sighting--575a3fda-c19e-421a-a5b9-f504dfa5374d", "sighting--770f60f2-ced5-4ec9-b70f-599252061212", "sighting--c5d13dc6-b940-4ecf-b403-3f3dd5163def", "sighting--ac4f9c57-7ca1-4858-9843-2da847f135ef", "sighting--b32970ca-f8d7-4502-ad0e-f7b7424e7ffa", "sighting--fb8fcae6-4279-4bad-907e-563551820c2f", "sighting--5b901188-1add-4002-bc92-7feae8fd36a6", "sighting--e738e7fa-7750-41fb-b335-ead736248cee", "sighting--bf0ad9b1-0fd1-478b-98f0-e2e9e49132fb", "sighting--d8675d95-e40f-4576-b568-83b4c92267be", "sighting--f4f2da7c-d51b-4086-a2cb-38848e8cf163", "sighting--e8564921-6489-474d-bded-cb4524517737", "sighting--76048915-0de4-4ee7-ab52-c7d70be05113", "sighting--e540707f-d349-456e-b32a-0332f5076761", "sighting--4770f4dc-af76-4caf-bfac-5ffe41c26927", "sighting--1fa5d36f-55a3-4eb8-a6a4-96b94835d719", "sighting--b8dce495-916d-449d-9e87-df007e92ef56", "sighting--f103049b-7fe9-44fd-a141-0d6f9fca26bc", "sighting--26db7a67-000e-44f8-aada-537edb4b8b59", "sighting--3f6e73b5-f5e3-4ec3-bb89-d9306d4fe55b", "sighting--7afe7ff8-602f-495b-8ac2-76e46d70ff17", "sighting--2a7683bb-ab8d-4db0-81eb-81870d864764", "sighting--9078c455-969a-406a-9011-c8cb165bc52a", "sighting--c5f4bfc3-cefa-4bec-a9eb-af04e4ac6482", "sighting--7c506f83-bc0b-4704-8b43-1e5b1d3e5f08", "sighting--153f3cf3-4024-4642-85a1-adafae06fc9d", "sighting--47eb16b6-f32a-4d32-bd57-151ca947fc3d", "sighting--aaeb2293-447d-44c1-992e-b76a96e276a6", "sighting--3e618d8a-8cdf-48d9-afed-2bccfb55d1fa", "sighting--56897ff2-779e-48be-bb6c-3f246c56eb6e", "sighting--c64259fc-4161-4340-8f53-1c4f96d8c2a9", "sighting--f4fb64dd-00dc-4430-bcbe-86c5f38e6d7d", "sighting--1ddacad0-6316-4217-a768-122eb0758662", "sighting--3a73ec02-55ee-488b-88d9-8e248b46efbe", "sighting--32b80145-f280-416f-ac4c-96d441dc21f0", "sighting--6672c60e-f57c-49be-a664-1615e276e95e", "sighting--52be82cf-086c-4b16-b378-5cfdc32af863", "sighting--0b8ac546-a9db-4871-ba07-23823d9494d7", "sighting--9cd2602a-24fe-4b6d-b040-bc0aa605498f", "sighting--a8879220-651f-4516-926b-d790d816f292", "sighting--1010714b-6167-4d9f-8c26-c4085a04e55d", "sighting--c446f50d-fc0d-44d9-81e9-f7171d5d2ec6", "sighting--72b011f4-3fb3-4ad4-8e1c-e29179b348c3", "sighting--171a6c68-9c0d-4bc8-a6d6-9a3680f0bca4", "sighting--01bb24b3-5f80-49ef-9f82-2aa44bcda56c", "sighting--61f4fa5a-31d3-4078-8b1d-9770f0e5b8b1", "sighting--64090790-2681-4051-ba7e-10e08d8c9770", "sighting--be83d5e7-f50b-4fa4-b46f-5578eb8ac8ce", "sighting--fc381b8e-b436-4dd9-8c20-0f9d705644bd", "sighting--dc620960-1a28-4c7a-ae5f-7e5e167f51b7", "sighting--8ecf749a-f461-4591-9be5-ebd1cd16ea93", "sighting--f36056d9-8d1a-4c0a-a14c-b5425d633d70", "sighting--17d612b5-00a8-4e04-bb1c-c15a2cd3b162", "sighting--5edb366c-d529-498f-9956-979afa980f0e", "sighting--0103e560-1124-41ac-b05c-37fce3cf4968", "sighting--b13076c8-a8b9-40d7-a45b-4e5b917c851d", "sighting--1d85dcb0-be24-44a6-a521-e3838263b1a1", "sighting--918f729c-b3a7-42f0-be41-27b0a9f86c04", "sighting--e3926525-547a-46a0-b031-27274ed2a254", "sighting--677edab4-edfd-4d24-825f-05df572c0cca", "sighting--f83b1424-ab40-4b50-8b5d-ad9f6272f8f3", "sighting--9e61f3e0-e8b2-492a-9b3e-b0c13a2a9f30", "sighting--f6f72ada-5d4d-461d-89c2-27012ecdd226", "sighting--fed0f98a-4598-4c61-82c3-a73c3f3688a7", "sighting--afcbfaf2-fb0e-4bc1-b266-2e7af15cda6d", "sighting--33ad13c9-840c-4119-8f2b-605399a0dcc0", "sighting--f7035add-8b70-45b4-a0b9-b5ba5bd038fc", "sighting--94d52bd0-df16-464d-b701-4ea3cf157f21", "sighting--ace1fea0-c898-4fb4-852c-ac5840abcddb", "sighting--10915242-9d14-484b-a729-9e4a120e93c6", "sighting--720f954b-6732-491a-b945-9bfd1f64fb14", "sighting--bf08fec3-9c1e-4cde-9678-704869ce7751", "sighting--072b7e88-ac7f-43d5-9cef-51b8256b2fee", "sighting--a5f926f5-ec4c-40c6-97b3-5a59474d6cd1", "sighting--b1d10919-cffb-410f-8014-6870fa6dbb07", "sighting--9f88ce2c-2f3e-412c-9704-4a92d9189f8c", "sighting--b18307e2-4cde-4b79-9951-5fb7e51b1ac6", "sighting--d5d6c59b-e57f-4b96-b2f7-a9daaa6e9f6a", "sighting--0e2fe5df-4087-4ac1-88af-daf252aee4cc", "sighting--e2bff594-0880-4b57-8a1b-d884893ed571", "sighting--4f3bfd3a-7572-4c67-b625-1f77ec6b7beb", "sighting--cf83720d-db6d-4f2a-b4dd-8e3ec17dd2ad", "sighting--a04b3c97-58b8-48fd-9b8d-9f5e53439e00", "sighting--b907b2be-d6cd-4f0d-94c1-ad709e2a7a30", "sighting--c026d994-57b6-43fb-974f-c78415bb0c95", "sighting--1a607dfc-96bd-4ba5-95a4-372861f24ffd", "sighting--0a8d53ba-7af1-484a-ad17-9d560f6433c4", "sighting--0fc6da86-95a5-4db2-bad8-ed74aae1258a", "sighting--ae8d0586-1511-41c8-a8e8-f7ad3af9bf37", "sighting--91959b32-a601-43da-97f1-2f7113c7b437", "sighting--bd9ccb89-fa59-4edb-a1f1-02e42d2f596a", "sighting--8735d486-7e8d-4569-b037-b9fc09a3b3d8", "sighting--cf1dc3f5-8b16-4ed6-940e-770840840970", "sighting--97c97490-7328-4e3a-b7f9-07b1c1825800", "sighting--29877ad9-dae6-4844-8d06-8bd275a5293a", "sighting--ca357f43-ecc9-48e8-8a10-a0fb484ca993", "sighting--a4ebd70e-a0be-431f-8f28-87eef390666e", "sighting--7d3d95a7-4e66-48cc-a83a-3cd5518d1267", "sighting--3be5a594-245b-42f7-9f31-5d41e4338cf4", "sighting--cd7379da-67bd-43de-8cbd-a0a2c8244cdd", "sighting--94cf0f8c-c0be-4def-8bf7-877ddcf2d016", "sighting--9cfc80d5-8f75-4ce1-b3e5-8073c2217e57", "sighting--f200237d-800a-46bd-b28d-16e22c67ece1", "sighting--34f1b436-b36c-4c2f-8d25-eec2b7c00633", "sighting--851ffb22-206f-4f0c-a478-07793f20a246", "sighting--7ad7721d-c050-40ca-bbe3-8c285d5cb3f5", "sighting--1642219e-3a4e-42af-a84e-cb9008be5047", "sighting--c66f1262-2d31-4562-83db-06c13c82e73d", "sighting--f896ca98-72c0-48c8-b148-2bc757997b7d", "sighting--4aaf10d1-c3ae-42b7-8d2c-639c82527a62", "sighting--22b4a97c-0725-4853-80d9-f52de524919c", "sighting--ca92a586-9386-495b-a970-a7b9bc4421a9", "sighting--edfd052d-78af-4514-8340-4fc2709aadde", "sighting--e0b75287-32e5-4bc8-9dfa-1622a244a60f", "sighting--38abedeb-ab13-4874-a45a-370bf287c349", "sighting--5a59760c-864c-42f7-9a12-c377c662f0de", "sighting--594478dd-ec01-4456-9e1c-77f2f13e36b1", "sighting--0376fe1c-082d-4c6c-8a57-c93171fe903c", "sighting--33e6dfc1-b3da-4885-9308-11b0c78f5cc9", "sighting--627f1bd1-f8d6-4f76-8fa7-291ce7be0606", "sighting--668d50aa-5fbe-41e3-96bf-f0f77f405cda", "sighting--f4caf59b-3837-43ca-bfdb-fcee4612fc0d", "sighting--58cdb2cb-6314-4fd0-aacd-0081f3ac2680", "sighting--dccc9746-54b5-413e-b145-26804410b753", "sighting--42bc58db-094f-4aef-bc57-075ba31a974f", "sighting--f2ffa538-9d10-49a8-a0ba-079ce95cb516", "sighting--947eb02d-a87b-4cf0-a254-f0812eb42c6d", "sighting--b5692016-3b9d-434a-bd48-82d0dd0c8b80", "sighting--56ac4a85-635a-4d56-a73b-661ac9b3f5a0", "sighting--09e89e0b-8843-4ef6-a49c-604b2200d376", "sighting--f6227f88-6db3-462e-980d-d63196fc5e3b", "sighting--59b37e4b-ff99-4b2f-bcf4-89ed401015cd", "sighting--590a89a8-3592-4de5-a7ce-30f714969744", "sighting--e9d48c44-8e0c-4356-98cb-5489b594ab1e", "sighting--cb363b94-a195-409c-8cc0-2831c8f4cec2", "sighting--e881af24-fac1-40d2-b611-c526fb2367df", "sighting--da033de7-7ab6-4abe-9ec3-fb6d18b8eefa", "sighting--0d0c2153-3b6d-4c2e-8121-26c1229999a3", "sighting--621f6ad0-0cb5-4d22-93c1-11a3d549ec4f", "sighting--d99240d7-6d82-4fb4-85a4-9f6c4ef302e5", "sighting--1203ecff-ee6d-4dd0-8e53-9074ddb22082", "sighting--34500cfb-981f-4dcc-8be2-5911d26086b2", "sighting--32e51338-cd3d-4866-afd0-76ee0f6eb5bf", "sighting--e5ae0da6-8e97-49fd-bed8-3067c6041d6c", "sighting--b751af64-e703-46db-8b69-3a516f21e1ec", "sighting--51e80f9d-f870-4080-93a6-43c2f0d3cacc", "sighting--3b3fd3f0-478f-4455-b98c-b346e00285f7", "sighting--a13a3398-4e10-4dda-a7d2-165fc7c32124", "sighting--89c554d3-414c-44b9-ad01-2d5eb88a88a1", "sighting--98af9815-11eb-4c37-a8dc-aeb56036d03c", "sighting--bc655e07-ce06-439f-b189-99d7031c187d", "sighting--14350f8e-fe00-409c-a081-2f1666a63fa4", "sighting--e1914de4-f284-4856-9f37-46c71ba74906", "sighting--2d167bab-80d5-46ce-89e3-612520451b37", "sighting--7df723d9-cc0a-4738-91ab-896f6585cc9c", "sighting--7806f75c-34a4-46fc-83be-1428b11cf20f", "sighting--e004e3f2-dc01-4593-8c44-cc61635e081a", "sighting--7f6a92e3-8fbb-48e7-a594-3fd977fc8e48", "sighting--365a3acb-8751-4588-aa0f-092745bdaa59", "sighting--4fb20ab9-248a-42c5-a774-29098a3f3561", "sighting--0218b44b-628e-4b49-a51c-26eee3611806", "sighting--e272e1a4-5098-4e96-a3e5-9b4d0c3f99a1", "sighting--066e9bbb-4a8f-442f-901f-26dd5442d2f9", "sighting--b0f92891-03ca-46a4-94a8-29432bbc5d77", "sighting--8dd4ab51-7409-49e9-9b17-e77eceeede08", "sighting--bb6e083c-4f0c-4a89-8d9b-c26dd26fe066", "sighting--28f90cb7-a421-4d1e-a953-9bf8b35e2de8", "sighting--92116eb2-6e8a-44a7-94a3-86171d8a6448", "sighting--40a10c91-d081-4650-8bbd-8f175de3985f", "sighting--afcdb2cb-3a96-49f0-9e3e-61f1fe856ab9", "sighting--23938e78-0742-4965-9f28-1f9dbc89c712", "sighting--dcd1ab2b-2e72-493f-bbe9-b237994d06cd", "sighting--f822195e-4a4f-4ed3-97b3-f2b89826ce4e", "sighting--5e83e9f7-793c-484d-9ae1-a7792bed615d", "sighting--e77c735f-591f-4b35-b190-f008e26427d8", "sighting--ec9cd386-5f61-4aeb-81b3-0f80d5ef93e5", "sighting--be39c7ab-9b2f-4ec8-9c41-602d4cdd3f95", "sighting--8d2c59e0-aaba-4a4a-b6a2-84ad0ab95b8f", "sighting--fa671eba-a1b5-4563-a61b-9c04355535f9", "sighting--822f59e7-2e57-4733-854d-dab09aca29a3", "sighting--cf809d01-f570-4100-8aaf-7e9f2b6ceb20", "sighting--fd520926-9ad1-49b8-b24b-023f70443ab4", "sighting--b480014a-c377-4d8d-879d-412ecddfeaa0", "sighting--cb5b1303-2e75-48a3-b2bd-60468f73ba8a", "sighting--25a1360f-22bc-4a3b-a903-31a55cd69540", "sighting--ef131209-a375-4ff2-8210-ad9d97bdc67d", "sighting--a488a8e4-2639-4f15-a9a3-81ff3cdd9880", "sighting--9df052f6-b14a-4b9e-8299-db35e44b6503", "sighting--174679d3-a287-4086-b8ab-012be2a3b50f", "sighting--b68bb9d2-2720-4a0d-962c-c72c5cba5e9c", "sighting--66016178-6e83-4cb0-b93d-5199369a34dd", "sighting--8d89d3ec-6a6c-47a9-a22f-9b3d10eb2061", "sighting--87cfec13-3029-4f49-9fd4-83edbf8d1fce", "sighting--a842ed45-f307-4552-bd95-b8a8672518d7", "sighting--12da862e-77d0-4062-b91f-c443a605baa9", "sighting--66bc2424-9170-4245-9643-631f31e9aa29", "sighting--4ccb9eb7-a7df-4953-836d-10fc95fd6777", "sighting--5fc92274-c831-4f8b-af4f-d2110deff102", "sighting--a1dc7c62-ee82-4658-9928-8dc705630435", "sighting--411ca2a2-0350-4563-8928-bddeb61ca134", "sighting--66f07b79-e2eb-45c1-a024-8f1db65e524b", "sighting--8e0888aa-72e4-42ff-80b4-230fa2cc33ad", "sighting--c8516eb6-33c1-46b0-8241-c10d6ba8915d", "sighting--14f00db8-2778-4d9c-ac0f-ce1e08e6ae61", "sighting--827092b6-3322-4d02-8789-e9d54567866b", "sighting--91cd4039-fc94-4089-a6bd-94574ff81900", "sighting--e6ad659e-8824-4046-aa82-50177715454b", "sighting--85fb2138-745c-42ce-83ab-7b181f35b34c", "sighting--748f6e98-b74d-4536-8669-82aa4739aeee", "sighting--30e2beb8-8a79-40ea-b63a-0089563b3568", "sighting--46e2909a-86ab-43a4-87c1-b2877daab7ef", "sighting--62f1dfa2-4db0-4185-921c-8c74d1cb21ad", "sighting--91578bdc-7f5b-4a56-a8d0-7a136682326f", "sighting--4fec97f7-149d-49bd-ab0c-4c766e85848e", "sighting--91580b5c-2848-4bd8-a6e1-69cc5da3715d", "sighting--02f130f5-d221-4e97-a6c8-ca5ce2ba1deb", "sighting--dc65fd12-d838-463d-a9c4-275b0bb2a17d", "sighting--33bb2b1d-2a1d-4797-aaf7-69c4a23f054b", "sighting--0fabc284-fe86-40cd-acd5-7b1f4a1077e1", "sighting--a8fd4a71-05d4-4bfa-ac0f-a710f6c17dd1", "sighting--ce5df9d7-d730-4cc2-a2c8-d5931d73dd4e", "sighting--705aa400-2c15-4f15-838c-f43a03044e35", "sighting--713af4a1-3047-4722-96b7-2d2c8a3508b3", "sighting--fafde188-5c29-405e-a646-9a7e7357707e", "sighting--f67a0f91-16cb-4ffb-857b-163dc3505943", "sighting--d028df07-f4d2-4a3d-946c-6d9de888bc59", "sighting--bf585e36-644b-4d34-8b1d-f2f3d0a0c2ad", "sighting--142ceddc-7a7b-4e36-8d73-c0a1109a1b0a", "sighting--579efbf5-e2ff-48bf-8a4d-0772082661c4", "sighting--e2a526b3-ad4c-430c-a809-bbb73e5e2bc5", "sighting--ac30223c-a7b1-480b-b5c1-df83ed5764c6", "sighting--f7257709-2ac8-482f-99d4-5c4c256d545d", "sighting--74689034-67f7-435f-bd18-496bfc562fee", "sighting--884b2108-5930-4740-9ac5-eb14388132f5", "sighting--d7726b45-0481-468d-b22c-7ce52ca79905", "sighting--bd0b3ed7-b4a2-4d00-a650-97902d7b0014", "sighting--ba10017f-2a29-4f4c-b97a-41b9c8c86f97", "sighting--34e41a90-33af-4556-91b3-b121ce3dc923", "sighting--f800b3b3-aff3-4dd7-a835-e559e01819f1", "sighting--d6c197e6-84d8-4b86-9f81-8de221360cdd", "sighting--b393c5f1-765f-47d7-b92f-d5ccb81829d0", "sighting--65dcdaa7-a04f-4799-8bd1-865e672ed13c", "sighting--7c25ba13-eaf1-4691-9c51-1974efb3aed8", "sighting--bc8ae31e-59a6-4077-b37b-479adf533a55", "sighting--81c743e3-040b-467b-8660-991e922d4827", "sighting--40886346-4bea-492f-8a44-8bc3bcb5bef9", "sighting--16bc5cd4-d2ec-4231-bbe2-c1db92ae824e", "sighting--e3192f72-fa99-4f08-82e0-a6797b9be20a", "sighting--aa5baf27-ba24-4e90-89a9-19e7d0180292", "sighting--051a4e23-487f-4ff4-87a5-bb3efadc3240", "sighting--e6c3d5be-7826-45b3-a8e0-79fa0289baf0", "sighting--fd115483-47c4-499b-a59e-80ba3e0e0375", "sighting--359ec2b0-9967-43d2-9c2e-0887cf16da90", "sighting--ecd2f308-b38d-4c64-a076-8cc501bc8e0f", "sighting--a8bd6115-319f-4c7b-b50e-7940207e51e9", "sighting--d5966e00-90dc-4aab-9e22-722ea2ac2964", "sighting--daea9f89-06cc-4ba8-a2e6-957304aea400", "sighting--602da137-de68-4310-a2bf-414bf60b9449", "sighting--4c2385e1-89e8-47d0-a086-79480a690483", "sighting--8a3b4fd0-b4e7-4e24-a6f5-d08f87d84cd8", "sighting--49ff006d-f1c5-4afe-a0f6-facde8bdd4c0", "sighting--31b590b7-1742-44c5-ab09-77f364d4c651", "sighting--73e214b2-b3db-44a0-92ba-ef990453accc", "sighting--f4f67922-abec-4a1d-9cba-4169ae3f06e8", "sighting--0764352b-aa99-4c22-a5d2-39700c3244c9", "sighting--6d23ccb4-b867-4b1e-85ef-abae3b9e336f", "sighting--7e3a921a-5aac-43b9-881d-2213f125e68b", "sighting--0f4c3156-7dab-4c97-8315-d948f1b3a513", "sighting--dc7ad01f-b8ce-415a-bc96-c4529f07c6c9", "sighting--3e89ca27-dc50-4eb5-a9ac-18cb699ff721", "sighting--c0476eb7-55ce-46b4-98c6-a484e91d8772", "sighting--c1ece313-a51a-443b-bfbb-3a70989216fa", "sighting--f3c9f618-b30c-4e2d-bdfd-16ff658ed3f2", "sighting--082814f8-c670-4198-82e7-3634ad742e8d", "sighting--f0ef9bcb-7205-4fef-8af3-e03f24f0695e", "sighting--83c2e416-f98b-4866-a2e4-72e3bd5e4e35", "sighting--573f0405-f94c-423a-8ffa-58b70fdb0b9b", "sighting--c967fa40-7a6c-48cc-ab06-64ba51d359cb", "sighting--719c48d2-29ff-4a5b-89c3-b90be5725dcf", "sighting--b9dd47d3-a96d-4fd7-97db-037a0d1abf60", "sighting--b988e8ab-5b7e-4f1a-a1a6-4486a704fcb5", "sighting--630bde9d-8537-42f9-9052-700f06898930", "sighting--bbb178ff-44e6-4350-9366-aa78a8265802", "sighting--7860d9c4-986f-4012-baa3-26e6deea831b", "sighting--69d03ce8-64ef-4407-ba1f-03bbfc4fe009", "sighting--c9c65a55-e492-4047-b310-0db7dc1037de", "sighting--dd5fd442-a77d-485f-b832-cae824327fc5", "sighting--9869806b-c3cf-4d4a-9266-393f360a20e9", "sighting--06219ab7-3414-493b-920b-3ef7fac98875", "sighting--d9718ab8-eddd-44e8-a807-591cdc8e36eb", "sighting--cbf4f50c-e911-4df8-a2b2-c1f7ba8438ee", "sighting--2d330760-883f-4b60-99bd-8e506d3a23c3", "sighting--0791b403-8456-4534-b97b-d72c0501ffef", "sighting--3ae8491d-802b-41f0-a894-975505ffc4d3", "sighting--21f505f1-ce99-40e7-8b55-27cb139dbc12", "sighting--a9dbdf24-7129-4c53-b712-a3e76f408f95", "sighting--7d9fbcce-73ad-4456-b2b0-501049fa5cd3", "sighting--3b7e5f4a-ae5f-4b4b-aa0c-7861719cb9fa", "sighting--3b7fdcca-903f-419d-8cd8-7c70623bc7a6", "sighting--c915f93c-dc0e-4482-a159-907f8c9f909b", "sighting--ac9598df-b8fd-4060-be7d-8e01080bac83", "sighting--b1886f79-c64e-46b1-82d6-68573c786d24", "sighting--94fe3dbb-063a-44d6-a724-5a2ffabb4d05", "sighting--093aa238-d89e-455b-8acb-89f30a433149", "sighting--e9ef889b-75df-4631-b167-fda2745f6a85", "sighting--07f942e4-8465-4247-a6e1-cbfa53160aca", "sighting--59e713d8-d89f-4b29-9b56-0800c1f41214", "sighting--03af323e-0e9b-4aee-a100-8c347df160bf", "sighting--39b22734-5389-4d33-9961-55f0000a0374", "sighting--64a1c2f8-4fb2-427c-9e32-6a66f63fca5a", "sighting--58b34337-f4f0-47a2-92d6-d60eff315e13", "sighting--e5b5cadd-bc73-4ddc-91ad-66ea393ca7d3", "sighting--4df63ab2-1c6d-459c-b9db-32c69bd332c6", "sighting--4cfff28d-b793-455a-8c34-6e3e7ba27e63", "sighting--d092454d-24c0-485c-ba17-8e410dd8f4d9", "sighting--aa507e55-90f7-44ae-b037-cfc53f8df201", "sighting--e8d2e92d-f3df-4d09-a0a6-6beb4faaa7a5", "sighting--e012c80d-5496-4889-b4f6-3e391fc251dd", "sighting--0afc2a85-2099-45a3-aeb5-4cd1b5509fb9", "sighting--53247e49-89cb-474e-a52f-815fe2f67a96", "sighting--dd219e37-959a-4a69-9318-d391469107d3", "sighting--30ee894e-4f84-4327-bb65-5d45305e2522", "sighting--854b730b-df93-4202-be80-9e55a9d086ae", "sighting--9f5d417a-c27d-49dc-96da-e7a9b1dda231", "sighting--39f99084-200e-4113-bae1-6190cefbebe6", "sighting--d896b4d4-9bc7-4a77-b0a4-7508a2dfb200", "sighting--c85a845a-bafc-42d8-b703-87ebf28d9e0c", "sighting--92c5df9c-e42d-4d8f-910b-c309afd5aa79", "sighting--d0d4781f-d0fc-494c-b655-c5750ef7f887", "sighting--933ec102-aa55-4339-aca9-b997abf4d756", "sighting--1269cd74-a7c9-413b-b8c6-18930f178e05", "sighting--022d21cb-2058-4bf8-87e3-bcf6dfd54c9f", "sighting--bfa1937f-0e91-4582-8566-93986a04c356", "sighting--7cf24b3d-2b8a-45ed-8d88-7e94c86c443e", "sighting--8391fc62-9fd4-4a6c-abb5-7665bde0d7b3", "sighting--180d941c-f679-46f5-b38f-d41011548349", "sighting--3b7fabae-223d-49e2-99ff-b0f81a541c16", "sighting--3a5afe42-9374-479a-baa9-c597e6065f6a", "sighting--059c7305-715f-4b7b-a686-a5d4dc224409", "sighting--de3872d7-c3c7-4da5-924c-fd261cad388e", "sighting--ce1a0ef5-1394-48e1-aa36-e1a065b6f2a7", "sighting--cc031858-0bf3-4c36-b93c-135c5ad3cfd3", "sighting--ebf92d54-2ca1-4df2-b2c9-c855767410fd", "sighting--9d724c53-b6cb-4c35-9770-ea9fb2847d43", "sighting--f78769b8-e0e9-49b7-8550-3fba090cc032", "sighting--8774e0ac-a4ec-4a94-962c-69eae34236de", "sighting--f15239f7-12ec-4d6a-bd23-530d3a48914f", "sighting--e24a6638-a897-483b-a6ac-fac2234ccb20", "sighting--9e2c2a5b-aaaa-4633-ad9c-28ffae1c9936", "sighting--c410ae91-ccde-4f93-8c58-d4fc8c967be4", "sighting--a472ba24-9bc0-40e4-9811-6c5e972aae60", "sighting--2d8a6c4c-edaa-44e1-b80d-a28b1c022eea", "sighting--66d5c970-05f2-4467-8311-a874f7b3d558", "sighting--55069842-cb20-4ab2-9537-f1eb085e68fa", "sighting--4eb1ead1-d8bd-412e-bf13-59f6e370c6a1", "sighting--cde47090-d389-43b5-b112-ff4e9df48b67", "sighting--ef02f52a-ea57-46e9-831e-089823acedd0", "sighting--06ea12de-77e0-4edf-9064-6e501b00a4a0", "sighting--9a45578c-ba27-47bf-bdee-7632151876ec", "sighting--ee8c9c95-ebcd-45a5-aa04-5242f640d622", "sighting--cab2082d-adc8-4029-9851-c5fcac289589", "sighting--3d917033-e0df-4b05-8a0c-f17129d01f11", "sighting--e7a35a99-4b18-45ed-b2b5-ec2fc782c5fa", "sighting--ca4f4472-5de7-4a8b-b2d5-bba8068613ae", "sighting--84c7f488-e4e5-4f8b-984d-c3a79a5279ec", "sighting--b96cf991-b72c-4f0b-95d3-6bd8c250d9cb", "sighting--75b7dfb1-b3e1-4423-bd3b-2eeb22cb6a8d", "sighting--8c70e6e7-b5fd-4c99-92eb-7c2eed91e61d", "sighting--f7db4a01-c135-4ae9-a190-d39c0e953d66", "sighting--96c8a2bf-43dd-43ae-bd05-492a9134aebc", "sighting--c540cd99-af87-46d4-adcc-c75e8545fd4e", "sighting--aa780f24-054b-4c6b-9ed2-7cf15d8c8697", "sighting--178e8c51-0b97-4fef-8f1b-74f3960afcbc", "sighting--086ac63a-255b-4dd4-ada8-e7be84212e92", "sighting--cb9a63b8-9f6b-49f8-93ae-410258d5545d", "sighting--8586e53b-4eeb-4527-91f4-289daafce805", "sighting--475c520f-5910-458a-b855-22ab5a9db484", "sighting--2b7beab7-b7d5-4e8f-91c6-c7101844b182", "sighting--72c9855e-e731-456f-b06a-fb9e45a51fa1", "sighting--b01c86e9-383f-48dc-a6ae-88cb61d055bd", "sighting--401103ac-2c4f-4ae9-8fab-709bac8ca35e", "sighting--517d7849-6840-4ab7-81d3-e435d0a6d719", "sighting--6b56eed8-ca65-4f70-8750-0bf56d8027de", "sighting--be433c42-0eec-4c5c-8eb0-fcd86df2be86", "sighting--774686aa-f1f4-4963-9a38-7cbeafc9258b", "sighting--83253f8b-0fbf-41d9-845e-e60402d83381", "sighting--754805c2-b4d3-4ed0-8dbe-01fff9ae9427", "sighting--026d0a34-596d-4b99-af1f-206862979277", "sighting--8cc2d644-a2d4-47e6-ac68-e052f06faeb9", "sighting--a478ca19-fd71-4bb1-986c-86d796ce3e2a", "sighting--6844cebc-9809-46c9-ad23-63249cf2746f", "sighting--d5916b9e-97b0-4c00-969a-5abf67249eb5", "sighting--9219cb62-b95d-4914-982f-b7898ad3428f", "sighting--417fc2f5-dd54-439f-bce8-705c58c8e890", "sighting--b7b3bec4-e7be-44f2-94ab-3d68d72ee78d", "sighting--acf46428-415a-4b21-be78-d8bf211347fc", "sighting--0df0927e-8cb7-45a3-b7d9-fc274174170c", "sighting--50830bfb-2e25-49fe-97c9-94e0935985b7", "sighting--868802bf-871d-4c1e-8e0c-695bcccbea48", "sighting--dd698d78-ce7a-4af9-abee-21c19b599281", "sighting--244c982e-65ab-42e6-a0c8-2fc58957c78c", "sighting--300432ad-693f-4657-99a3-cc5295962da5", "sighting--9ea13ad1-6459-4132-98b0-6aeb4b3fbffc", "sighting--aeecd4d2-16da-4475-a006-a1f04c0635c4", "sighting--75f9bbd0-93aa-4020-a6cc-d0d9c0438d8b", "sighting--923fcebd-2939-4997-b6fa-300127e512c0", "sighting--4239651f-13b6-4e4e-b933-37de1d3389d5", "sighting--73a3e9cc-774c-4727-aa33-bf6e302a4d17", "sighting--cd45c6ef-185a-4bef-a83c-e3274041b74e", "sighting--71b603ff-aa8a-475f-8d54-e9eadfb055be", "sighting--7e9b7e1a-2f55-4574-837c-8c592cfc2633", "sighting--1359ffd5-cbf0-4ed8-9ef2-ca73e86a6adb", "sighting--eb945e9f-aafc-41bf-8549-91fcb5063db9", "sighting--00f97b31-150d-4e2e-a235-bdcc331924b2", "sighting--896ceb12-0266-4775-857c-8021a951beb9", "sighting--f1934d45-d14d-481a-8df0-2fbdb7fcaf17", "sighting--daf7bc74-529e-4007-8ede-5a9b5e22d0cb", "sighting--a9b481cc-1564-45ee-9ba8-6a84f149672f", "sighting--3acb2ffd-e12a-4d6f-b893-97cf21dec2b7", "sighting--a739b864-e210-413e-9cfe-58154f6a9751", "sighting--f622ce57-b4f1-46f2-804d-1244c596bdcf", "sighting--fb639432-e283-4d38-a441-8e4909a4574f", "sighting--0f319dc0-437a-4cb5-9cb5-9fc1cb812f44", "sighting--8efbd21f-9cc1-4a2e-a0da-4d9bc09b0cc8", "sighting--e6a69d18-8209-471d-9f45-50bad99ff243", "sighting--f08b31a6-7fe6-443a-9502-c6dc5ddaabe2", "sighting--3023d262-d4f2-4edf-86d1-9fe6bc876ce9", "sighting--75fff504-9565-4aa4-9ade-5fa36bccd71d", "sighting--6baa3838-85a4-4000-a7d4-6eaec7ee17be", "sighting--6dbf7aa0-9f0f-4d82-90b9-704f6a6771f0", "sighting--64936550-b42f-4b56-b8e0-8935b8148ac4", "sighting--ce4547da-f91e-4ec6-9acd-97ebd7b0fe20", "sighting--76276db8-2a21-4e57-a373-d9056bcbfc6a", "sighting--d0ea9d8c-9aa5-482d-a596-1d1b9d4bc452", "sighting--780ac6be-8b5e-4e81-a422-c81df2fdd395", "sighting--35d0e0d8-5d14-43e1-9b8a-ee2df969e818", "sighting--0c7125ce-7fc2-4fc8-ab30-02c8b1f5131e", "sighting--52f288ab-85a8-4bf9-92bf-ec181d28ee7f", "sighting--d5ab0e8b-d38c-43b0-bdef-fc81c673ee8d", "sighting--160b7c53-ca52-4812-ab57-2f87c515e977", "sighting--7cfd52d1-66aa-4a27-af8f-176a3c1c1154", "sighting--59bd9650-25ee-4a98-bc8c-1f83a0efadad", "sighting--b418b5c2-a0cb-4ea5-a163-b53c508f8564", "sighting--51d35d41-7e4a-4ba1-907b-bbfa879f48bd", "sighting--d206372b-1c62-4231-8a91-a3c845cef4b8", "sighting--88d89cae-1f99-4c6c-a4b5-bb373747209d", "sighting--8198b194-d2b8-4b6c-8684-35a93d9780cd", "sighting--c4d90dc2-b7b4-4934-991f-b3ba1e658e09", "sighting--1c64e6e4-b951-4dd0-9034-3725f0fca6ba", "sighting--706820ab-a486-461f-a9df-09cbb572d61a", "sighting--0893924f-71c1-44be-9b80-3b70805e2456", "sighting--9b82f921-1285-403e-96c6-ad56d4be11b2", "sighting--78600d64-fcff-49cf-a1f9-487b4966796d", "sighting--4243b7f7-0cff-499c-b246-98178107f620", "sighting--3ebe9406-b2ee-4981-b088-c8a73da25027", "sighting--0ca646b6-4dfa-4039-afe2-f118e82ba69d", "sighting--2dc6bd64-1c2a-4346-8378-226aad81fd26", "sighting--27487f86-7b36-42a4-bcb8-63a47d909102", "sighting--cb2605b7-cdc8-49a3-87a6-6395e96db2e2", "sighting--025635ef-afe3-4a47-ab79-1cdf598a94c0", "sighting--a53e670b-1a29-4d43-971f-f178dd139752", "sighting--542e7791-4560-4f82-b7c7-ceed522a0522", "sighting--42cf9c92-1cb9-436d-91c3-c13deba7c0cb", "sighting--fe289e09-5814-4127-9e9c-195536fabc28", "sighting--6c32bbb9-5f14-41e2-a019-116a1862d60c", "sighting--eadef1b8-6d68-4fbf-9203-a1a5d04742cd", "sighting--a2c03fe4-884f-41bf-80cb-396d3297021c", "sighting--2be74e88-35b4-4f17-ab8d-0d80a4c507b5", "sighting--1606b355-ea8b-48f3-b53f-6c89612ebab2", "sighting--28a4634d-4d32-45f5-bd5c-365b56533f5c", "sighting--1112fd24-ef90-4a37-ba1c-85d972ce0d20", "sighting--e788364e-749c-4a4a-b98d-dc87c684dc4c", "sighting--a4a5028b-d0a4-403c-859d-34a8bb2324eb", "sighting--f495adaf-aa42-4525-910b-a23a7aa2b003", "sighting--bb497274-22a3-44ae-a2e3-612d55c792cd", "sighting--3ba1eeea-79cc-4b68-8613-5cf3af539fe3", "sighting--1398b89b-4f03-4f9e-b672-a51092327afc", "sighting--419c6040-37a7-4b3f-8c6d-50cb6c14deab", "sighting--535c6f19-a875-49e2-817d-4a52f2c6d67d", "sighting--e8ba7098-7f5e-4e3d-8dc6-eb4f05aef06c", "sighting--7a50f538-32b9-4ddb-b358-62deaa0a4a0d", "sighting--a8299186-67ab-40b4-9548-57dfb1db87bb", "sighting--f94d4cf1-344c-4cca-9772-535ec518f2d2", "sighting--f1047fb9-1984-4309-81f1-5af211b57aa7", "sighting--f093fe4e-d707-48a3-8f13-7f95c707b12e", "sighting--fa32a5ee-12e7-4933-a2b7-935447de6376", "sighting--8dcd604e-4d09-4824-a428-3552b409cd20", "sighting--7dd90fae-949d-44cf-ac57-bb1235efb975", "sighting--2f9675a2-fe89-403c-a987-b2201531cc84", "sighting--2b5691a0-9cac-48c5-8e3b-8a423c644541", "sighting--10192ff0-9cce-4a51-9236-97d22fda8a63", "sighting--b6ca0695-5de1-4fa5-abea-c167ca339642", "sighting--84c36010-9482-4234-ace8-4511cb721ba2", "sighting--0fbc55c1-5ab0-4c7f-a5d3-05b52ad25152", "sighting--cbbbc285-4bc6-4b0c-b585-ad47927641b9", "sighting--12307dbf-9e11-43e2-882c-3feb55f37284", "sighting--0b5f10b8-c27b-4dd8-a8c5-748d7cd35b19", "sighting--7965e6e5-71f5-49a2-b421-689e0e555d67", "sighting--aa33ebaf-a786-401b-ab88-2375b7d58276", "sighting--8114e5ef-5f6a-401b-9f25-c280dbc6ee6a", "sighting--76fa1390-0fdc-45ee-9471-22a10ff042c0", "sighting--b57de4b1-f68f-463e-9d38-94ad769f518c", "sighting--32e25d24-b20a-459f-9070-b2ed21c246d8", "sighting--4dc60bd5-a98f-46ab-8fdd-ba3e74c4ad00", "sighting--0595b07f-a1e2-442c-b676-656840e96840", "sighting--bb16db9e-23ab-4e03-b7ed-3f608e63e126", "sighting--66638a63-695e-42d8-985a-99543de2c1b8", "sighting--7610346e-6da7-46e1-9ae8-3f5dd8d93fb7", "sighting--09f171ff-42b7-4eae-a4c8-575c0a6f01dd", "sighting--cf409f21-da11-4e00-8fda-ed5674cf5afd", "sighting--7259aace-d7ac-45e8-a9cd-56b15a9b1464", "sighting--4f0f2c9f-d9de-4d4e-be06-ef01a95bdd8b", "sighting--968ee4ea-e5ff-44c0-9ee3-ae62a1ab3a3d", "sighting--7cea97ea-7e45-4b13-a56e-1a10e7218037", "sighting--0088b1b0-db18-4b35-a3c6-9e8981a78e1f", "sighting--599a71d3-9807-464f-bb7c-f5df9d0cd6b5", "sighting--128223aa-a2d0-4ccb-877a-a81e59526830", "sighting--6eb93e8e-4c20-45af-b96b-175a4de65b72", "sighting--de8ca25f-ff55-4033-bb4c-fecaad9f77d8", "sighting--4b1c5a25-5255-4b6e-a957-7d6b1176fdee", "sighting--7cd447f9-6777-44b1-97e4-e7a1d783a198", "sighting--6db599b9-1925-41bf-a82f-db73758c56f9", "sighting--758f325b-a490-43b9-8535-3bad1b823692", "sighting--6ecaed44-8ec4-402c-b384-c05c9744dfe9", "sighting--89bd23ef-4171-447d-84fb-1cfdf389dc56", "sighting--e2111c0a-87a8-410f-89bb-fa2254e3ca3b", "sighting--b0d33342-e9e6-49e5-9a68-05a77a87c633", "sighting--ea1445a6-2e54-4bb6-a2fd-0e2b5ec3bf19", "sighting--8a58e246-8cec-4216-8b51-d88a6dde572d", "sighting--ea15dd15-35e8-4442-8a53-df3a805e6f38", "sighting--21537573-9663-4907-bb92-a0bbbda4aac0", "sighting--a4590891-bce3-45ee-b376-f2652637d605", "sighting--10bb80f8-0af3-4d9a-8bd9-1d5a8ef9635d", "sighting--5a861afc-92b2-4c24-89be-5fc42825e96e", "sighting--ed1be09f-97a6-429e-8487-d18fa893fec8", "sighting--008ec57c-0a6d-4242-bb19-d7e345638e4c", "sighting--406e9f10-a261-4b7d-a2b1-5a45a65cead1", "sighting--62ef8fd2-4206-42e7-8cc3-307f0dd3413d", "sighting--d149f3ef-d430-45a3-b0eb-8f964a6d727c", "sighting--0c5200b1-47cb-4a55-bb60-b749e34376ee", "sighting--b6eaa863-66fa-4f9c-81a2-4d3fcd45bcdd", "sighting--137089c5-967b-41f0-84e0-ff8583f63da4", "sighting--43fcfb02-f3cf-48bb-a875-a258b21e33da", "sighting--17dcfb38-4adc-4bad-8dee-ee7347b68ea0", "sighting--6d711eee-a8ca-47af-8046-0e38ca1dab23", "sighting--8dc4ca55-7a41-405f-ad6a-aa076a035eff", "sighting--02587f03-98fa-4f10-82a8-76b86f2555d8", "sighting--6afcb034-bb0d-4c0c-94c1-e056698f9614", "sighting--aea258d0-307b-45bf-9f52-aeac9c6e802a", "sighting--72245382-a2d9-407d-a356-739979b3af13", "sighting--aa7e2b5a-836f-44f5-8559-792fdc25d040", "sighting--f9f6977d-3ce7-40aa-8231-9114f7f0c1ac", "sighting--94626f99-4740-4627-b31a-26e8ee068aa3", "sighting--05fa8a04-27b7-4cdb-b828-5d8d853d0822", "sighting--8347ebad-2dd5-4add-b2a8-c709bd352b2c", "sighting--62d032da-e5b8-4e40-9a62-e0ec3c4dc883", "sighting--7fa670cb-06d7-4ab6-b5b1-491c3b724d17", "sighting--8247eb7a-b78a-4014-9bae-afea55ec93d0", "sighting--de00f536-3d46-4174-ba00-ece67ee9d689", "sighting--4d9f2a58-3191-4766-b6d5-7773ec65f059", "sighting--62a18b28-a2b1-4b56-92f0-ed09e7f317f5", "sighting--fb4d4a13-2f5d-4f36-8ac5-88183c22e176", "sighting--0ce54fdf-ebfc-4a15-b8a7-030ef021e611", "sighting--4fedbb3c-3571-4faa-9434-ba30b4732b52", "sighting--4f607575-1f80-4899-b645-03016526e5c3", "sighting--2383f46d-7710-4b63-801f-9e93f8c746c7", "sighting--04539c26-f006-4bc7-adad-5e3f6a37dfde", "sighting--2a133085-936d-4bd3-ba05-71c86a93d409", "sighting--3296dea7-6231-4f68-bb4b-7debda7052ef", "sighting--86ec16cf-7e80-48c9-9e4d-3fa40be8c58d", "sighting--f57117f3-d925-4eae-b7a4-34df9147cdfb", "sighting--471eee29-fb37-462b-9c19-03e364851b6f", "sighting--5e1343d4-0ed3-4ae5-b1b2-c551b381f0c8", "sighting--a4cbb9f3-71d5-42d4-8267-437b408bbf9c", "sighting--38f444ac-d650-42df-9aed-43e160ff21e5", "sighting--22a8b064-1096-4e9b-a0d4-64b3353228ae", "sighting--c0ef552d-2cbd-4bb2-80e6-12d188522f58", "sighting--07007250-16b3-4c86-9165-343287cb1529", "sighting--597e29a8-0b54-4125-98cd-2eb5504c218d", "sighting--79b205fd-a76a-4e87-a6d3-fe5575bc12a2", "sighting--19c9a160-d490-4932-a10f-fdeaebe7ec54", "sighting--2864c2ee-df3a-4fb2-a8ad-f64b7a3905cb", "sighting--f9f548db-2e47-46fd-9068-37ccd7be96c5", "sighting--cb9c3052-8623-4872-bf87-e720d20f9ae3", "sighting--8f1685d8-8837-4e90-9df2-90d50e6a568d", "sighting--21947db2-806e-4a97-bd6d-2b61716d94fa", "sighting--18b86904-6cdd-4081-a16a-4628c63c266b", "sighting--2b7bc12b-4b2d-48f7-8f7c-f3938122dfb9", "sighting--0063be8f-c53a-4dd9-bb84-ebf4a7db6469", "sighting--52bfe92c-d553-4b35-889f-213767519b91", "sighting--506b5636-6b96-43a2-b033-a29e937b395e", "sighting--7788041d-518c-48a5-9012-905b954ff08d", "sighting--b080a21a-5f3a-4fa9-829b-48c282912237", "sighting--1ba5a340-94a6-4b29-bcd8-7debedf8279d", "sighting--4cba0871-97f1-4493-ad01-a3cf16f9a1fb", "sighting--fe957eb2-ae13-42ce-a2b5-d5a98c82c780", "sighting--46fd038b-5ec1-4c35-a8ed-c7c680be6888", "sighting--372d23d5-39ad-4bc6-a39d-d8aca4322b4d", "sighting--ce6ba1a8-4e86-4ac3-84c0-7549e2161b75", "sighting--4bbee77d-c3a3-4e30-9285-d9fc0cfbbbbc", "sighting--4ae2f255-4179-4da3-8b65-c0d00f4b25c5", "sighting--795b68d4-f20a-4b83-b3ad-65148a4e35d5", "sighting--c05ef2be-ecd8-4b24-b2de-c389a8eacc33", "sighting--dba1e01a-cd21-414a-9b48-2288a2ade601", "sighting--40e9748a-4774-4f77-9b18-2b6043cc6b41", "sighting--8f2b3bad-1506-42be-ad6d-42722148db25", "sighting--93e1fbc3-9e98-47aa-858e-e174d964fd30", "sighting--4cc50cf8-1f93-4c33-9baa-641b93915cb3", "sighting--63a810f7-f264-47de-872d-f146e1ece463", "sighting--1d506510-177e-477c-8e91-d0c4e9df7249", "sighting--073bad04-fa63-4b7a-b565-81d447015b04", "sighting--bc412ffe-8f3c-4ee3-bc60-9a290a61c2ec", "sighting--55e1b480-efd6-4042-ae78-9c2b358fd31a", "sighting--2f548bdf-4109-4808-b6c7-72d9bcdc84d2", "sighting--0adcd1b8-cd7d-4276-a299-ba86dbae1e69", "sighting--8c0cb03e-1d51-488b-85b4-30c025c73a7f", "sighting--438d871c-f158-4086-94cb-a6b122e63121", "sighting--ac9497d7-a8ee-40cb-ba8d-f16579753d74", "sighting--150e0fd5-73e0-4127-83f7-a95dc461f350", "sighting--12fcfd9e-c8d6-4e75-b79c-4cccb81bb8a6", "sighting--6c3a3dc0-8d26-416f-90c7-8506baa0f870", "sighting--e11a8d5f-71f6-43e3-b5bf-3cbb5ee711a3", "sighting--dda95990-c3a3-4e50-8ffd-548280002a95", "sighting--506b523d-f3cf-4caf-9a53-990052485eba", "sighting--36ea69d6-7d63-4213-ad0e-53180024e1ce", "sighting--8fc05948-19b1-47df-8b76-572f64cfd9cb", "sighting--0037c057-09f6-4836-ba2d-9db63501b6b6", "sighting--b208c672-252a-43ce-b03f-1459d54a5bf7", "sighting--b29815cd-7bdf-4d06-84e8-968d8bf1adb9", "sighting--9ab9c468-7c89-43fe-97ee-8dee109b9828", "sighting--1a0821aa-d809-4ac1-a5bb-5aca8d5f24c9", "sighting--50d25fde-adb3-4ae2-b250-a7ea941d4f7d", "sighting--9c23254a-eb50-4396-bb52-7bc8047a5766", "sighting--951119c5-f0b6-4c45-91ad-82ab57d4f595", "sighting--654802c1-ea4b-4018-87bb-a6e479ef029a", "sighting--78fe7960-3040-4b3d-870b-7cfc831ed49f", "sighting--0cedcb95-a175-4d09-9649-09a245870b58", "sighting--f9c05808-c5fc-4803-a42d-fdf13d6dfee1", "sighting--c27def9b-3613-445e-9964-04eeffa4b766", "sighting--12210608-3f52-4cdf-a596-ecaed90b6440", "sighting--995664fe-da99-4235-a1db-e7778d2c6a71", "sighting--b93063e2-5e2e-4071-a6b1-4a0a85bff89a", "sighting--ed382f28-3b73-4cd0-924b-c98e2e53a631", "sighting--c79d5dc0-5f04-4eb6-a172-fbb239fd4a2a", "sighting--ce763003-0aca-4654-a8e1-b7a93021b4f4", "sighting--f64bdb0d-2655-4261-a73b-4a7c57204d35", "sighting--ed8d286b-cd1a-4e0a-b661-692be4693627", "sighting--af275ffe-202d-4d99-9513-804f6769b5d2", "sighting--5ea59aef-6f40-455e-b701-7c0d87627a5d", "sighting--bd917965-dd35-4dcb-95e1-9f3e61289cc1", "sighting--652c5a4e-792c-43c3-8f78-daa39905f8c2", "sighting--48d7969a-e2fd-4739-a25d-da7cc85eae39", "sighting--565958e5-0bf9-48a3-8e04-c076ff9d15fd", "sighting--93dc830e-bc4d-4a8c-ab4a-9a830145e794", "sighting--0a379911-9499-4461-9b98-3262aa3a5f94", "sighting--3dc5b68d-608e-42e1-9bdc-a4399d066b63", "sighting--dc6152f8-ba2e-4feb-a55b-62dc5b49cd80", "sighting--e9351cf7-e803-4503-97c4-9c9e3cd6bb1a", "sighting--22f92771-a652-4d81-bb79-007910027b0d", "sighting--c9d198e4-8e60-4160-8709-bf859a857849", "sighting--589be360-896d-4c3f-b707-ada40b04f560", "sighting--cd613bdc-a113-4558-b349-1e5e67d000ff", "sighting--f1e0dfec-197b-4a0e-b336-bc33596152dd", "sighting--8d428883-a796-4021-a75c-c57e7863b73f", "sighting--b0ab5080-2b76-4a38-84ff-09036d014c96", "sighting--ba87a99e-fbaf-457a-89c1-14cb5b228c47", "sighting--34ab5b22-bb23-41d9-9d2d-146d91a991eb", "sighting--7bc4119e-0e03-4b98-b47f-082709677de6", "sighting--4dbd05a4-21fd-41e1-81e1-d7b27fb972a2", "sighting--9b4b44f5-8846-4150-b865-533661357152", "sighting--191b91ef-47d9-460d-8134-29a978970b66", "sighting--bc98696e-5ddc-4f72-b1b8-3d8590699883", "sighting--34876cec-9856-4267-b195-40dc08302cb1", "sighting--85cceb9b-73ba-4246-9d46-6b82fb252b66", "sighting--24463fb0-e238-4874-8af3-f1f3901350e6", "sighting--e578467f-8857-4535-aae6-8b15ae18e0ce", "sighting--2b14a2fa-6fb5-44ba-be41-43b18ab6d700", "sighting--bfeeeebe-7d84-4820-84aa-24b359207264", "sighting--999feffe-fba4-41cb-a442-3b1744e6685d", "sighting--62ad70dd-c7cf-41d2-83f8-0cdeee3998c6", "sighting--a91213a0-63e0-402e-9c2d-b3631810674d", "sighting--4f76a113-0efe-4fbc-b200-382416d6e7ab", "sighting--cab8b8d2-dcab-442c-b0a4-61f4cc9c8051", "sighting--67aef6c5-3c15-4fea-a2b7-e4aef7c04a3a", "sighting--921fffac-70a8-4708-9df8-7e750d966442", "sighting--bf665f70-7216-4c35-b6ac-f99ad69b6263", "sighting--2548c990-680c-441d-8f46-4d17e1430e50", "sighting--efb09356-c63f-4e4c-84d2-5dd4f3236e50", "sighting--8731ef8c-07e4-4408-a29f-2bc1257e70f0", "sighting--d3d8a1dd-a8fe-4563-84eb-be00593d6353", "sighting--d4fa44dc-a7f5-4091-ae3c-1ff070d03d56", "sighting--0a86d1f7-4623-43eb-8c9d-7edc0f97175a", "sighting--ebd5357d-e8ad-42f2-b3cb-899936dcbeae", "sighting--3fafd29a-a4d1-4453-a0de-729ecf30ddda", "sighting--46b803ef-163b-418b-af03-89115eaacc85", "sighting--4c741544-700a-4e88-919a-1536994fc2d9", "sighting--d2ca3f4e-841d-4557-8dca-0d9bc13debee", "sighting--ab2ce477-719f-4cdd-9594-4e6c6de2cdea", "sighting--12dd5723-6742-4686-84b4-a75b39fd8b9c", "sighting--afc3dd5d-56c0-403b-a7c1-a9fd810b9733", "sighting--441859cc-0e78-4459-8c2c-ff4d28e57638", "sighting--de30fd67-f5aa-4dc1-96c6-4b849cc27351", "sighting--8c213618-422d-4314-9310-50efeedef1ee", "sighting--56de4e99-bce9-45b9-92d2-1315877a8dff", "sighting--104a62d3-c5cd-4ce0-8f21-1583e14cfd72", "sighting--00a9be2d-a382-41ba-ab9c-c76bd297130f", "sighting--1ca34634-41a6-4eb9-9f13-c69fbbbfcd8c", "sighting--6fbf36f7-f80b-420f-8ee3-5c963f1132d1", "sighting--18ca7cd0-894b-46ed-b422-a7f32f0f3e68", "sighting--048533cc-c5e7-433e-a02c-b0176b77f409", "sighting--f666220f-8bc5-40a5-a7d0-befbe263b9b4", "sighting--a5e029a6-5f91-4120-a606-53da31edf76f", "sighting--8ef45413-bf48-4385-a4e3-45de66ee9a3e", "sighting--aad6ee3b-730f-404f-b29d-f4eaefd66a77", "sighting--19a50bf8-500c-436f-b7d3-9a860bb3c4c2", "sighting--ffe0e83b-27c2-4aaf-833f-f21757ecfc76", "sighting--7c549cda-3ffc-4992-901a-237f2be5872c", "sighting--93cc0bd6-4857-44a7-802c-e32af16f24e7", "sighting--ccb8c1e9-75f1-4e7a-a4a0-57a9989e6655", "sighting--484d1faf-cc66-4bf1-83c8-5faf590f4c8d", "sighting--3046aa82-8e33-4776-ab61-544780677750", "sighting--2114e872-ef66-47b3-8003-98031641fe8b", "sighting--becb0b00-d5b2-4bcf-bf19-7ea17c72c7ed", "sighting--8fa94885-857b-47ea-b852-f9386caaf045", "sighting--e407f160-69b3-4233-85a8-352c8760ec7d", "sighting--1b2ed5f9-a6ed-48f0-b9ac-c08d3e330e51", "sighting--10885836-9c37-4278-bd87-6e9bf6b0d97f", "sighting--a6a3d60f-e3cb-4586-aaf5-2fa39d73950b", "sighting--60b82e7b-54a8-4abc-bccc-73e4d5c45a87", "sighting--f4b003bd-75b4-42c6-beaa-39334365673b", "sighting--a20db054-247c-49ef-81b5-97b929eeba12", "sighting--14d36f0a-f536-4836-897c-4f0dd4a05432", "sighting--fdf982f5-f584-459d-a5b4-be0f075b82a5", "sighting--abffa1f2-56d8-47c1-8f9b-f1ac2d5dd6e1", "sighting--dcc895ae-8f60-46f3-88a2-75e9f358eb04", "sighting--2a26d0a6-f24c-4e96-aaa8-2323694a4ed5", "sighting--71b4035c-8df2-4924-92f4-a0d9fd2d5158", "sighting--1fbb1442-2a2b-411d-9135-b07605017c6a", "sighting--72e1059a-1059-4c40-846a-acb76da2a196", "sighting--41836e74-f99b-4f01-a4b0-05ff5ae12e33", "sighting--98bdf50d-5725-412b-b065-a70dc52d8f53", "sighting--6cccc61b-5d42-4a0d-863e-141969f3faf5", "sighting--35160739-7467-4e2a-9528-c1b022da5f29", "sighting--7f7a3582-1057-4d56-93e1-9a310ca37a53", "sighting--b9ab6736-86c0-431f-b5ef-5994fa5a30e6", "sighting--73f3f855-542c-47b8-83b2-76f64e815af4", "sighting--c8bfd3da-50e8-4473-ac42-a1f20cacb551", "sighting--ade11f8b-abb8-4c50-84de-e0089e7aee1c", "sighting--ec415f41-9807-4c06-813f-491bde505845", "sighting--9962d54f-0809-41fe-83ae-e26a8628b7d1", "sighting--8fcbcbf3-c58c-4f7c-853e-3f6ae7fbc920", "sighting--876785c2-24e5-4c5f-9eff-f25f423d699d", "sighting--9e5138d3-445e-44f0-a405-2e17ef79c9dd", "sighting--ae6d0a3f-762d-4311-8888-0e0975489867", "sighting--9a63fbcb-a16e-4a52-b739-c7ac68d53d87", "sighting--7a26635a-a56c-4576-87d0-700efff3572d", "sighting--548cd530-76ff-45b3-bd8b-501795edf54b", "sighting--555ae232-5504-4577-826e-97f833eae34b", "sighting--8508c33e-3396-44d9-8718-d543b651264c", "sighting--93b6137e-5ec6-475b-8d51-2552d9f5c4b4", "sighting--14440759-ad2f-440e-8ebf-1c1d47469e4a", "sighting--bbcc0b11-8b4a-45be-b2da-b65034ac1086", "sighting--566bc5b4-1112-4fad-a833-eaae83293625", "sighting--45652263-80c3-44ac-8513-91d68f570914", "sighting--e39ed7cd-1030-4265-a82e-ffb0b5ca3d00", "sighting--ba2ead61-fc6d-40cd-8ced-93f3c50c97ed", "sighting--b797118a-9e15-4a09-9414-9572f67171ad", "sighting--ce9c015e-0fd3-421b-96f6-54721bd1a04d", "sighting--3a083c28-9ef4-4521-b1fd-a3088749c2ac", "sighting--beed3663-af5c-448b-8719-34f7dbb39d7a", "sighting--14d1415b-539d-4f85-9f46-c05f171fa168", "sighting--bc89ba2c-6ad3-4847-a258-cdb94d999a2b", "sighting--516f8b4f-a87d-47ef-abb3-0f5d817164c2", "sighting--5861a34a-c3f9-4fe7-88db-babf2c1ea58c", "sighting--0d639287-6d95-4adf-9dfc-3e447867d884", "sighting--48547361-da7f-4f91-b61c-7457d004eb7b", "sighting--a508d53a-e890-4305-81e9-e5832b84f213", "sighting--5777282a-3fbe-42bf-8b2a-a2d88de71488", "sighting--6113372e-315b-4dee-aafe-860dfd91a0f4", "sighting--873acf63-7c5b-4054-82d6-22f58baca6db", "sighting--d91d8118-b741-478d-a42f-b0e21606eed2", "sighting--e82b6e92-1eab-4d15-86e1-0e12ec8bb970", "sighting--f9d0e5a7-8954-40e8-bcf8-2d291f53cb9b", "sighting--5a913880-4f4e-40eb-a017-97dda53a9a1b", "sighting--ed28b85e-d7ac-4aa2-b9c2-407e550c4c69", "sighting--79124c35-6666-4320-8e8b-8b22e4edc61d", "sighting--d9032db7-8dc3-4484-bb37-76ee02f041f8", "sighting--d3bdcdab-c790-4607-917e-f30025fda287", "sighting--8ebd6ec3-6145-4da9-82c9-277c1e44bbbe", "sighting--20d45315-b61a-4810-b770-0c2730994df6", "sighting--ce54c168-733b-439f-a0dd-c6e773198a90", "sighting--e085628f-57c9-4508-a92f-b9a60a94e017", "sighting--0d4e4936-1cc2-4271-9029-168b5e054be6", "sighting--18d098d9-86de-48af-bb40-7a1c6310132a", "sighting--3ef1e61c-bddc-40d7-aa10-20043f69ef14", "sighting--194c87e0-1c22-49e7-bd86-09e35e497a0b", "sighting--5dc914d5-015e-4184-b252-34760e71d5e6", "sighting--dca28282-64b4-4a24-8df0-80f7fdc33b14", "sighting--172ccf73-0709-48a5-b9bb-b62b881a914f", "sighting--844253f8-cc44-4807-ba64-c57dde18ff2a", "sighting--ec90ad34-d517-4394-b2f8-5652fc4cb2a9", "sighting--061db8a4-ddb2-470b-9104-a2b5e9f15c9f", "sighting--1c6a27ab-7ec2-4518-b363-8fb8f9ec1fe7", "sighting--aaf62ddf-68d9-48b3-b3c4-c7c640862646", "sighting--a07e90d3-4cb2-48ba-9e80-ed604a6d3491", "sighting--dc627285-1d88-49d9-9693-731c7b4632f4", "sighting--ca36e171-a2c7-4b4d-a462-0d75065906b8", "sighting--e2225537-5105-4c84-be68-f6094108ae79", "sighting--a0917d23-81c1-416e-8e0b-8981305cc4d8", "sighting--4b859fd2-e099-471a-8750-2c0dfd65354e", "sighting--5761bda6-df47-4a27-b639-9ecbfc6d9d46", "sighting--61d6dc90-773b-487f-bcbe-c8303b01f1ea", "sighting--f3d20938-019e-44d9-aa8f-1330896cdc1d", "sighting--41567eb4-77f7-4e49-aeea-cc372504b2e4", "sighting--71fd28fb-88ba-4abb-9b38-a31747ed9a59", "sighting--094b4a18-66cc-4a42-a0e9-195696c76dd0", "sighting--6fcb7d02-cd0b-4375-8046-cecd1b816bf4", "sighting--dc991323-c0f0-499d-804c-101dbb06ae5b", "sighting--2e7da07e-c76a-4d25-a48f-65ef668a39e5", "sighting--e705fc5c-f7a5-4ef7-9c3f-63756ba4f2bd", "sighting--78cab62f-6bea-40b2-935d-1f7b62a23fc9", "sighting--0aeb63a2-3e4e-4471-b053-1a06bb760e2d", "sighting--200ef342-6dec-483e-a3fe-414411636a96", "sighting--7c8c5a7f-ba2f-496d-b2f8-60b99ceb9edd", "sighting--db9e8931-c5df-4cd3-8e6d-9f61902f8b95", "sighting--313cc125-ea89-4e5c-a29d-e613a26a2bd7", "sighting--aada9201-2274-47f3-a4d3-def73dd87762", "sighting--ac5136fb-23d4-4a2c-8b32-dc47f6eb1409", "sighting--c6aa5aa6-c199-472f-85d4-8dc2517642bd", "sighting--18658757-e08a-4444-927a-4f7029ff4d41", "sighting--916528c9-f3bb-49f5-b9f8-cd20edc90e9d", "sighting--43ead598-e737-4ce8-b120-ad94dad37a18", "sighting--8e313a7d-c04a-4a6d-bcbc-01a9e6d471a4", "sighting--bebb6a39-dcb7-4c6c-8824-b20614d9165d", "sighting--2ff6891c-0868-4631-b5ae-84fa0150c622", "sighting--5030b1b7-ab79-45c9-9102-a4f5daedea22", "sighting--c83946fd-4a58-4f62-9cb2-2f4e31d878ea", "sighting--5c0f3311-ed53-4f26-837b-57861c71d858", "sighting--3e0a7742-1d6d-4b6d-bb00-fe4608c70225", "sighting--0ea68f8d-b5ed-4fc7-bfce-cea4ce60c75f", "sighting--7818f386-517e-4664-9584-ce5737176cad", "sighting--a9b9bcce-758b-458d-893d-148cb8fe91ef", "sighting--0d34c659-1468-4742-9809-2dbe4a0208eb", "sighting--6b7993f7-1c0c-4b05-88fd-21088f380b84", "sighting--ad0d19ea-9d42-4b9c-aea3-78efee17566c", "sighting--b4ea695b-d36b-41b0-a2d2-cc1492c2861b", "sighting--55f69150-7497-4a2c-a96c-159ae41c8cd1", "sighting--f93a5dfc-cf1e-43b5-913d-492ed39716f6", "sighting--580e4ecd-5d88-4832-adaa-9aeacedab758", "sighting--dedf87a6-5719-45f1-9158-de9f4138962f", "sighting--e6bee99b-1020-4323-8fb0-1e0310b6e4d6", "sighting--27877b84-2822-41f5-a47f-e9763a2c24dc", "sighting--377c9f7e-2328-4389-83c6-41d86045d721", "sighting--5e611b71-6537-4eb0-ba09-617c17b94dc5", "sighting--3057b318-a10c-4669-b421-96757cdd5374", "sighting--00f4cb98-2bff-46b6-9b91-d35abfeac3c8", "sighting--a7a6dd01-346f-4c20-91f0-b27f926aedbc", "sighting--fcd0f5a8-eb27-4d2f-938f-069d798c2b62", "sighting--2b35a49d-64a8-4999-a699-bec784d6c52f", "sighting--be58dc61-881c-42ac-b7fc-8b6ac5de2bfa", "sighting--95f76110-7015-4bb7-85b8-fbf7ce73131f", "sighting--5fd2d5fa-1ece-42e4-90b0-4091d5fc586b", "sighting--c1843b5c-b407-4be0-9ad2-7c1bea6746f4", "sighting--05b56c8d-fbbf-4ea8-a456-8ce0fb69cbac", "sighting--b3f0f3d9-c036-4974-97c2-55a66bad6b79", "sighting--728b69f2-25c3-4b0f-a775-15177c5a7cfe", "sighting--df14f699-059c-4c13-9892-594a9b9d29ac", "sighting--76f12491-c146-494e-94f4-e8a1b7bc7f27", "sighting--ddc4ceff-9c35-44ef-9dc4-82516fd418b0", "sighting--323249a9-31e7-42f5-b29c-afd8b67d5176", "sighting--a42a6a48-235e-4345-b08c-ba9c84693547", "sighting--17735778-6ce4-404f-953b-271190b28327", "sighting--35229285-2b27-4207-8cab-b7b1f68b0ba1", "sighting--c3eae76d-c259-4329-bb33-e261554a967d", "sighting--79274281-8d51-4311-a9e9-c45a0605fb97", "sighting--d28cd2c1-4b82-4cb9-96ac-3e7968dfbad6", "sighting--6b1f42b7-d670-45dc-9dcc-c454372d1650", "sighting--3113d573-a366-40d1-9f04-fbd55f5df620", "sighting--b7e069c9-be1f-4e2e-b2a0-dd38f5fbffda", "sighting--21aec145-4515-46f3-8b4b-f2eb930f61b5", "sighting--7323d027-ed71-4fb5-bcb5-27d92a127696", "sighting--af49c3c1-858d-4478-8fb5-edb06755c830", "sighting--3b61f735-4696-4c98-bb36-c5ef872fa312", "sighting--5ede55da-1c16-42ee-bc42-56b15e7eb7a5", "sighting--b3f0afdc-9076-48b7-aa45-3efe9919d1b3", "sighting--9c8e727d-822c-403b-ac9f-b291c8d88279", "sighting--e8c281bd-7486-442e-a4b9-5c231b4f4778", "sighting--8512cc86-5d0b-477f-9c80-4fa711a85ddf", "sighting--554b844e-90f7-4969-923e-3c32562ff841", "sighting--964a57b2-c93a-4a3f-a5ac-1a5e322c9e74", "sighting--3c3d0e88-0fb2-41e7-8e9d-6896edbd3f79", "sighting--91ea0aac-7f65-477a-b080-2e88868ad050", "sighting--e8a5bfa1-730e-4c96-945c-c9e4f1ba1ab0", "sighting--554ae14b-20f6-403f-a8a4-0d72c26d5602", "sighting--6ef74e6b-2b64-4fa8-9cc5-2e272cd6eed5", "sighting--962ec784-bbb2-4ba6-99b3-765ddd243a4c", "sighting--3b72fce5-6773-4daa-9a40-dede0471b3a3", "sighting--123cf47a-0d6c-45a6-9995-b6980cf9718d", "sighting--f0b757ed-e520-4220-bb6e-dbf0594cffad", "sighting--73634608-4c54-40ff-a76f-fb28b725077b", "sighting--5eff34a4-eb7e-40ba-8825-da01fcca04ce", "sighting--b82717b3-e617-4873-a6f7-8534cd4c6374", "sighting--6b0d367d-3d1f-4d36-a280-fd846f372f65", "sighting--0c3e43a8-f3b3-4534-ab97-1ba874e9c056", "sighting--f8729a17-4798-467a-80a8-398545a45991", "sighting--78ae0d21-943e-4e12-80bb-48b99573109a", "sighting--adc14acd-79bc-4757-af4b-ccb8d19adcb9", "sighting--e394abf1-5fb3-42f8-8072-8948520b29bd", "sighting--cbeb87d3-323a-4cb8-99ea-754509e81042", "sighting--ee8a2dd5-6f08-4e4b-8a8c-ddf22d708abe", "sighting--adbdb5f4-aa1f-494d-9a8d-e2ce69239b55", "sighting--55eb11d1-c539-4578-afd6-a5b91d69fbd8", "sighting--462a4189-ecdc-47e4-88d7-e92a4f89a068", "sighting--bbe39d3e-d884-469d-b1af-a82323afa663", "sighting--cd4218e0-d6ff-462a-ae42-50ea7b1cd07d", "sighting--d43a4255-1757-4dc5-a0dd-e6062784633a", "sighting--2e4a4480-b624-47a1-95e0-e4e6a3c06a6d", "sighting--48212d7a-fc80-4d15-bbfb-34247010c510", "sighting--c91b292d-3654-4936-bd95-0863ad16ee83", "sighting--d0a68351-468b-4a28-a85a-af18418e1370", "sighting--5a5229a8-a813-4422-8e5d-d3ee5c96ccc4", "sighting--efa6479b-374f-4767-a8c2-71d1051d93ea", "sighting--e4ea0d4a-fa6d-4e33-a24e-849b60716bbb", "sighting--9e4a7827-9509-47b2-a517-de308bd1594d", "sighting--2d3164f8-9dfa-476f-b626-1af560d4bd2a", "sighting--18676966-6240-48d0-a781-97131caba71d", "sighting--038454cb-0b1f-4818-9223-3de14bb0b855", "sighting--b6ab0a16-5a74-4ddd-bb1d-58a618601387", "sighting--4e3abe36-23a7-4f4e-9870-3504b0cfab5b", "sighting--73215b27-ab51-4f9b-8124-077e21330b6f", "sighting--1ba60c9f-466b-4aae-9f1c-fc0e3f302459", "sighting--5d8628ba-bb1c-41c2-b7fe-8c1842208d6c", "sighting--f824f01c-95e6-4b56-bec1-ddbedae58ba4", "sighting--2406cfa1-c839-43ef-9063-be8b400ee5c8", "sighting--e11d0b9f-7a7e-4751-810d-2dfe663643fa", "sighting--3e5c5b48-b509-4881-99e2-747208847849", "sighting--0aa7283d-28df-43d7-92a1-4e1ce7b41e64", "sighting--615c1ece-d00d-43e9-85a1-89b8bf681c99", "sighting--334f6b4d-8db1-4e1e-9057-fed72c57eb40", "sighting--6d021e29-46ba-4321-9cac-175cdd889cd4", "sighting--fd0bfadb-5000-4048-bf8d-0898746039a2", "sighting--59cbe22d-1a84-466a-bc03-6d84ae6b37ae", "sighting--28777d28-4a3c-4d60-b154-e0e097335be4", "sighting--a410c0d8-187e-461b-ac81-35b7f3e68b5e", "sighting--e6aca1b2-7ca7-443b-a4a8-42ebb47acd7f", "sighting--6c28c44f-9cc6-4225-8286-694749808a3c", "sighting--853c3ab5-96d0-48d6-a8b9-3c72c42f7474", "sighting--99672e63-a5c5-4af9-bb6f-f4bcb4bf13f9", "sighting--c2296c5f-f765-45d3-91a8-4c640d719309", "sighting--fb970b68-8c2d-4d3f-b85f-87ee9cb4d980", "sighting--4d35ce54-419e-4f7f-8d8c-b5dd87467a21", "sighting--c5864c70-3e80-4e33-9588-1568bb10d4c1", "sighting--e7a1d6c1-36e5-44f2-b595-f95071804e14", "sighting--26e9205e-db5b-41e4-be9b-f5d77b9ca67c", "sighting--2b653342-6b46-4f67-b556-ba3ca374f3a4", "sighting--74fed2e6-5cbe-4298-b59f-9260629be0b9", "sighting--ba00cc04-cb47-4aa5-bdeb-8f8369adbd7f", "sighting--6d4447b1-315a-4b4f-986f-b3cc789b7d09", "sighting--f3f1d365-392e-4e3c-a1ce-9188be0c6dee", "sighting--833ca2ee-d76e-47f0-bf8a-1e135b9abc14", "sighting--9697eb45-ae9b-407a-bd89-d9567bb312e6", "sighting--78f735a0-4fd0-442f-9aaa-2ec20f0b1722", "sighting--8a70f1f8-7419-4862-9672-42141c69e4ef", "sighting--823d54b1-a5c8-424a-9173-9cc985b13acb", "sighting--9ebb3de1-0c10-4bdf-89cb-090cae391330", "sighting--0092351d-b5f5-46be-992a-4ab4fda5413b", "sighting--d3bd4409-4041-4c2e-a0d4-32c2887dbd31", "sighting--cc568c7e-8031-490f-bbe1-eabf021f4c74", "sighting--ba9e9a7a-04f6-4d56-b25b-97d621d88f77", "sighting--585917a9-edc5-4daf-b026-b7d708bf4ecb", "sighting--66ebc2ff-c4ed-4de7-974d-07052952ba2c", "sighting--9b78469b-a95e-444c-b227-e1ced4dc0be9", "sighting--cbc9e86d-b502-4d97-be6a-367a54f6923a", "sighting--e414c937-f26d-4fdd-b4a7-e7be35bd3107", "sighting--b7460e9e-718b-4cd7-a223-bedd23e55d24", "sighting--3ef10859-3023-4538-a757-c6a6f551f2ac", "sighting--29e53433-21af-4522-9664-1d5bc365fcfd", "sighting--849da6c5-c9fe-401f-9223-b9a11274c311", "sighting--09f2fab7-753b-4284-a1c2-c0a48a8539db", "sighting--41b51ef8-4985-4553-9f0e-8aaf404e1a8b", "sighting--061a3520-b66b-44d7-a11d-6ec8ef2b38b2", "sighting--d5776403-e350-46e0-af7e-5befc8efa0ca", "sighting--14feb45a-d82a-436a-9af3-4623a7bf37b7", "sighting--a3deb6bb-6f8b-47ab-93b2-e3503f162ad3", "sighting--f75f6d3d-ef57-49ae-809e-2d35f271f006", "sighting--400f0075-aade-45a0-9398-7894dfa34942", "sighting--922a064f-473b-43a3-b1c7-bb918b802df6", "sighting--b91b679c-b090-4d7f-bd0f-b2f8c77ada1c", "sighting--2a6f11f5-8855-4234-8a75-6e7daf0af677", "sighting--eeec9e4a-5a44-4fe9-bee1-d27eaebf524d", "sighting--fd418489-8fa5-40c0-81da-3b876d2ad533", "sighting--6cf09ba1-b973-4714-9796-d90c2a691edc", "sighting--80e44bde-9d5c-436b-a322-df67b8ae7668", "sighting--3c0401b3-43bf-4ddc-8f38-0efd772cb5c5", "sighting--a130b1d0-d730-45a4-9140-24cf12d209cc", "sighting--22553929-751d-4fe3-b733-ab06aee73be5", "sighting--f733151d-4cf1-4337-a618-3bac66ff85d1", "sighting--3f743002-85fa-48db-aae6-35d897e10ddf", "sighting--8d44482a-9677-4ea0-8c00-c940648591fd", "sighting--483b27a0-951a-4381-bed0-c505627fac63", "sighting--ababb8a5-5f16-4def-951b-a6ed74e8812f", "sighting--d7348cce-5830-4685-bd33-88c65f954a37", "sighting--dd873155-7b81-4705-b905-ad0d0556a253", "sighting--8feacf88-a640-4722-a93d-de193c6d3ad7", "sighting--bd41db59-a7ad-4f93-84e5-58bff6452955", "sighting--053adddc-5ae3-4d21-88dd-86fd31048178", "sighting--e3470b7a-cf7d-43c9-b43c-ce180647fd3d", "sighting--467b5781-a5d6-42a8-8a3e-8368cd17ff0c", "sighting--eeef857f-7e05-4df2-801d-e8ad1446614b", "sighting--baadb01c-f3bd-494b-86a2-49b9c8ef3415", "sighting--bb388e79-8d5c-48ef-9ea0-70d59a46e130", "sighting--7bf46ade-757b-47ad-8b7e-836c006e02b4", "sighting--7bbaaa22-6c9d-4551-89b9-8bc2aa5de84e", "sighting--7789e6cd-db8c-4c23-af8a-445a674d6aa4", "sighting--5462c139-4b28-475b-a4f2-ec7aa344df39", "sighting--e1fd6ce2-2cb6-4eeb-9ea4-6019e53f1e7e", "sighting--ff525f80-f158-4d95-83f9-e7e852731a3d", "sighting--785cff07-e6d3-4498-a918-3236a89a1d91", "sighting--3689a1a9-a439-45fa-a085-8921000bce69", "sighting--fa7abe5d-cb2f-4769-9696-19982698ab21", "sighting--f2fb6fba-c406-40f2-8d4a-5de067d6e20b", "sighting--a9488322-9db3-41a0-85e5-ed01d2278581", "sighting--27eaf00a-fde5-4219-a7f2-4169a6d4f713", "sighting--99b771ce-dc1f-48a2-b554-56d3989fe578", "sighting--7f70508f-cf43-4f6d-b130-032c0a91b085", "sighting--d01942c3-ff66-428a-bc72-a7b1a5f79703", "sighting--72fe2ddb-597f-482d-9d10-842da58a2146", "sighting--fff72571-cbf0-4589-824c-dbdc4e339e37", "sighting--ee3a11b9-5791-4d76-bf94-3ae73e703e34", "sighting--abbe2757-742e-48c7-b881-9fe6061e0727", "sighting--373f0cbb-03b2-454d-8b56-555b03ccff0d", "sighting--c1dc071b-2623-4d8b-8dc1-632f066d5667", "sighting--12454dd5-af03-418c-869d-0774ed42636d", "sighting--37424bba-b878-46b1-a479-da2f52012177", "sighting--0135ac37-9576-4c89-9650-0a16a002e025", "sighting--545ec8a7-49ed-4239-9484-562f4ef0f684", "sighting--36032fcc-1e3a-4009-8f0a-349b67c26dc3", "sighting--7918bab1-ad44-4c5e-bfd3-c45cde61c58f", "sighting--847fd339-43f7-4767-8755-c7e5153de896", "sighting--c1f67e77-ed0a-4e50-bd79-04272673c99a", "sighting--9060eb9c-2b67-49a0-a7e0-043053d91e1e", "sighting--37e639fd-4904-422f-85dd-781c9be12ab6", "sighting--1d1e1093-aa13-49f7-8e63-82100f1a5400", "sighting--f9b1e1b5-d814-4b9e-9c27-ae656eceb9d1", "sighting--bd53c124-2525-453d-8c1a-4f0c2676fcd8", "sighting--b42cb595-fc00-4b5f-849c-5592e1e24ef7", "sighting--5d5f99a7-0e65-4665-9c0f-21647b2ae573", "sighting--2c096939-db7e-4ce4-9a49-d5df00b9a38d", "sighting--4ee1cbf4-3c8f-4457-bf65-50ca9338614c", "sighting--955a1efb-9ca5-4d8d-bbe4-85f0e3cd9dfd", "sighting--40084e43-b805-4458-a6cb-ee20f24de67c", "sighting--13c5bf60-ecce-481e-8a75-f5ced7dfb541", "sighting--8f543915-2292-49a5-ab02-d7ac35dcc5f7", "sighting--6a73d82e-266a-488b-b078-d74138e86d47", "sighting--b7c19072-ea1f-4752-a9e1-5d06dec2cb69", "sighting--e07f5664-84ce-415d-a22c-c9e0fb9468c9", "sighting--b8f52978-3834-4516-8af9-d4564e51c490", "sighting--d97c22e8-214a-46cf-ab4d-0b490e7d3f53", "sighting--0b84e80f-eb7a-4c9e-8c17-670cc02d2ac8", "sighting--ad8bcca3-b084-4639-86f8-3a6108830dd0", "sighting--161699ed-3c11-4b31-a66c-d97785f9cdf7", "sighting--993efb09-45f9-4312-893f-a8ff4ae533d8", "sighting--eda2fcad-c54c-4c7a-937a-db1a8c65ee4d", "sighting--94c5e231-f9e1-48cf-994e-184b7d573ee6", "sighting--4ea13c42-dd89-401b-a00f-d6736cb7377d", "sighting--d6181a09-63f4-4ce3-9b85-d339d41e9b97", "sighting--f3a3f2fa-c012-4052-866a-d15a01c41438", "sighting--def25d7e-835f-4c98-877f-7940ee105f39", "sighting--5b4cb131-4ef7-4668-a38d-3c9b7d998792", "sighting--75ab6203-ba43-4cc6-a76a-73d4553b1e87", "sighting--8fd2d628-8641-4c8a-a21f-a4885ac278aa", "sighting--be20c642-d519-4b4d-9f08-a606d087dc14", "sighting--605a4bf6-03d6-404b-94a7-935d48d52667", "sighting--eb2fd6e2-5e3c-4353-b084-a7578fc3cd91", "sighting--d0417bfa-99c1-4bf9-99c0-ea506ddb7a8f", "sighting--143093b9-decf-48ad-bcd2-552f46dec767", "sighting--d9740d19-3d5b-42d9-96d8-848f4784706c", "sighting--b032359f-58d4-409a-8c38-940f4bbfbdaf", "sighting--220dcb2e-b299-440d-b06b-539d8800b18a", "sighting--e4d91ab1-ad48-48ca-b5dc-058f8dfcf0a2", "sighting--f3097982-4d52-4f24-97b1-260143e55dce", "sighting--965d8891-18ac-491a-9f97-34a35e597c57", "sighting--a6046204-e423-48de-8b1a-45df65e01646", "sighting--5581aa5f-8003-4c9c-abf8-eb13158641e4", "sighting--6fa3a725-2802-4f7d-95c0-67c0a2e6c384", "sighting--dcf6cf77-3b93-4c3c-bccd-b35cf65affad", "sighting--2e2bcaff-bc1f-46f1-a53a-19c18eb8e072", "sighting--5db9816a-2292-4f0b-8c4f-5c87e7844e37", "sighting--700ed1c6-c3bf-4f5d-8440-3da1e9438846", "sighting--5c3a4ba6-ecc7-4117-a470-58f547394d64", "sighting--dcdcbe97-f9ed-4e69-b950-abe6515201e0", "sighting--bfb8fda0-9924-4aa0-a877-f63ad8341e21", "sighting--afaf7e3e-0629-4d76-bbc8-de70b3f08523", "sighting--230e5a72-270f-457b-ad16-2dcfaabdd958", "sighting--301a3412-78ad-44b8-b71c-87c4211a8fda", "sighting--a889218f-08d1-4090-b0b7-8119eea7a910", "sighting--255a84c3-e943-426b-ad54-d6f844e8762e", "sighting--973bf89c-68d2-4ac5-9709-af2ff93a75de", "sighting--44284586-34fb-4349-bdcc-d3df8306ef0a", "sighting--4a986ae9-c3e6-4175-bc23-5099fd05b87b", "sighting--531c7e20-a13b-4afe-8d49-4fc6e19124d7", "sighting--557d0dfd-a19d-49f0-9c3e-a32b52d15d70", "sighting--b5ad53fe-6682-4ff5-ac8b-3a66d8b1b991", "sighting--ea7acd9d-aac3-4995-b1fb-1ba8d7c29993", "sighting--ceb22bce-9359-432e-a48e-25726612ac2a", "sighting--b1fabe3e-8b74-47b5-870d-67cb77cbacd6", "sighting--f87d7927-38dc-45de-803f-c947f9ff08d4", "sighting--8eb59cc1-43da-4888-ab5e-0d1a99f9da3e", "sighting--d1439946-3cf5-4996-8f87-44ab64990de2", "sighting--5624a416-0673-459f-af8c-dda502a797e5", "sighting--4ea7af72-0419-49a3-a5d0-cf237a8531df", "sighting--ce2ef51a-9925-40ad-af62-179fa548e389", "sighting--dee71ef3-019e-4bd5-b948-b20f9089c3aa", "sighting--36d21d4e-d052-4e44-a23a-eb9da065a9ef", "sighting--f2e50e45-aeda-490c-b476-9d049a38af13", "sighting--275d6bdc-c8e9-4764-9b11-c27d54045b12", "sighting--f78e4a8b-38c1-4f32-86f6-376d9c094250", "sighting--91d829f7-2e01-4e4a-8bd8-9edab678a1e3", "sighting--bb62292a-17e3-4f79-ac4d-696d5122eb0e", "sighting--2486ba89-0aa4-4a52-a718-4057b114049f", "sighting--2e3e5500-bce6-443c-8a49-0ad8407fce9c", "sighting--47372be6-b5a1-461e-b1ed-c17312109d7b", "sighting--78b99b8c-6b79-4d3f-8f43-f498b5ee1768", "sighting--da38cb02-4a62-444a-90bd-2af171f3deac", "sighting--61003a27-4415-4dd5-a44d-bff488486e0b", "sighting--a2b6f104-c8c7-4203-b894-eef9d56a7ea9", "sighting--a9e58312-99b3-43d0-aae4-43807cde32e3", "sighting--ff88fce4-bc46-4c22-b0af-85249fc811c7", "sighting--2d151d0a-a3bd-483f-b420-0eb9102eaefe", "sighting--e415a87e-595d-42bd-90d1-3e4443a6723e", "sighting--d76be3c0-db86-43a5-9bda-b53001572573", "sighting--07b914e5-586f-4988-accd-585e27590fee", "sighting--2e130527-954b-4dd4-bb43-b983ae83da1a", "sighting--edd92949-5dfe-4ca1-91fe-5c6953f75104", "sighting--182cc324-c693-4b1c-b207-892913daf6cb", "sighting--81487f34-1134-443c-b65e-af2d46809efd", "sighting--0b67947b-f411-4506-8477-e932f4a05234", "sighting--b5ea9efe-5591-4a7b-9f8b-28dcf828bcd3", "sighting--b808e973-b2ae-4835-b4aa-160fd7e2490b", "sighting--4724195f-65c1-4ac8-9bab-b8c87b03efb1", "sighting--69fb8009-116a-4b19-a82c-11f08db0de04", "sighting--3de30863-7b87-45a7-8f24-c76d8b2d14cc", "sighting--4ec91502-4836-4d10-8619-f3f854201c23", "sighting--93c4c5c7-8401-4a26-bc87-727fb9c2972c", "sighting--11e9d149-7c37-49d1-a07f-216d50e2063b", "sighting--5a04da0c-14ce-445a-b8ca-267983286eb1", "sighting--c344a4e5-1f00-41e5-9e63-c6cb3f1a912e", "sighting--92ab84d5-a2c4-4465-aefe-9e12d51fbd03", "sighting--256402e2-2399-4915-a6c0-8227be6c3e04", "sighting--764268a9-498d-429c-85c8-5985a2873064", "sighting--ccf0aeed-d192-4483-bc85-1a50b85c4284", "sighting--529d19b7-7e52-4069-bdc2-3fd3664d5cc3", "sighting--2c709705-a5f9-4f16-88d6-bb1d920ad58e", "sighting--dd840b33-e395-4a35-9b24-97c311e18593", "sighting--c712a083-52a0-4fee-8039-f66cf42a77e8", "sighting--430bc070-3cd8-4234-877a-44a5643d47e6", "sighting--b27ba9ce-8d57-4dc6-a7eb-b3505673f920", "sighting--82bfc1d6-3a08-4841-86b2-3419a30237d0", "sighting--759e3482-aafd-4870-9cc7-20bc85a27f52", "sighting--db51dd89-79ce-486f-b793-7977cdcea3b7", "sighting--d955299d-558a-4364-b830-3f8a5433e84b", "sighting--566f685e-3cb6-4793-b2a6-823002a9bb48", "sighting--18929016-34c6-4d9c-a473-a0899b35e672", "sighting--e994de0b-15b9-4591-bbcd-6ab66cc84be7", "sighting--a08b168d-ab24-4e04-ba7b-e5a0254d8da1", "sighting--eb62ab42-6c9b-402e-a9fe-e7126c4d35a5", "sighting--e8cbdb47-6248-470b-a3a0-68551a34d37b", "sighting--d60c494b-93a5-4925-9e01-dd2276f52707", "sighting--824d0ea3-baed-4fff-8340-09c423479af4", "sighting--36a407f2-93cb-4286-8197-5f59486e5e89", "sighting--35938755-3710-416a-b36b-531d4dbf8e0a", "sighting--333e97b5-d68d-4781-bf97-5471e2f74b8a", "sighting--2a34b399-efb9-4629-bf31-93be431b4f1a", "sighting--8dcdf474-ad52-4673-b614-beef77f224b3", "sighting--7e755d2c-c973-4109-b0fa-62a1be29f2c1", "sighting--f5c78114-1e15-4df1-98ab-c56b5187965f", "sighting--275989fc-8996-45d6-9a08-5c6f9d94510a", "sighting--b2fa16b5-ac31-4287-b900-58e30a6ab24f", "sighting--b527c57c-2a78-45e8-a516-07da68c520c1", "sighting--4a3c6a87-4be3-405c-b05b-a19efff5d8e7", "sighting--11e6ba51-1120-4b37-afb1-fa5ab25d4706", "sighting--d12bbb34-aa15-4d52-add2-078f8239c239", "sighting--db40c8a9-b2a6-4113-a8ee-cf32f290140d", "sighting--12f35d86-2513-4473-a504-bdf1c31759ce", "sighting--0c968b3c-119f-4f50-8984-e0ea33a26e8f", "sighting--8f497672-784c-42e8-8b67-fbbe311f67fd", "sighting--5e68e8e3-4cdb-4bf7-a224-b7d24e94cd0d", "sighting--4fdf333f-d2af-4e25-bab5-7670ca4ccc05", "sighting--6bc79646-a230-4430-b538-761c4a5c822a", "sighting--e9714b58-245f-4dcd-a7de-bf94312ea7e4", "sighting--1c303f3d-ec8d-40ad-b9cb-2ece35832e08", "sighting--f9a15e7e-4b3a-403d-8992-97ea4a18539e", "sighting--04391045-e8a4-4fe4-983d-868143f38352", "sighting--645be875-04a7-4b41-bdc9-072f9d0cdbcb", "sighting--5173bbb2-becb-40c3-a4f4-8f6f8057c2c4", "sighting--9615fa02-7913-4a7f-879a-dad0b98594ee", "sighting--56c6a20d-0e37-4457-95bc-9c76fd2457ed", "sighting--01228a09-72a8-42bb-bfe9-2283795770c2", "sighting--6cde7af6-def9-408a-9392-a9bee0a5fc7c", "sighting--fc2e13a8-1c19-473c-8e45-7f4a582b888a", "sighting--7d5371f6-2752-454d-86e8-16d90178c7bf", "sighting--9162a819-2f83-477c-b504-8961abbfad35", "sighting--b9c7172e-8199-4bee-8432-72670279ea99", "sighting--1ec914fc-45ad-41c8-857b-0b95f503c92f", "sighting--df541c8d-a680-4791-9b65-152b46a5f9bc", "sighting--0d54d7f4-58e1-413e-92c3-23202b71bb12", "sighting--f5ed0c04-b17b-4372-be77-9856ca870dc3", "sighting--5667fd05-3b91-4524-8b1e-3688dc24d7c3", "sighting--046ff2dc-e298-499c-93e0-e902d15ecdc5", "sighting--e3119852-93e2-4c57-b24f-14069de89872", "sighting--7ca7b13e-bd8c-445b-92d8-f99ffada741d", "sighting--7593b0b5-0eb7-48aa-b171-361e35bbc279", "sighting--7979e98e-9035-448e-8416-36aad6205692", "sighting--c5f94d23-2e27-42ac-9d5a-4d823b6109f2", "sighting--9306acd5-da70-4b14-8534-1f3d1ac8092e", "sighting--fb793805-34ea-4aa5-8515-5b7584425b38", "sighting--66e42674-f9a5-43f8-8afc-d2c56f8be7b9", "sighting--7aff8ac6-22b1-432c-8fbb-e6f039de2913", "sighting--317abf23-1e1f-4f98-a115-0790373990be", "sighting--e54dadca-b095-4a67-b6b9-126ca078c1bc", "sighting--a8c48a7a-21ba-4166-9216-b6c98594ce02", "sighting--546c9699-f1d8-4b04-925b-1a13613d82d1", "sighting--745f5a68-fe92-4989-901b-f14d422716cc", "sighting--baefa6a0-4549-4dc0-bac3-a23fef126382", "sighting--c74aef92-d0d3-49f5-8bf8-3d3b0859133e", "sighting--62a76011-e2e0-45dc-91c1-dc26c89dfa40", "sighting--d057bf37-4866-4922-9ffe-4ae3cd593c2b", "sighting--376c205e-0c63-4169-8a54-59c5a29ab7af", "sighting--693ac453-8b48-4e10-88ed-f1bb8451c19b", "sighting--1eb50933-9025-4ff6-9ed1-0abc2f5cc1e4", "sighting--34597a6e-4a36-452d-be17-6573b814e80e", "sighting--a5fbf964-b22a-4e27-9a86-66db46a49b1d", "sighting--ef8de246-4100-47f6-8044-72d2210a976c", "sighting--1dae3a5a-84e0-4982-8b87-9ac2f1dd769f", "sighting--bb6d1bcf-5b13-44cc-adaf-26f2c8e0b834", "sighting--000a9aa8-2a7c-4b21-9589-aecde4cc5516", "sighting--77507dae-81f4-42d1-8b63-b317f45618aa", "sighting--e8ccf134-1c8d-4a36-a46c-a031ec7ae177", "sighting--7372698b-7f5a-40d2-a196-fd354e4c5d94", "sighting--8e5f8be2-c4ae-427b-aec7-4805b8e833bc", "sighting--2ae09b58-f364-400c-8982-2542a1c423e3", "sighting--b16fc663-784b-4b91-9ae9-69e080d16b38", "sighting--b99f3fc2-d3df-492b-8bdd-e1d88b6f5200", "sighting--45dd211c-4e61-4754-b9e9-e6f42a4c6fad", "sighting--cd4d8013-c296-44b5-a4f2-ad7ad14add94", "sighting--38a98540-9431-482e-b3f0-0836146fc1e8", "sighting--afc8bfad-fd4f-4d1c-9dd7-3d2214984614", "sighting--f0df5b98-9b4b-494f-8fd9-72c3a37085d3", "sighting--9b64aaa5-3b67-41b2-b937-d66cd299fac4", "sighting--2695af60-b550-4288-8a48-ea2a5490c3c6", "sighting--ae897fa9-ea9f-46f8-98ba-6605733496fb", "sighting--69007eb8-d352-47d5-abb9-cee1b623a70b", "sighting--93f83f00-23b7-428a-81bc-651d6a19dd6d", "sighting--76ae471d-c9be-4645-86a3-1549d6ffed74", "sighting--3855fd6c-e175-4c35-906e-46e5cf525e7c", "sighting--17eea040-8ace-4d64-bfdc-d3214fefd306", "sighting--61ef4e5a-d1cc-4c19-ba7a-2782d3c61ddd", "sighting--601fca52-eb72-497c-8885-7021c9be1795", "sighting--d5afbf94-0b6b-4da8-9c37-62f4e50ba71c", "sighting--f69039cd-36c7-410e-852a-77b31f20273d", "sighting--80032b0b-d00f-4487-b312-5756bca76f66", "sighting--7192f516-b086-428a-be14-88183526b33e", "sighting--0f0504ab-c5bf-4e8f-88db-3fd4fe77f548", "sighting--b27be67b-a9ae-41db-9dad-f2c895d06fa4", "sighting--89c055d7-bcaf-41ed-93bc-ff6c0f2a49c7", "sighting--ea369510-3c04-4255-a4a7-0170fc7f7321", "sighting--5426c58f-b209-4a22-8f90-735f46126d50", "sighting--73a2d062-a5f6-45ed-8d13-7a43500e6b7d", "sighting--e37c9813-83b9-4d97-8ee6-1e1c1548dd7b", "sighting--a1163671-6739-4b00-8274-270735f68f1c", "sighting--7b8daf95-4664-4c8b-86da-fa8cebfce4cd", "sighting--adc6edf6-01b0-432f-aa4a-a6616f0a89c7", "sighting--16b3dcfd-8233-438e-a0ef-bf24e6dec7c5", "sighting--0f26d410-2413-4b5c-b21a-cdbc910efe8f", "sighting--442f5610-ed7d-4dc8-842a-b04d7c1323e7", "sighting--ff43bfe4-2198-4283-979c-7ba285a03044", "sighting--e77af8bf-e49e-4bea-b813-d33d317be624", "sighting--acd77e60-3c51-48df-9dcd-c18f92a8764e", "sighting--3b819b0b-9df4-4166-a131-77a986e18ad5", "sighting--5fa3403c-6d6a-4b67-81dd-050e0c32a1b4", "sighting--05b5face-c4e0-491b-92d8-7255f4f6c7b1", "sighting--d7897812-c68a-457c-871c-4f3de098ed94", "sighting--aa543c10-5767-46b7-b692-305c3f888f8c", "sighting--c28a5511-9686-45e8-84ad-071301f2c0f3", "sighting--30547666-e3f3-4b17-862c-c01d9f639514", "sighting--7e818cd5-80b8-422b-b10c-ee369cfaeb40", "sighting--a93c6306-1de0-49d8-b9bd-f822242e1142", "sighting--7d23d110-4445-4307-b1db-4c272d43f077", "sighting--a0e16048-9051-4bef-adf2-c0cd1c93c93d", "sighting--638cf04b-5a4a-43e7-b6b1-96f9cc558756", "sighting--5442b6cd-5c16-4d6c-9003-7f30f9ac402a", "sighting--7906e8c3-1db8-437e-bd16-59f5d46e7c65", "sighting--96ffce8b-751a-4b05-b44f-ef2f3ee56b9b", "sighting--fc5fb1c2-88e5-4d2e-95a1-c7d5ace6ee96", "sighting--f9b33cac-c9cf-42bc-a4f9-96f30603c2c1", "sighting--06a9b302-0bb7-4b98-a231-d817e111afa0", "sighting--8987785d-77d4-4ff3-b012-640498a3775a", "sighting--074e035e-8590-40a0-a55e-d7c8ce3ab897", "sighting--c8108390-a6aa-4b1e-8485-07c8df9eb10c", "sighting--8cf2c71f-1525-45f2-85b8-e71e6bf3e545", "sighting--cc783508-22ec-47f9-98bf-9edf74e8cb79", "sighting--c472a091-9682-4c6f-b443-4dfd92772bd8", "sighting--7b962d7e-9992-433c-897e-ab124613581c", "sighting--d1b031cc-1d43-4b38-8052-67182b66924a", "sighting--c282f189-fed2-4e2e-8f27-4084461eacf0", "sighting--28c21a1d-3c1a-43a9-865c-9dccfc32703a", "sighting--c60abbe8-903e-42ca-87c7-5a74b2f0aebf", "sighting--b98e7f78-ef11-46ee-b991-876a39071094", "sighting--004ce9b7-69e4-4210-bc03-01431c814b7b", "sighting--4cd31bfe-1f33-42d8-aa09-5c14afc08b4e", "sighting--722e85a2-1b1b-4a73-9bf9-aa33799b7775", "sighting--c9c3c6d9-8621-45d6-8c87-d7f1148964fb", "sighting--7ed79eeb-9507-4aa4-984f-b56ce2202316", "sighting--330daedb-5df6-4f43-9102-120c7a2af464", "sighting--fe05bf64-9376-453b-95cc-cc84b4d56812", "sighting--e086121f-3868-4fcd-984f-4b9e65c1c1b0", "sighting--3718a05e-f765-49cf-bcaf-785787b297ba", "sighting--2ad77e67-acaf-4746-a05a-9f99f4cf6dc6", "sighting--9be8d04f-0ed9-4d77-bf55-7671f8cf0a3c", "sighting--a91fc744-ebc9-4db0-8981-f9a7a5e93345", "sighting--6beed40a-65de-4f7c-b6fd-16058a290f4a", "sighting--494ebb09-99dc-47ae-8d52-a84103943af3", "sighting--4404c2a8-62c8-4e89-8989-f89d02e0ef5e", "sighting--941f842f-5212-46c7-842f-168ebfb08a6d", "sighting--956bbad2-dcb7-4497-9085-cdb353cf99a1", "sighting--752141c9-aad6-4829-bf60-3af7460e9d45", "sighting--b1a8c1bb-8da7-4ded-b7a5-0899b779ff01", "sighting--f309531c-8bf0-48eb-86d1-67955b05c61f", "sighting--0c590a12-407f-4e7e-a89f-a773e33c8da0", "sighting--07b7b25f-da73-4968-b807-46c5961c5712", "sighting--8550d7da-5264-4c9a-b00d-a056cd50ad9e", "sighting--1104eff3-a32e-4b9c-9ccf-697c1d3b5fbd", "sighting--0f9c942d-b7c2-43ff-a28b-09bf997a4b41", "sighting--13ddd4b2-fbfc-475f-900c-77c9e57b16bc", "sighting--ece65361-b8f1-4423-b331-ae8ad50cfba4", "sighting--2144fef4-d5cf-4770-92d7-eb0f79fe0d72", "sighting--3f1c16dd-17a2-4ce3-b8b5-eac70075cb0c", "sighting--f8174ad4-63bf-4b47-83c0-46a16eff5390", "sighting--60628dab-6b69-4ab7-b495-4b39424d8b5c", "sighting--8c59f6d9-689a-4158-b1a5-24272f9fe080", "sighting--93dc9a0c-8942-487b-8934-13f08e5aab67", "sighting--0e7c0cd9-b2fc-4e49-8f7a-e0b746dcf20d", "sighting--40ee65ba-5d99-4b1d-9038-a4383fb08f22", "sighting--1b0a2938-1da2-413b-a758-62efef2999cf", "sighting--355c5593-f112-466c-ad9e-8b978ba1741e", "sighting--284771ee-d6ad-4eb5-99c2-a1cf83c93769", "sighting--9de08688-3b2f-4d67-9df2-f097e415d908", "sighting--401d6cd4-a2c2-40fd-b4b0-a32c55a703d8", "sighting--8f3ef379-6a7c-40e4-be1c-9ca1cacd0c4b", "sighting--12ee53b2-0281-4f8e-bcaa-f0e9e44afa21", "sighting--88b16b20-0fdd-43a9-8ebb-cd99c81d06a6", "sighting--962d4e2c-f4f3-445e-8820-d89fc8a825d2", "sighting--17429e53-ba0a-439e-afe6-d40502d86315", "sighting--d055bb00-7263-49f3-95ae-f2ec0e69b472", "sighting--527d09b6-5da2-480a-81bf-ce49ae07ca72", "sighting--53c6d82e-73dd-46d9-a2d2-877941f414b3", "sighting--3150ba99-286b-41a1-b27f-098daafaf6d6", "sighting--e26e169c-8b58-4db5-987f-7405c50a7a65", "sighting--8ad10a1c-f036-45c8-9bfb-940e4437f195", "sighting--8d3fd440-85d8-4f7f-9d11-df2d1000bcce", "sighting--09b89f99-1d4a-457f-a712-2915ac416ec7", "sighting--c4557329-cfcc-48bd-b6ad-41a82a6adf98", "sighting--990a03f0-8dfc-49a5-90bb-bc8106821cc5", "sighting--c8c56578-cc51-48ee-b184-d9d86d0df54f", "sighting--26222182-f0cf-44d7-b424-dc3e4b12056f", "sighting--d463d9e5-df30-4d9f-8edf-3a2838e615b9", "sighting--dec32330-6fdf-4678-a9be-2e121c3ac0e9", "sighting--034d24d9-0044-4776-9cd6-8cb89484a38e", "sighting--feb2db9b-492d-4728-aa95-6a5387e0d2d7", "sighting--a82ac1d7-d237-41b2-b838-ab8b13baecdb", "sighting--592d82d5-cfd4-4b86-9001-e3ddd576e0f8", "sighting--ea2244e5-eea0-4a15-a0b4-c9f1eae5fc7c", "sighting--b2aed1cc-dca1-43c6-b481-41aa691cb8f4", "sighting--1eccc335-92d0-4b79-93f3-4ffe7f5ad103", "sighting--3d0d6c3b-daac-4fb7-af86-de21811cf963", "sighting--6e90e697-e54b-429d-93b4-4dc3958d5383", "sighting--354f6348-d91f-423b-9282-cd3c63a81b75", "sighting--1c98af92-3f71-42d2-a6f2-0beec4531197", "sighting--b7f574e2-34f5-4c59-85dc-92e2126f5287", "sighting--83502fe8-1189-43c0-b616-9ecf16837cb9", "sighting--10b25dfc-3a90-44e6-ac60-58201ec6cca5", "sighting--091a0404-6fa7-4279-965a-3ccb1f1e7cf3", "sighting--d969c13a-68e2-44bf-96e3-e568ec1218f7", "sighting--eccfb791-6f14-4c6f-9744-5d4a22470033", "sighting--11766b47-40e1-4a17-bb10-5ee445ac834a", "sighting--f018d4cc-8e7d-4371-bc8e-4116b7104440", "sighting--d67f2374-fd03-4dd7-b080-9285a388ff21", "sighting--cd695f97-8c21-4eaf-9cd7-4604bc653b4f", "sighting--3b76f441-58fc-4dcd-b95c-eedda483fe34", "sighting--aced00eb-914b-469a-b253-da37410c6e71", "sighting--b5ae3d95-f964-414e-9f41-d8dbf30d37e1", "sighting--1efd51c0-2bd6-49e8-9499-393ecdace5d6", "sighting--329c7796-0c21-4af6-8b5e-6dd8d779d92c", "sighting--ec84f5d4-e71f-4574-8a47-d847d9557f96", "sighting--02e1f491-192c-4453-997e-f517060357e5", "sighting--72c2e293-5c47-4800-a8a4-4ec6d57b42df", "sighting--44c302bd-fa70-401a-9775-3d3418138d0a", "sighting--a9fc227c-ed9a-4493-a148-8a5b665bcfd5", "sighting--f52b4e8f-9d22-446b-9602-95d8eb44a14d", "sighting--5653435e-4666-463b-97ff-da7d091a1b13", "sighting--7398cc94-8ef7-4c00-8ceb-183295b0d4a7", "sighting--3e2b148b-bc23-4a78-9109-332e257ad6fb", "sighting--e7cbf51f-289a-4a95-83cf-cdc1cac6073e", "sighting--f94f2607-ec04-4a5f-ae80-943c4dfffba9", "sighting--c18981c4-9d65-4c67-a449-7e21a992b5f3", "sighting--db0fe056-4c52-4a0c-904b-40197f4e92f5", "sighting--6dea8d95-02c7-4042-941b-15bc30a1dc31", "sighting--88db2162-427c-43a2-8ac3-817c8ee7d20c", "sighting--5b8c864f-9374-45ce-a532-1fb4b6523dc1", "sighting--fe9789e1-232a-4a84-afa2-7a8eccbb9fd7", "sighting--a646538a-27a3-4c0c-aa19-8e98d7192bbc", "sighting--08c6b495-7063-44ec-b082-fd46eba1909e", "sighting--cffd5f5f-dd13-4203-9915-d33ea9d6008d", "sighting--ca7eee88-089c-4735-b9e2-e2c9d200570b", "sighting--921929f3-1c93-49b1-9414-561d76aeb55b", "sighting--92feacb3-a429-492a-a517-47348a29dfc7", "sighting--f6c81358-7236-4faf-a266-55c4c4096840", "sighting--8e742194-c33a-40c9-aa16-744250e9aaa6", "sighting--156f4cc2-7801-49e4-85e7-bba58f8b9c6b", "sighting--2e935282-b0b1-4d93-af11-659a250c7940", "sighting--501a9656-0246-402b-9df8-366c69cee384", "sighting--eaa227d2-63bf-48d4-bf75-1de2c3c8a870", "sighting--1f27a28b-e1b7-4f98-877a-ad8114c39a02", "sighting--6b20dac6-b8a9-4a0b-855a-01801b44da93", "sighting--ca8f35db-0a86-49ff-96aa-89e4e406ed3d", "sighting--e04dc2ee-3a2c-4aeb-a6d1-096b0e3737b3", "sighting--6a0841e5-65a5-4a07-a9cf-939fa83ebd3d", "sighting--a7c5b619-9760-459d-b2b2-9b32e9d6ff29", "sighting--3ed2d1bb-6090-4442-b5b6-a7272d846164", "sighting--9cf9b37d-0973-4316-bb6d-9969b85f80d7", "sighting--69e1fc0f-107f-49cc-b92c-f902469cfb72", "sighting--66d4c04f-fcdd-4583-b095-693d0bc04485", "sighting--c4f4a47f-f608-4c0c-8975-14c978f7c06b", "sighting--81f48e58-107a-4356-b9f9-d8be08466621", "sighting--5d6bcbfe-aeef-4a26-b2e1-3e5841a95787", "sighting--8b04ccd5-ce67-4a93-9f82-55b4a4deea31", "sighting--f4409183-277a-48b5-b81e-44940fc9583c", "sighting--d75ae648-9c39-4093-8a6a-92d6c4327f4d", "sighting--78fe5309-6904-4400-b66c-1be68d872654", "sighting--b1699834-6052-41bd-a774-17cee3482c2b", "sighting--b2672dce-38c1-4797-9b18-4239e5b1a811", "sighting--ac9d3dab-5709-4c90-9304-abc76ff43586", "sighting--c96ffec1-801f-4228-8967-e5bf83f1dd1f", "sighting--4de06b6b-7699-4ef8-8c07-6ee594c75f46", "sighting--62d97692-44af-4ef7-a9e3-f8a80feba3e5", "sighting--5bfdf228-bb27-48b8-a0c9-34162acaeedf", "sighting--b06f361d-d301-4a7b-826f-c8eb6d051909", "sighting--95717b6d-1360-4aa7-a92b-f7620d065d22", "sighting--d7bedbbc-13bf-4823-a41e-1b2a272f8ec8", "sighting--e117f0e9-a544-4a14-b99a-f8cbaefe9044", "sighting--950218fb-454b-404a-aad2-cf1bc1a98e38", "sighting--ca73f690-2d8f-4e26-adc7-c6d7050b8ac1", "sighting--5a251930-fbd3-409e-8e29-b51d07782958", "sighting--b20e0e51-fb34-49e7-a0dc-af29cfd45804", "sighting--54d4a710-db7c-48d3-a66c-1e4bc7aaa99b", "sighting--f3b01f27-d3ea-4e92-a247-dda425830050", "sighting--b99df0ef-8fe5-418f-83d2-637d0029b8d5", "sighting--61695b62-554c-431a-b58d-21083a75ce96", "sighting--fdaf4d12-1e66-4d03-bb8c-d93a044cb6fc", "sighting--bc4c82b2-8038-47fa-abe3-ecba8c0dc470", "sighting--9687e201-551e-42d5-94f8-e4cf85102065", "sighting--baf0608a-1a64-4c30-9e2c-17e328c09fb6", "sighting--bc21cf08-ec81-4bd0-8a13-454ad600e310", "sighting--80a54ebb-ac10-44ad-a396-d569d098402d", "sighting--f8ea31ea-754d-4c21-80ee-8d699f78789b", "sighting--9a40ec1d-72b6-4174-8361-6eb63c1d6a5f", "sighting--6cdea97b-0870-479f-8379-9207f4910105", "sighting--310dfab0-478a-463c-aa96-e9e5346053a3", "sighting--99c976d8-a1b6-4db4-a1ba-b33725a08766", "sighting--6818982d-7d3b-4b91-9709-9698b65c7284", "sighting--956cf5ac-466c-49a7-a71d-ff77dcd0c52c", "sighting--48fd080e-b858-4ca1-83f6-40592f1c8889", "sighting--15dee7b3-6be0-4cd3-b2a7-98beed731dd5", "sighting--63e6175f-c357-4b34-bfb2-d97ffdfd5e71", "sighting--973acdd3-61bc-4a99-8507-545ca3f81681", "sighting--52bb731c-e2f9-443b-807c-fb149ea111d9", "sighting--9bfe859e-fed3-4c3e-8f5f-c9b8221c1bad", "sighting--eba8e129-450e-4e6d-889a-ec1cecdfe571", "sighting--863147ee-a07c-44fb-aa72-7ef5f5a85f4e", "sighting--eb573b44-ec1b-4765-99fc-2d54c0f93e6c", "sighting--9a7b994f-6cfa-44a0-beac-1469d7728a95", "sighting--28de5ca2-3234-4f60-9ad2-3aaea72ef3c4", "sighting--3ef27fb7-c0fa-4c4b-999c-6b5ec81a034f", "sighting--9869374e-d80b-4492-8057-e64decb6ae19", "sighting--d38ca442-6dc1-43eb-b5be-0f38a271b32f", "sighting--8dbd5978-ee56-4ce9-9865-53b80796dc2a", "sighting--5c3ddaa9-1ba1-4ef6-b476-3113ea409dc6", "sighting--bf067815-0436-4e17-8604-f9629917bfa4", "sighting--a7191278-b771-47c2-bd01-1d35b8b0d851", "sighting--97b20051-9139-4dce-b0b9-0ada037e8664", "sighting--41b421b5-0169-4a65-9976-42c93490bdf3", "sighting--0b3b1e39-3e24-4bf6-996d-e352a74907b1", "sighting--fd62845e-1a6e-4449-96d1-baefcb37e13f", "sighting--706cbd50-a822-4962-bee9-36d2f590493b", "sighting--3e5f2e8e-5fe0-46d6-a10d-d14b8d272f5f", "sighting--a73ed012-0833-4f56-ad75-ecd67435e24e", "sighting--19f43ae0-07d2-4987-8611-c51acdcaa227", "sighting--3520a2ee-7e4b-40cb-a4c2-f42e5aef40b8", "sighting--e98ece53-4822-4929-948d-127eba3c1dbc", "sighting--5606822e-b241-486f-bf9e-d66200b7e7e9", "sighting--8e5e4e12-235c-4ed5-b4e0-3f1be3048e25", "sighting--25886369-258e-4ab3-8526-3bbd19edca5e", "sighting--6de72f2a-5884-4231-bc30-c3be9cf36e49", "sighting--17274d1e-1cee-433e-a1cc-6232d07f20d7", "sighting--cbabb463-3b4b-4628-a4de-d235b617bd8f", "sighting--7589c71e-e73f-4328-b9e7-aad55c181884", "sighting--c24aa09a-9a1d-457e-9d87-8ff11b3e649b", "sighting--3a080a63-1bc5-4a8f-bdd2-26b0b1b585a6", "sighting--681572ed-8fc8-4881-b07f-ee8c4282954f", "sighting--4ac947d4-a316-427e-8e68-84db4c18b32b", "sighting--1f4e2447-a2e0-43a2-b992-010e906a7a7d", "sighting--2a5896ca-4fa1-46b2-bf5e-be77e6094692", "sighting--2098525d-0c93-405b-a9a2-440dd310326c", "sighting--fc38d084-cd45-48e5-b8ed-ae70e75783b9", "sighting--1f559716-f8e2-47bf-9e98-c69651569d98", "sighting--c1447c10-6e23-43ed-a38e-873feb69bec6", "sighting--4a51c431-510d-4bb1-841d-af5bad8397e3", "sighting--a9c0e09a-7467-4920-b230-dc0ea57d661a", "sighting--25dfc320-1a05-4458-9c47-466bad636dfe", "sighting--babcea6b-f06e-4e05-8908-fb49477c270d", "sighting--f321e4dc-11fd-4300-bd69-1c1430a3a517", "sighting--6fe465ad-1862-439b-a25c-1b1fbdc7cce1", "sighting--ac865f1f-731d-4c08-8e78-645ed8a28c77", "sighting--49987cbe-1f67-4a47-931f-53a227163ff1", "sighting--b1a801a4-14ba-4025-9eda-a50729f07e7a", "sighting--24135e43-5fd1-47c0-b759-f7725e7d4e47", "sighting--3e397cf1-3087-4364-89a0-1de3c31a8c4d", "sighting--2151c708-1787-4c9a-b82b-dd06f80a3e97", "sighting--23c86eb2-83e3-41c8-98d8-f4720060156e", "sighting--e93ebd25-721b-40a5-9c69-939b3086ad58", "sighting--b9376ba4-6833-4028-bb25-97bdf87062c7", "sighting--2299164c-d8c2-4536-b553-9fd3433e9b73", "sighting--52b79f79-bf1b-485c-b504-b2610f5d769e", "sighting--ff538051-7eba-448d-8f8b-39019b49cf22", "sighting--80e36d1b-8f1f-4645-9245-849e476f9f4e", "sighting--8bf7c494-8a29-4dd7-b02e-f8dc1d19e0d4", "sighting--d99845a4-e09c-4e22-82e8-d917d21b6960", "sighting--1f6cadbf-48cb-420a-bf1e-bbb595006682", "sighting--0533f655-2eb3-4615-a92c-5b9993c494ca", "sighting--5b2f1ec6-7afb-4b29-b6fe-2338d202af67", "sighting--012421bb-01eb-425d-ade4-b33666c85144", "sighting--5621f801-5f42-4440-adad-782a5c8accad", "sighting--1e798346-2f46-46ed-b28a-2634df1130c1", "sighting--c55e307d-d0af-4c0c-a8e4-c3897ca89a61", "sighting--25bc9185-3cd5-48d7-944d-902e89b8080c", "sighting--60387131-5032-46d1-901f-2a294b3ee886", "sighting--eeb5eb6c-8577-42ed-82d2-3595dd064ede", "sighting--59526b4f-6945-4c22-a863-2755e641ccb1", "sighting--981afd48-2cbb-4862-988a-59245c2d699a", "sighting--898f9521-d6e5-4f92-88c8-c130f5bcd800", "sighting--5fc00e41-0a72-4355-bbf5-657ef7c605f1", "sighting--6a9ad6ff-7631-4922-9662-dd20531b21c1", "sighting--adea36ea-4101-4160-a5b6-f9a4f9e45312", "sighting--c15aac35-23ce-4aa9-9bcf-6434010368e9", "sighting--4750d355-7d7c-4259-b228-d72c502764dd", "sighting--3d99356a-ad70-461f-9b4f-68e922d50946", "sighting--5fa3aa40-b117-4fb2-9210-57313727f16b", "sighting--ed988d86-ba1e-4879-ab3d-cbb3cd77aedc", "sighting--3aa536b2-f8c1-4395-bbe8-f0f54aa49620", "sighting--12fc8c88-9f52-458d-81b1-f49572e2efe1", "sighting--fa05e367-3196-4c98-849b-6cfefaa6e123", "sighting--00204607-6dc1-43a2-aaab-52f032f9c8dc", "sighting--144e8ee6-d19e-4c52-bcb8-7ae1c2ac1404", "sighting--fc31c247-27a5-44fe-bcfd-5e3b71aefd9d", "sighting--c52fc760-cf8c-47c6-b289-dd14b3d55ad7", "sighting--eef3e521-5652-4dc1-91c1-48d42be3c949", "sighting--0186d65f-f359-4936-97e6-1e8b6d21f474", "sighting--17f5a1ca-9c8d-4d41-b0be-105d7c86e234", "sighting--836b73d2-944b-4458-a078-4361379c8185", "sighting--fd75dcec-017d-406f-a01e-5e2d08890d2b", "sighting--87aec85c-2c1b-4b1a-a9e7-f51e4ee15341", "sighting--865a287f-9cc2-4f5e-9360-0b2b4b98bbdd", "sighting--024190a4-6bf0-4a43-a662-0c3e05d552bd", "sighting--75c427ed-c32a-4c1d-95ba-06d755f0a7ac", "sighting--fef8c6c5-1b7d-40ea-89a3-0ef1b2c33eef", "sighting--0516d0c1-4efd-48a1-80b7-da2f4535a88b", "sighting--74ed00e2-8aa6-470f-a114-52a6b65851d8", "sighting--273053b3-5169-496e-bf43-8e4495dc7f9d", "sighting--29f94e2f-6bac-48c2-ad39-8c81b02520db", "sighting--0dd93253-f9d3-46f7-879c-b4b643d24259", "sighting--ea79bb47-8d52-4ff5-8eb7-e9643b8e5f3d", "sighting--9901d3ce-3d64-4bac-8ed2-7eac18748aa4", "sighting--bc723658-9991-4386-901e-f7ca87df11d1", "sighting--bcd08b2a-6841-48fb-af01-3d324c6a219e", "sighting--4400ae82-53f3-432b-bbb8-af9e8ab7a474", "sighting--b8646d87-7ce5-4482-819b-511521a0eb96", "sighting--842597fe-0494-466a-960b-b91c094eb722", "sighting--709d9933-c1b3-448f-a654-96b363242344", "sighting--3459daf1-5935-4e0f-88ad-bdaed310a9c7", "sighting--46a6dcec-8372-4da0-ae98-ddfb4546979f", "sighting--2bb13678-b08a-4786-b07a-07c95614d868", "sighting--3dbe6223-5fd0-4bd5-9324-1eaa1169ee04", "sighting--e94ca27f-1031-4687-859e-8e637c44f139", "sighting--e7ba1c9d-383c-4ab1-80b3-e92ae292f788", "sighting--c8663a52-dd7e-4a5a-889c-5ecf54f4024c", "sighting--8b1493ca-99bb-4aad-82f9-529c936b2e70", "sighting--a7c9f72d-6386-432c-96a2-acec4781070d", "sighting--0a0aca15-5ab1-4051-95d4-c287d3620104", "sighting--ab24ff41-a4a0-4699-ba99-3f52fde73836", "sighting--d8c77150-032a-4227-b500-9f24a76e189b", "sighting--11c0afd2-6dd4-4c76-8cff-5bca8c2c11e3", "sighting--336e121d-475f-4859-9406-08bd1cfbda13", "sighting--a6d50ede-2e24-43f3-802a-08b39e9ded45", "sighting--e620937c-c6da-491c-86e5-403110ff334c", "sighting--b17a8ab6-fae1-4f6f-b8ed-548eb1694ad1", "sighting--cd6b0364-af6a-4348-800b-b20a90b4b146", "sighting--a4ce1822-e71a-4a39-bc8c-288712eb8c5a", "sighting--45e35b27-9b3e-4cb1-99da-76786b4fb8d7", "sighting--326fb5b5-00dd-4b6b-bd75-8822af77f513", "sighting--fe7f8e0f-4ee8-4557-b7bf-bbb8f1265e08", "sighting--58173533-a195-4f20-891b-a6cf9abdb1f1", "sighting--0147b9ce-f157-49c7-848f-4408f063487d", "sighting--c6a33229-e59e-4302-ad59-9ad50272be32", "sighting--f744a985-1bc4-4f66-b3c9-51896af240ee", "sighting--32bda068-d132-416f-a560-273bfc09c899", "sighting--4b43c8a4-62c2-426f-85bd-23fb5a1c081b", "sighting--070b4aac-119f-43d4-a529-b1934d3a6cfa", "sighting--965a081c-f7be-4310-9b71-f2dbdea34b20", "sighting--aad54288-a85f-45ba-af7c-629d1dcc0611", "sighting--c4fd0745-ac83-479e-958a-7fe6a624e064", "sighting--93d7f080-df58-4ba5-8e2c-fe3a523c5162", "sighting--9f485a84-e0db-450b-bf8d-c71786ca5cdc", "sighting--b15aca48-dab0-42a0-b61d-4414e036072e", "sighting--746c71d6-68c1-41cf-97da-b8566f409aa2", "sighting--e7f400d0-1837-4d3b-a667-71537159ccc9", "sighting--bed982ce-21a8-4d44-b6c9-df7621f6ebda", "sighting--8d2ddc80-2549-4181-9062-efd71de6f6f8", "sighting--2a4172ff-c846-47a3-b5c5-1bd6ffad2d7d", "sighting--be2b3e6f-edf7-45c2-a6c5-b795b4446065", "sighting--f52ceb55-0c9c-43a5-8a6b-14a8954cdba5", "sighting--869fa789-df72-43f2-bac8-ce5816f07cd5", "sighting--99e4e42b-b28b-4493-84e8-94c004e5351c", "sighting--2e6dade3-315f-4e7b-b724-08ab9cee1a2b", "sighting--e87db3b3-b65c-43cc-a6bc-cc631be8d739", "sighting--804a3a85-1dd0-4280-8640-5b60a5686df7", "sighting--946b36a0-1aed-42e3-955f-d5377a9976a0", "sighting--700128ff-4574-49cd-9083-4ce000086719", "sighting--4f266ad4-789f-40e4-9f7a-d57b73b464f4", "sighting--3f784c78-a093-4257-89f1-39bede6d8e79", "sighting--b9b09daa-8881-4f03-b1ee-8f1b7f274244", "sighting--5b327abb-bcc4-4185-81f6-573ca3d4a314", "sighting--65bb9810-c1c9-4f49-b666-4d28616e4d80", "sighting--941ca343-8567-4752-b087-37545808d0cd", "sighting--9e806e38-737a-4797-a94c-589e9b7eb798", "sighting--4fb6a98c-081c-4b12-a4ca-8442f4276787", "sighting--da37300e-2354-44b8-a626-cdba486615eb", "sighting--5c545b82-582d-446a-abb9-d4455b583856", "sighting--1ced8440-006f-4663-99e9-344122bc9252", "sighting--19c969bd-1354-4c89-b918-9c21cd58b962", "sighting--d8f02352-f1fe-4171-9c2f-dee68a925d77", "sighting--0ab441c0-9734-4e31-bf55-5680bbccdd39", "sighting--96d1435b-5c20-4b25-ac52-1085b2ce8214", "sighting--42f44ca1-9fcc-4658-832a-45b367a888c5", "sighting--e09a4378-538a-4200-8211-7fcc070f9fdd", "sighting--7514fe28-a933-4ab8-8a42-f7ad891a05ea", "sighting--de0a99d1-580a-4972-ab67-a9143f84f601", "sighting--70c7475f-671a-44fc-8bfc-6e04eef6a459", "sighting--c39f80e4-3a08-49b0-9c40-1c45a42a03bf", "sighting--db6500d2-56d0-4769-8a3d-c1ce8ff28fca", "sighting--b95ae89f-8338-41ee-bdaa-37c3fcdd3f5e", "sighting--3ec772e7-8e6b-4f11-bc36-c7f360101fbd", "sighting--7e74bd31-4f07-4d3e-bb6f-001899c3eb4e", "sighting--68ac3271-2994-4957-acc5-70684e460d0e", "sighting--574db778-2050-4e78-a054-d6a36c4eff32", "sighting--ea5a2982-d896-4a78-b284-bdf0ba4b4fb2", "sighting--af755a2d-ff13-4467-bb01-108696fae514", "sighting--50100083-1835-43df-9b27-8acb4e45edd4", "sighting--84b666fb-44bb-449f-b416-507ef0e3a7c2", "sighting--0abd8125-26b5-4a98-b7f6-661337ab0e01", "sighting--9177af76-ad80-49b4-86b2-75f0e5a18f58", "sighting--9b1ee2be-cd7b-47a8-8630-8f0a0c127cb8", "sighting--a4593f65-5dcc-4316-b2d2-4c30ac040445", "sighting--69dd0fe7-b5f6-48bc-885c-df204e9a0cd4", "sighting--1ca09d70-3f8c-488d-9c09-e6a7b31501b1", "sighting--7f98c048-20cc-4230-ab1b-708bec327777", "sighting--e93e8a89-e05d-4598-bb15-cc5c30210d22", "sighting--77d00e19-ddd2-4fbf-9097-04a8dd3ff550", "sighting--ef1472e1-4de5-4de7-9ec5-86dd49cb8049", "sighting--2d3e6a2b-12a7-48eb-83a3-9b76addf9fc0", "sighting--b144815b-54d7-4b35-89c5-9e092d74a22f", "sighting--c0de10aa-2bee-4037-a916-2eb1270dc589", "sighting--b1c5693c-6052-4148-8c8c-c02864d13d5a", "sighting--f8360c93-1b00-4890-b8cf-f0d5b1dc4dcb", "sighting--eff3917b-16ce-4e9e-aaa6-96666bac65e0", "sighting--a8de71f0-1c1a-4057-9def-37eecda2cc4d", "sighting--c9cbded8-ea02-4c77-9dee-3edad5df5158", "sighting--e4adec22-f0a5-47cb-97b9-18f393c8fb2a", "sighting--6a86110e-6551-4188-9965-be1244054428", "sighting--7df7af17-8eb6-4bae-ae0c-ff7606ac9e81", "sighting--636e62ed-c893-4ff4-aae0-684ee47d5ca3", "sighting--fad04410-bb9d-47df-ba1f-88ebf01fa947", "sighting--03a61766-a016-4bb0-b58b-047f35333db1", "sighting--57bf4041-1020-467f-86f2-ee7df77e1558", "sighting--448631a5-7cba-4bb4-8448-9b6fd9aee7b9", "sighting--2ff7352d-e7de-4e42-91d1-76f2aa665543", "sighting--1e558294-0750-4151-9452-f5baa816da90", "sighting--8ae8ec89-f08d-47dd-9a7e-ccc9518cbc1a", "sighting--4ce05e64-6073-4c04-b436-b3ccd0460a19", "sighting--cf08d4c6-fb3b-47d3-9ac8-c311c49975cc", "sighting--a749fd0e-3922-425a-a3a2-fb26fc211e07", "sighting--e0433546-3d4e-4ce3-8567-1ad2a514949c", "sighting--6369bde4-13ed-45e4-a4cc-cc9b5cfbfbf1", "sighting--9411e035-7286-4300-9917-8a9d441d0038", "sighting--259373cb-b657-4345-a3ba-285f1010b082", "sighting--4dd69d2f-8033-48be-81c8-215b70b97a98", "sighting--266b03e1-d14b-4ac3-9324-2fec90dd015a", "sighting--aee8cd24-8112-4d0f-b8e3-f8626e827138", "sighting--ac386719-7d35-47a5-a533-82a6a33e8461", "sighting--7388759f-d725-4d86-b102-c96a958dffbe", "sighting--9bb5170d-9e61-419d-bd5a-78f669774e2c", "sighting--32d55bb4-1322-4db2-a240-9b2a1f47331b", "sighting--cab86004-340f-454e-a8f7-fc5e4e04620d", "sighting--7a5f4539-0f65-4985-8140-4a0c470ee74c", "sighting--bff889df-6135-4e91-a64a-c84940a36274", "sighting--2f855d5c-b975-4457-9eef-d8a7a9e38e67", "sighting--1ca0fbe3-caeb-4353-9da5-ec2caa1644f9", "sighting--3a10405a-8081-4f66-bb7f-dbbd4df5b91b", "sighting--98087262-74de-4d8a-a1da-32af48829932", "sighting--14cfdc73-c14a-4aa5-889b-2733a48f679a", "sighting--8e873505-e0ee-49ae-8890-5e842c798ede", "sighting--737932e7-f380-423f-8633-4d8b64dc2c10", "sighting--9545e3d6-f662-45a6-913b-1de2c5824c0a", "sighting--fe54b066-e317-4b19-9470-46585f6d3ece", "sighting--1073aab4-af1e-4f54-9f21-8ff884f25b95", "sighting--4d3f2f5f-6b98-42e6-82c3-7710186470d8", "sighting--6b1b525f-aa3d-4c7f-ba6e-e375b8098961", "sighting--62c5c898-86e9-4e9b-b1e5-63c4b3823dc7", "sighting--b20d8053-4975-465d-b364-52a851d94d6b", "sighting--bcbd0026-ca00-4236-b3af-b73849153be4", "sighting--ddd5a8bf-e953-4ee9-a39f-e6500483429b", "sighting--694aceac-a4c9-49d7-8da1-d967e7b211cc", "sighting--d0c1147c-07f0-4d06-8849-94f6c6dbe35b", "sighting--b4e0c440-13fc-45b8-a5b8-760f5470de04", "sighting--d974cc3d-c15f-4d78-9b71-fb03531c2768", "sighting--8314d660-358c-431c-9e95-45c09cb9c68b", "sighting--476e9178-57a2-406f-9eec-4c26d1b30465", "sighting--47be3867-e983-4319-afbf-3a8a93c077bc", "sighting--e72f4547-85f4-401d-a28f-87149448e902", "sighting--9467b03b-afde-4541-b41c-9de0d4826830", "sighting--cb0a66a8-5980-4d61-9b5d-58cfbffb8de2", "sighting--03fd5dd0-696e-45ab-935a-da03aaa1addc", "sighting--2b2f8f97-9f14-4f28-b6b9-772f1135fddb", "sighting--e84d3b5e-49f3-4139-9a23-8f7f245526cb", "sighting--687ff68d-a293-4445-a965-6a072ff74667", "sighting--aab34d7b-52c3-460e-9ac5-abb72c76a9ed", "sighting--0ed80acd-fdb8-49dc-b183-1b3f5fe40522", "sighting--11985040-7406-400e-be52-a6b2da0c5e8a", "sighting--2f6a9e36-241b-4652-88e2-811f42151391", "sighting--d087a1ab-58c9-48ea-b90c-ebb50c1cd486", "sighting--060a1017-2c05-4a61-83ea-c7b86e7f5c64", "sighting--f7f99f75-a97c-4e2d-a56d-a94ee16197cc", "sighting--fbabbed0-24c2-42de-a7f8-8dfde7ff7352", "sighting--b4903d52-73a9-4448-aa8c-eb3955056dd5", "sighting--a6851a9f-b831-4c04-97e4-b0db1cbc4745", "sighting--2e0d1ae9-071a-4941-8387-550326143d50", "sighting--58cf8572-cf36-4f53-ae16-9e3656176f35", "sighting--88284635-589a-4901-ad9f-f5426f6f5776", "sighting--0bcb3455-c916-458d-b701-afa2101c2fc3", "sighting--6e081872-7856-4245-91b5-62682636f291", "sighting--f5b4f228-b98a-4696-8352-8192baa5c6ac", "sighting--f156b854-3462-41a2-9e3c-ea52a61d646d", "sighting--5939bc36-096a-4f78-9ad4-421aaa8af60d", "sighting--0f993fb9-6803-4b75-86f2-23b1c73e3bd8", "sighting--5e0a8e0b-4b13-46f6-9312-99d77e43ae66", "sighting--822d0771-5d61-48a1-8b64-ea4b15a4838e", "sighting--9cdefdbc-4838-44cc-9bcd-55b62a0045f4", "sighting--51dfeb63-359d-417c-9495-d6670ae22ddc", "sighting--66a3f7ac-f49a-44ab-a67d-30ce6758ebd9", "sighting--47a92912-18d2-45df-9fdf-0416422d31c6", "sighting--9fa4c809-6e8b-4949-80ad-022e1725a553", "sighting--e7f79298-091f-4ee0-a756-7d5fb77bcdb5", "sighting--a06e1d1d-3eb8-4ca7-b378-b2bf107f3c2f", "sighting--2d45e2f9-8729-4f1a-9bae-e912ec03c8d1", "sighting--9f62af3e-8a17-404f-81e7-1e8737f4117b", "sighting--2bc58c30-fff8-46fc-894c-6920decc21fa", "sighting--35ebc136-43fd-4395-9376-57310737a147", "sighting--41c59b96-3872-4ccc-9952-e196feaf7ec2", "sighting--e40f757e-dc20-4bd5-99ff-9fd6c48a37b6", "sighting--bd2789ec-9d7a-4bba-bc59-ce8b28893278", "sighting--ac19e316-4ff9-481b-9641-9cb56328fab4", "sighting--49e86602-f27f-4e13-a348-1d975d1abe7e", "sighting--378c58bb-1b10-4fd7-a832-a5e5b7d4958d", "sighting--651cd346-7711-4e93-9c2e-f98a79fc35e5", "sighting--21dda86e-2f2b-4e7e-bdc5-ccd6fe4100ca", "sighting--70f6963d-e582-40ed-ba44-1db07b4a2855", "sighting--031e0954-8bf8-42ed-84c5-f86ddfad1653", "sighting--d1923ed8-9f2a-4447-9e75-6e46b5ce6190", "sighting--5b4e52c1-ea3d-4384-8022-70475f097ab0", "sighting--b781154a-476b-43d2-a3a6-680607d5bc93", "sighting--94c874ec-c7de-4889-a489-d4a3224c2406", "sighting--7d0c48d6-5156-46e0-8288-4d82b975e369", "sighting--0595e209-368e-4634-a782-5d36a7d9f722", "sighting--bb08d36e-2638-4f86-816e-6c1ebbeb5092", "sighting--42c18522-292b-40f7-858a-de76eb44a429", "sighting--7f4153c4-4d42-4bcc-9dc1-639dc2ce3f85", "sighting--807e14e7-7598-455d-9ab7-ab7079fc4f8b", "sighting--f185ba23-4e6b-4f7a-bc23-845a7ba71691", "sighting--57795401-2e84-40f4-84b7-ab54118bfecc", "sighting--e95f2b08-79d6-4876-ad9d-2863f58eb3be", "sighting--192a3dec-2474-4821-9dce-6e24d0384c67", "sighting--4c0cba58-e5c2-40fd-b469-17743b7e226a", "sighting--00da3c11-2ab1-4da8-aab3-4895afdc4ed4", "sighting--40783678-26f6-4f9c-8c4e-33ed7054d6b7", "sighting--ec04eb6b-db2c-4f6c-8b8f-e7bba56b4ba7", "sighting--1a0053d1-3602-468e-846c-88a8820f6443", "sighting--cc4efbd5-6d3e-4209-8894-5f753590965a", "sighting--8b6688cb-900b-4b26-8f73-b078aad444fd", "sighting--6fb37cea-25ff-4fc5-a5d3-9b5cc2f4ac61", "sighting--dbd9cf37-86e6-4c25-924a-4ab0432cca88", "sighting--3f95837d-dcf2-49c5-a677-2cf8d1f6bb66", "sighting--6f5a507f-4b61-4b1b-8603-3e8109b7ad5d", "sighting--0fc17d12-6f90-4685-90ca-97eda31bbc49", "sighting--384c827e-a9c0-43f7-9ea3-f10572542b3d", "sighting--d2eb0811-0b4b-4880-8aa4-d8f7352d5298", "sighting--3cdceeae-13b1-4ef3-8f92-6ab444e25893", "sighting--3373675d-2cb7-4cd9-b107-585c60ac32ed", "sighting--e8e15a25-89e2-43ff-a560-551f1345457e", "sighting--6a801f53-9413-4ba9-99d5-d3b2c960bb8d", "sighting--57cf1ebc-c72c-43f8-bdc5-20454428711c", "sighting--36b2d677-55c0-454a-b782-e950b09b0e3c", "sighting--13b52caa-1d9c-430b-9dc7-6e59b0a9f0e8", "sighting--a3ee8cb8-ba45-4e7f-a4a1-6ffa90250e03", "sighting--196e82f8-7579-4adc-96b9-c9abff360cdc", "sighting--d58a3eed-f91d-4793-9c30-88f737e403ca", "sighting--94d4bdc6-0361-47e5-ab49-adde57725922", "sighting--5f6d016b-554e-44bd-9f1c-8aba1de2232e", "sighting--db83c771-9f42-4504-853f-8a2545f91225", "sighting--8a7c2688-2a71-4e60-975a-10e119ccfbd2", "sighting--5b9f63a2-88af-45ca-9a54-07ea96ac17fe", "sighting--5e5a96a5-41ce-42d7-871b-07fe2d733be7", "sighting--9c7968ed-669d-4157-b7ba-edf568fab03a", "sighting--31d9c5f4-2567-4470-9475-1120c67f4250", "sighting--92c3badb-3952-489f-a368-947d6e6a4793", "sighting--23baaef0-90d4-4c8b-8f29-0463bc3e35b5", "sighting--7ca949ff-79a9-41a4-a1e2-dbfec054d4c8", "sighting--99d6b8d6-a4f4-4b50-8934-ebe2bccdcabd", "sighting--646f0476-293a-4efb-b1ad-cdfb1072d504", "sighting--03df2af8-9afa-4151-a808-29b515970e0c", "sighting--ac60cb57-cfd5-45c7-b70f-9a07242df9d3", "sighting--c99f3fc7-ae8c-47fe-8a11-596573995782", "sighting--8dc7abfe-4c63-47c6-89c1-458295c34605", "sighting--29172d96-d18e-4a0f-adf3-6e8a80034aff", "sighting--b20ba955-afe1-49ab-86de-25536640edbe", "sighting--4ba796c0-ff41-4157-bf6f-600e0c0577dc", "sighting--b9fdce2b-00b7-49d2-8d9f-d4697c178760", "sighting--b93236e5-fa90-4f17-bfd0-6b2e05f7648f", "sighting--448fbd87-7149-45f0-909d-1b16daee24a2", "sighting--113ab270-79ac-4c7a-8409-73ec40221517", "sighting--0f47867f-9e87-4c36-b4d5-74e2a14a1fcc", "sighting--741f3b58-c7d2-488c-a552-081f8dc694d6", "sighting--f80bbe60-254b-4436-80fa-b6416f0a26d8", "sighting--21b3ef11-5153-4d4a-a69e-4e055a2e166e", "sighting--bb3ec11b-3ff7-46ec-94e3-94d57f05b81f", "sighting--4f9c22cd-61b5-4b96-be11-8b4eb22da77f", "sighting--8a516f97-c42b-4a2f-9005-f6b564aa1d4b", "sighting--74ca77a4-1a34-4691-9346-acb9de878004", "sighting--5e0b200c-8e47-40ce-a2d5-96afcf7658c7", "sighting--ccbbb2ce-1a6f-48c4-a4b4-31e60d565c1f", "sighting--46bbf8c8-f817-49f2-af0f-f89eb0b2a0ea", "sighting--fae50163-fa44-405f-9cbd-672ed6f310d8", "sighting--530c5898-17b8-4136-8b6a-2110e557fe0b", "sighting--fd7f08c2-9e24-44ad-98f9-3d02fd83e564", "sighting--a576d641-0751-405d-9acf-ce5d6d816da8", "sighting--a565f9b3-834f-4803-8e7d-e6b04b5f14f9", "sighting--fb55448f-f5de-4a2f-8ce9-e7aa600b7318", "sighting--b45864b4-027e-4222-b6be-686bddc8f32f", "sighting--3dd2b816-a4a7-4edc-973c-d8fa4bdd5994", "sighting--0946af0f-1be9-4695-be56-d2ac4fa71765", "sighting--8b262a0a-c04a-437a-84d0-eb53de1cd0dd", "sighting--fa4d9699-ca51-48f0-b80b-2f75d3387028", "sighting--822f0d64-1321-4d89-bdee-8b0271423d62", "sighting--7df04275-10d4-453b-81eb-4aff436f1fc2", "sighting--431b3dba-be7e-464d-aea6-2300c7177aec", "sighting--90caf18d-376e-4812-95c5-9b0e0d90de65", "sighting--a882e284-851c-410b-ae09-5adaab15fb1d", "sighting--77a40515-b965-4314-afd1-abf5bc9be589", "sighting--8da64958-07be-4ff0-bde2-5a76acf53695", "sighting--701471c2-f7d0-404d-a7c1-8a02c86f0bd4", "sighting--cc73fff6-bbac-4e47-b866-4c910ef1d8ce", "sighting--d36c9c1f-fc0c-4480-8ac9-dc18183025ed", "sighting--9e4387e8-068e-460b-ba8d-e3fc1f9d9bf4", "sighting--4f1af12c-ec2c-40c2-b190-3a49180c97db", "sighting--404ac0f0-0e8c-43fc-aae2-f41823a3dbe3", "sighting--0f3724b9-9f2f-4b14-bf00-847360af8452", "sighting--ea036f7d-e100-45ef-a3d6-376d850c3728", "sighting--448d8e3e-0c46-49b6-98ee-de9ffb501e75", "sighting--60e28994-5a61-4b89-919a-458e982f3ddc", "sighting--89fc2f14-dc0a-474e-a8c5-889b54edcf38", "sighting--6c085124-33c2-4d98-9d37-bb539e9fb53d", "sighting--dd01dfb1-59a3-4d13-9927-bd2f59e92759", "sighting--3021694e-db57-40ae-bbe3-bb8c1bb0afb1", "sighting--3fc561a6-3e95-40d3-8897-ee27a46b151c", "sighting--34c358f3-dd06-4706-9af1-cb0e82a33b94", "sighting--a41cd2e2-9a99-48af-a3a1-ae15dd6aea84", "sighting--3d89971d-8c2e-4fc5-a5ec-a280a473a90d", "sighting--e1a86c7d-d5de-4fa5-977c-a8adb0ccd1a4", "sighting--1db83e97-2a62-44ce-84a8-ffd904efe807", "sighting--ce09e4e0-75dd-4607-a615-62f788ddd8da", "sighting--9fee9630-04d2-47ef-80c0-7d070bb30cf8", "sighting--5e9db403-017e-4cf4-b5c3-a3b924c8a1f8", "sighting--270315ea-c0f5-4ee4-a48a-36ead5f90e49", "sighting--928d6c80-36db-4f3f-ac15-4bab5035816d", "sighting--b33612fe-e6d2-48ad-a7bd-210267540afb", "sighting--399da366-1508-43a8-85d7-96b9c90f2b0f", "sighting--9b18871e-814c-4ebd-9315-b70606d5e5ae", "sighting--3c17fab0-00ae-434a-b66d-a1f0f17dffd9", "sighting--00f8d404-ed52-418f-ad77-5bcab485fd05", "sighting--88a19228-22ad-46cd-a5e6-76216cc39e65", "sighting--ea0bdfcd-d4b2-4654-9875-bf1c5ce7d539", "sighting--8246c82e-b22a-4b58-9a58-55d69fe871b0", "sighting--b2714f38-515c-4199-a1f8-e575143759e2", "sighting--c155adab-5e11-412f-9275-6502f0c4c1f3", "sighting--0b8176cd-11d2-40dc-9d4d-81545c5bb83e", "sighting--2d5749d1-f291-4690-b09a-01381d27c78d", "sighting--63558340-5937-490e-8979-d61e323e643f", "sighting--b541354d-ad75-44da-988c-6a783b15da8e", "sighting--ae4f5cbc-a13e-4d73-b5ba-1ca87a3f7cb1", "sighting--f25896b1-8d9c-4d84-929c-c38d37f33131", "sighting--227c60ca-df31-4718-9d24-72db0062009f", "sighting--1c12e8ee-d440-42a7-ad87-c928a82eab3f", "sighting--36863861-a768-4e76-be36-9947b78f315e", "sighting--856575ab-b528-4470-b6e3-b3d68aba5530", "sighting--594f515a-6601-4995-809b-0623f70fa478", "sighting--7f552ad5-87c2-4365-84b3-82f7c316a45c", "sighting--9b2d2971-6143-44de-9baa-7cd2f88a09ce", "sighting--315baaa8-7fd0-4504-a39a-6a51e55cb883", "sighting--cb9dddb6-25d3-4e92-9172-b06c3fe7245e", "sighting--41e70fe2-6c4f-416d-ba18-523ce65766a5", "sighting--8fec6772-0f46-4d55-8ee2-86d469d3f4e3", "sighting--2e1b3ca8-b5e0-483c-ae3b-950c5115d2bf", "sighting--36e875aa-5e03-42cb-99b6-ea66a56eaced", "sighting--ab52435f-260f-4ef6-8fa9-2812993e80de", "sighting--15a96a4b-3150-4748-9c61-46316ea638ec", "sighting--ac26f157-8df7-489d-98b0-992b99c3f564", "sighting--d7b2501c-63f5-4f96-8fc7-eb62ebfe54a7", "sighting--35c6d962-cc28-43a2-a65a-7d6b1f98a6b1", "sighting--cecf6065-fa9d-4ea2-9cb1-4e819fcaaf48", "sighting--9c2f49d2-01a8-4264-b562-ef650db0c553", "sighting--dee345f1-dfdc-4c46-b927-a5c4d96ccf70", "sighting--08ac5627-4e9a-4fe0-b589-25d5d789d0e0", "sighting--4962795f-1a8a-44fb-8a9a-47eece604b45", "sighting--8d6d1423-7d25-4b59-8911-92f82403fc4c", "sighting--192f96bf-cc7d-4a9e-8767-e4fb1be77be6", "sighting--d6937f58-1d86-4bc5-a9d0-45a8ce11a680", "sighting--8adf7987-cc2e-4400-8bc6-2a49a5e8b601", "sighting--619248fb-127e-4618-9513-eed2e506bba9", "sighting--9b3937f5-7ad9-40d5-aaee-7de205114caa", "sighting--7c4d1893-7c6d-4e6c-90a4-ee148d0143f6", "sighting--ddb0d7af-09c5-4e39-868d-d8fdc58e618f", "sighting--6e1862bf-c4a7-48ad-bdc9-5f07ac493279", "sighting--3c117de6-17ea-436b-baaf-e754166c4628", "sighting--10f792e8-3b38-4305-b179-c3f0ebd4aaac", "sighting--b240eab1-c85f-4859-a4f5-cfdcc309403c", "sighting--22c58560-8dc2-4e90-a852-24bdaa0f7f13", "sighting--93e2ec7d-0d88-43be-a338-65ff387f03d7", "sighting--a37795da-9331-485a-87df-e96bbc7c1373", "sighting--e47de477-da83-4404-87e2-b34f99c19580", "sighting--217497b7-cffc-4edf-a827-3bcffad46f04", "sighting--abc0ae40-f2a5-433b-b83a-d9f6685ef508", "sighting--998a9464-9df9-4f21-974b-81c19a146a27", "sighting--4c2e62fc-3759-4bfe-a18a-8ce4ab34012a", "sighting--cc95cacb-54c0-451c-b629-aa2935a9a21c", "sighting--731a8faf-34c2-4e8f-aba8-af1568d27e5e", "sighting--e499d84f-c8b0-4590-9e18-ed128230fed9", "sighting--591ee94a-992a-45d7-aeb7-af1b26d79c68", "sighting--553064f6-4cc6-42a3-8648-bc746e50afee", "sighting--d6e7738b-63db-4f9a-b0f4-dbc96db41f07", "sighting--dee1a7e0-87ee-4331-86d8-38cc54b43781", "sighting--28b77289-7f75-4e0c-bd2e-a0ffc989f7d8", "sighting--6b2f9574-456a-4cf6-93e4-95f782a55fe6", "sighting--920d9e9f-f1d8-4a7b-8e2e-e1c1c3c14411", "sighting--7a1b0379-71fd-465f-9636-4f85aaf8bcb3", "sighting--f16c339a-82eb-4910-afa9-7463d166e750", "sighting--535a242c-fd12-4d97-b799-ad7b9410cbe4", "sighting--0d406dd0-9aa9-4177-84f4-c3d6c7f4b46e", "sighting--4ecec5ac-0333-4aa0-b765-5e92304a8a4c", "sighting--ac6298c3-2a2e-4b2a-9597-7f378e0063af", "sighting--448f2cf1-6795-443b-9fdd-26564b4388c2", "sighting--4b65f781-de63-4cf9-8ce0-c19a77e1cd9d", "sighting--159c05fc-8615-4ecf-aa73-7e5dd72e5e89", "sighting--1b8d673e-1621-41f8-80c0-72a580b2dcf7", "sighting--9515190f-7f2f-4db8-9aee-c7d7d45f26bb", "sighting--53989fda-0580-4098-b563-c2956903aabf", "sighting--84803161-7fbf-41c9-823a-37486b84e7ed", "sighting--d1658b80-43ef-4a5b-b37c-20f548300469", "sighting--1b779439-a366-4d1c-9f0f-28afd79a270a", "sighting--748e3757-5b3a-4e12-9d23-3ed3c9d3c894", "sighting--bd05b1ba-8cf1-487b-bd4f-86e7c0254a39", "sighting--0a7bcac9-a26b-4005-b2dc-e4165067c426", "sighting--10dc537c-8ec3-442f-aced-a918fb68fdce", "sighting--86928cb2-825b-4594-b787-e6116f43f53e", "sighting--0aa3b2de-77ec-4e18-a644-3fc1cea10ef0", "sighting--92c294eb-6008-4f48-a801-b04d80a87631", "sighting--50bf4c3f-5b94-48ed-bbd7-5e5503d01966", "sighting--b438ff25-92b9-4f59-9017-0e2136a6a7ba", "sighting--fcd4489e-1da0-45e8-806a-9ce20d0a1216", "sighting--fc9565ee-0146-4a62-8f68-304c6e15e2e2", "sighting--137344db-87ba-40f0-8f7e-741e6443d345", "sighting--39b5c286-9c52-4470-abc0-5f170ad61b1d", "sighting--6d3f1ee4-1962-4321-86b5-67afeaf6efcc", "sighting--9736b917-6600-4bf8-9480-884ea09f21a1", "sighting--ac28a7df-4050-4f17-a5dc-50a2f50552a3", "sighting--2be87d4d-3292-4362-81c4-a6fe69316146", "sighting--b2394656-c42a-43bd-8743-b94d02a5a1d0", "sighting--5856d198-16ab-444f-891c-3d077839e073", "sighting--6c0af516-5a39-4783-bfe1-664ca3725488", "sighting--ebadb361-0456-4e91-a4c6-cba7d49285b1", "sighting--60e5edb9-6d53-4dcb-90b5-6532b7359470", "sighting--d7e5b46a-6e05-49d4-a4c9-d66e4bc624c8", "sighting--2871de68-b558-414e-bb02-5f9a50244cba", "sighting--2abe0675-aaac-4591-a7c1-231ce09b1ea1", "sighting--a2d41344-239a-4aa0-99e7-404a58380b21", "sighting--8c593e50-db2f-4791-a5e7-b26091867abb", "sighting--d7384566-d207-4015-a4a7-b560a5620a26", "sighting--0a61ed2d-3502-49a9-bc3a-cd98e3060c6c", "sighting--eba339d9-3267-4711-9631-02edb7645643", "sighting--0cb358f0-b577-413f-94dd-ac9104d53d7e", "sighting--3105bdef-842f-475c-83bf-8d7f5f78f22c", "sighting--75b34584-d5cf-498d-b919-9deb86b7dcb2", "sighting--1c69f903-7534-4434-9490-791df8b1c0d5", "sighting--22b4d883-cf7b-4244-8a70-e30a0332a15f", "sighting--564801ca-8061-4351-9d7a-add234ac2f7d", "sighting--3e606d2d-e4d6-41df-a9cc-d59e2c847d17", "sighting--82f86a15-cdde-4047-bad7-0b2557964f63", "sighting--c93ebc39-71c6-489e-aa77-86e959d5a0c2", "sighting--d6651573-b7df-4461-80c0-93f9f8055434", "sighting--280aa8f8-02c8-4509-a5f9-86f724c505c7", "sighting--541d2ac4-9797-41e0-a633-d9e2f3c60180", "sighting--f8de4042-b66a-4ef3-8d92-83dda2cddccd", "sighting--09cdcb15-690b-4915-9b23-6c4122267fd9", "sighting--7f672546-94f8-4399-b1c0-65393e1cfee7", "sighting--8eb9ae11-9030-42e3-be78-9e33b57fd494", "sighting--48970960-37b9-4cea-8819-5a4990218e06", "sighting--d981584c-0c75-42c1-9351-ba3065eda246", "sighting--d55a5ac5-b1e1-466a-84e4-a158d561f89f", "sighting--33ed3c95-7e97-4447-8a89-2f1d0bca06a6", "sighting--3ff5dace-0910-44ad-bdcc-64e0dc82f49c", "sighting--45c7602a-8116-4285-b7d0-b5dad14dec5d", "sighting--d966624f-5c42-4b17-b779-aca82f0d2d38", "sighting--48170a8e-02c6-4f8d-894e-1956a513a0b3", "sighting--d1721341-6f87-4a4c-97d1-8b7a2e211b00", "sighting--d16f5a9b-7760-4b93-b158-b3a5de071274", "sighting--4c96028f-733e-463e-8be5-eb0569eefc77", "sighting--cfa663d5-c371-473e-9f29-519952299a13", "sighting--556a1cb9-1d15-4f42-997c-b189cc559b3e", "sighting--4ed52fc6-c38f-4e85-a660-7f4c5a01f144", "sighting--a7e5d881-c9a4-4086-934e-f0d6bfa61ce1", "sighting--edf9c78a-1e22-4411-b49c-fe7a46fac0c8", "sighting--fb977bb8-f7bc-46f3-8d73-9301663583b2", "sighting--ac33f157-26e7-4fe1-9eac-4fb817f8d6e6", "sighting--91ed4215-0d55-4a31-b66d-eb2cbbb9f139", "sighting--945fb651-a058-4e52-8d8b-ab8e28d2c52d", "sighting--d90382a6-88fd-468e-9e9b-35064230861d", "sighting--1cbb26cb-d5fa-4424-88df-e132f0c68efd", "sighting--08607fb8-5ee8-491e-bab3-5d1e345d4393", "sighting--2c1f9600-3d74-4706-94d7-dca9ed1e8e11", "sighting--04948e06-ddc1-4cc2-b086-3e1ddc4761d8", "sighting--094bdbec-e9b3-4681-b278-b701ad5eb4ae", "sighting--3e076963-cdc5-4823-9858-4df6614fb143", "sighting--7624c276-0067-4979-ac1c-ca8fef913c40", "sighting--8591a357-82ad-48e3-afcc-414e652cd814", "sighting--2d4404de-1a8e-4a47-9bf9-5dbe06f1d598", "sighting--53fd04e0-967b-43ce-812a-d9b3d300f080", "sighting--0e3c77a0-47d9-4476-8224-40523a9ede0d", "sighting--d619dca6-0172-47d7-b7f6-738d2c8d4ddf", "sighting--7497cba6-bf48-42fd-beec-fdf10defb288", "sighting--2f10fed5-56fe-42c7-aefe-9a751335110a", "sighting--118ba040-58f5-48c2-9356-8f2d9ab5047a", "sighting--598a3d1a-17c4-495a-91a9-13f591dc16a6", "sighting--c65722a2-9959-4e8c-8033-7f8bb534da2a", "sighting--0294044f-9348-447c-93f2-5cfd28525605", "sighting--1984f217-c67e-41d0-b868-213577acf7db", "sighting--9c5722a2-3ec5-42b5-9815-111bdb8fd07d", "sighting--f9829ab5-99fc-4976-a8ca-5fe3da624b63", "sighting--6d96d807-d0a8-447d-9b41-8f7971b8e0bc", "sighting--ab2c4d45-8b3b-4330-94eb-43a560d86f2c", "sighting--6a064a19-356a-4f79-a5fa-c35b80eac4e7", "sighting--b4a2a4d3-6f37-434e-9d92-1827252d5a01", "sighting--92916cb5-0110-40ac-bbfb-f2f61d33b9b0", "sighting--2fb01bdb-6d57-4e17-b015-363bf8e67d53", "sighting--57d10057-918b-4583-906d-65d367f75f0e", "sighting--8e4417aa-940b-4fa9-9f56-bc56cdacaedc", "sighting--16faf206-b579-4853-b718-f4103bc7467a", "sighting--be35374c-f3d4-4aa6-acf7-9507a3779515", "sighting--9706bc9e-bf69-4adb-b809-42f045fd2574", "sighting--9ca302a2-cc03-47c3-93da-42c3bbbd1dfd", "sighting--9042fe72-1dd8-4292-b362-86106546f76d", "sighting--a5323c9b-5200-4601-8527-5a3d0a83287a", "sighting--f9b0c616-ad76-4986-9b3d-ac01644c1d57", "sighting--e11ba6cc-a63e-4562-8a67-0862d63b650c", "sighting--db93afff-691b-44f2-874c-205ef26195be", "sighting--1681958b-b77e-4718-ab7b-27887724e5ab", "sighting--db11573b-3d82-4cbc-ac34-ab15d99f9bba", "sighting--be812408-197e-494c-823a-c362ebc3b27a", "sighting--54866ea2-1be1-44c1-a4fb-fc763fdf29fa", "sighting--2e1046d9-f6f4-41cb-9806-283358708cd9", "sighting--cc72bf50-128b-45b4-9b73-da5c878d7adf", "sighting--cb6b9a98-5c12-4af7-b114-abae84ae3f6d", "sighting--e5bff7c3-7078-4c27-b82f-90f2e11a5e12", "sighting--5f2d1b1f-9c55-4e83-ab50-2734e11d9d77", "sighting--00210860-4f8a-4a28-831a-343c26cae287", "sighting--3d8d5be2-1086-496e-9c03-5bb72b6c0da7", "sighting--6bdc7c1a-9096-418a-87d7-44ac04be03d1", "sighting--786bd156-e343-45cb-9f52-91be40756029", "sighting--de7cabd1-d11b-4962-a738-8d0641fcc67f", "sighting--97f7c555-bfd9-4a8e-8a4e-6c826c1f256c", "sighting--e3ba70f2-1014-4dd0-bc63-6216a34c9872", "sighting--54ef5266-cd69-46b0-ab7c-3ad860634e4a", "sighting--8816947c-bea4-42d6-a301-1928c8d2816f", "sighting--95014fa5-9128-4ecd-a40f-ac04d1da30f2", "sighting--2e66a122-e53f-4026-bd1b-d80db591034b", "sighting--c05fa6d8-c65e-4e40-81fe-ff2dd7e65688", "sighting--3eca3317-2ce0-4820-94c4-64b06a7d336e", "sighting--f2b846bf-d57e-47e0-926a-473fd1cf1b9f", "sighting--64779f96-a840-41ef-b21c-9a0494ae3675", "sighting--a69d3a5a-36a1-4660-99bd-770d16a73bdd", "sighting--37311cf8-b640-492d-87cf-9296404ef8f3", "sighting--591b601e-0a74-40d2-bfb3-c24c249e428b", "sighting--3993df94-80d2-429b-9eed-b62db418dace", "sighting--29795bea-cbc2-4181-b2db-0ff50f15a7e3", "sighting--3ee6c249-f8c6-4a38-ad6b-4a2b34ddf395", "sighting--789c89ca-8a0d-45e3-9d1e-8d093edad1a4", "sighting--ed968725-d422-4b2f-8597-3fa1521d6d39", "sighting--7306015d-85ac-4ed6-af5c-7b42b29d8e3a", "sighting--468afd41-05eb-48ba-8d9f-fdce348d0426", "sighting--3ee5d8ad-2d54-4702-9778-1cbf54198397", "sighting--f1f93e88-c506-46a2-9f30-5057c93f35ad", "sighting--8f160c54-27b1-410b-816f-81f3686286b8", "sighting--e790812c-377c-4be4-89f7-abe0de592b13", "sighting--288eab4b-df27-4d68-9870-b97cde71713d", "sighting--1596695f-0449-4ff3-99fd-5b7bfd4e77f9", "sighting--744974f8-879a-4e74-a9df-b0463edbc104", "sighting--96f04d4c-83be-41d2-8d35-7da7a4d12de2", "sighting--38243b05-ce6b-462b-b4ea-b091e15eae8d", "sighting--a59ac4cf-f968-4266-8b4d-7a00a1ca9355", "sighting--12fad043-0512-4faf-a337-56142da1fa38", "sighting--6479b207-e8ea-487d-9d1b-0fa01b043aec", "sighting--05bb16fe-0f6a-4193-8de2-d1183e84c490", "sighting--df204cc5-8f0b-49cf-8665-f8259a9c3a5e", "sighting--e685381d-8cca-441b-bec9-820f75c8aea3", "sighting--9998f12a-6efe-4d39-8be8-516fc48007cb", "sighting--254b0fce-4968-4a39-8039-0ac859369cfc", "sighting--1930e85b-5dc7-4435-a2e5-3e32bb948ea2", "sighting--6cea60db-bf7d-400a-9209-0ac69e48b1f4", "sighting--3b45caca-d18a-48a1-bc63-d0cc4a5caf05", "sighting--7b52e54c-da75-4ab4-a827-57e4698029f6", "sighting--ca0e1be6-01fb-422c-99bd-e2ca2f1ac15a", "sighting--dac93eaf-2c84-41c2-b280-668ebbb6e164", "sighting--abc7d425-043d-4e3c-a3eb-739e57b522fd", "sighting--1919f5ec-43a5-4637-a853-5be155bb0cf2", "sighting--3042fe04-8a8f-4cb3-b6c0-55aaf038bfb0", "sighting--8763f9a1-9c1e-416d-b8cb-e15fc631fecd", "sighting--a1ec36a0-c654-4001-ac01-21a74eaa0b8f", "sighting--ad59dc35-2f96-43b2-8487-d190ddc37345", "sighting--413fb658-c87b-40b7-a1e2-cf2367167b05", "sighting--b2cd1a05-56c0-42d9-8374-21d86248a1d5", "sighting--a437e4fa-1193-43bf-96d4-9fb45453970b", "sighting--eeb6049a-8234-42f3-a26e-0a4ec04fd748", "sighting--e0fa280e-09df-435b-81ec-cbbdf90e3f2a", "sighting--b71a97a8-be6f-427f-9170-3cca14758a1f", "sighting--ac0c2882-d940-4b69-8855-2e70e108a335", "sighting--b5308635-940b-4d97-b24e-df3ac02da513", "sighting--e148ab40-4781-4fe3-a5b7-590305efe171", "sighting--a7de2d9e-7384-44a4-bc3d-c2c77d76731e", "sighting--9368677e-33f5-4c69-b1cc-ff71af39f1eb", "sighting--804cdc6b-0717-4ec0-b84e-92788d0cc8b4", "sighting--09017e86-b7b0-45e3-8695-108088947e86", "sighting--e6451ecd-bee6-43e6-a931-d6a023c415e6", "sighting--4e205770-d165-4c32-ae68-d9cea8c8ada0", "sighting--e194d55e-5358-4283-9011-5c194c005a0d", "sighting--1e3f8ef2-78ab-49b4-bcec-70734e81f676", "sighting--a63e8782-3261-4621-95a3-fc848d609505", "sighting--7d85091d-1bca-4934-9659-a0ff1451bcff", "sighting--75cc2f5e-fbce-4d94-81aa-76b90bbf64b7", "sighting--da2c6cc1-8a19-40b3-9865-e1069b1ed8e7", "sighting--78ba72ef-91d0-443e-99d1-7763fb821fb9", "sighting--34122e69-5124-415d-8e92-3fa7300a416f", "sighting--5f0dad7a-5e01-4d04-b66a-74242f9d55aa", "sighting--7954b416-9bb3-4e08-82bb-ab2603da5b50", "sighting--190e3d40-b7f4-45d4-9bdc-ceae4cd67d9b", "sighting--0da644c4-a02b-470d-b254-8d999a241be4", "sighting--5ea296c2-aef6-4dca-ac12-97d5275aa647", "sighting--c8c9df83-b23e-455e-8dd5-b82bb337f9fc", "sighting--cf94eb5c-9e40-461a-b1a1-4ac3da121d92", "sighting--11d89cfc-66e1-494b-8cdf-04a234293038", "sighting--07292e70-fd8c-4804-8844-127f3db6767c", "sighting--22bbd3e0-0227-4258-8a73-692886db3678", "sighting--8dad99b3-634d-49c6-ae05-95b2c0f45215", "sighting--d4bfbc92-7dc6-4141-86bf-1dd9bc7b3312", "sighting--268e7ebf-d7d6-4872-8a43-5a00dae6dd1b", "sighting--243e8a95-f838-42a7-ac1f-f479f1888552", "sighting--0de6d8f9-e15f-4d49-9869-31379e32e42d", "sighting--bc924237-031f-4a88-a975-1c9452ecdbc2", "sighting--a8952448-6703-4e28-b95d-5192e8282fe3", "sighting--8e60571c-0879-42b8-b64c-b543a3b77d7b", "sighting--60f6155d-32c0-42bf-a4f3-cdcdcd5ce3c3", "sighting--41766d48-46b0-4df9-a4a3-48e741676fc1", "sighting--2c7cdb57-6ea2-44ff-adc6-0cbd97b3855e", "sighting--305fcd9e-b493-49cf-ba88-3d4557918df9", "sighting--0ff280aa-e1d9-4fe1-bf77-4ebcf6057da6", "sighting--7f025a9a-7331-49ad-b12c-0e9bb073fca0", "sighting--7da52a9b-1604-4757-a3be-195c34a941e1", "sighting--f989417b-ad56-40ca-b02e-1871fa8804e0", "sighting--f2f4b21c-97fc-482a-82e1-e59e5399d6df", "sighting--85ec7851-4989-42e4-963d-a68640e038e3", "sighting--678f1b2c-c933-4c4c-a0bd-7c9478296718", "sighting--c53647d3-c9a4-4ab2-8992-2033189e6366", "sighting--7c424b1c-4c88-4fa3-bece-44e3bb955590", "sighting--630fe7cd-9443-4755-99b9-b6c108516944", "sighting--ee11ea7c-39ab-4a95-8e45-2eb341bd2d7b", "sighting--60da068a-09fd-4a7b-a9ec-92aac1054fa2", "sighting--16b66cd2-4d9a-45ca-a66b-b7455c34c6ff", "sighting--2612789e-48c5-454c-99d5-1dfdbdadf3b3", "sighting--f0133c62-0915-44ef-8534-e4325fb1ef52", "sighting--32787352-4942-4ba9-a22c-4b894bf4e5d5", "sighting--61eba20a-5b77-48dd-a9ac-c34034cf9090", "sighting--33ec48eb-f5f2-4a87-9912-9585dc5ba630", "sighting--2c2aa767-cec8-44a6-bab0-3ee255b66cff", "sighting--fb943ac5-56df-4810-88a8-c05037ec9e67", "sighting--269bd064-1a90-4b3c-9c80-b4a2eb0d56b0", "sighting--e5035783-1f5f-41c4-bfcc-305903993209", "sighting--13ef4fae-8733-4a0b-9fb3-1c89bc7bb8c4", "sighting--3d8949e8-0c1a-4d9f-b85c-6d87ec3e2fd6", "sighting--af835ea7-6b96-4f32-a91e-29b0b6d06d07", "sighting--2dfecf1e-6fa4-4da1-a300-36812092c132", "sighting--076d713c-e5ee-4b89-88f7-a940c0cb9192", "sighting--eb1711c8-b2ce-43cc-ada1-1e40a52bb24b", "sighting--678d397d-b7e7-4b7e-a873-b610dcc0ac79", "sighting--10b6d42e-906b-449d-9eb1-a46dc2705076", "sighting--babb429b-3e71-495a-a6a4-def507d3c8ed", "sighting--ddd3a0f7-edf0-41c6-87b5-45007edea18c", "sighting--65013956-b152-4478-9310-33082a8f5709", "sighting--99c3aad6-6ebb-440e-ae49-3384a6e9c1db", "sighting--ae4c5d3f-e101-48be-abff-c99317336993", "sighting--0bd8cbce-3228-4e53-8af0-6c616fd72ff3", "sighting--77f07d31-07cb-4ba7-9101-44d906faa446", "sighting--ced7bf4b-08e6-47d7-8aed-c805e3086542", "sighting--f68042d2-ef5b-4c84-9de9-d856c84c7ecf", "sighting--9ce91350-b7ab-44dc-b613-bd15d920a7ff", "sighting--95d80f92-db66-4489-a9e8-3950bd934afd", "sighting--f5c83a34-49a7-420b-bdc8-1e62a9936c54", "sighting--f3cfc166-fbc3-4b85-9951-e06dfdb566ba", "sighting--a300a05c-eceb-4ce6-9c65-8d4984d35d01", "sighting--1f4c817c-2a72-4920-ad20-4250bf2727c3", "sighting--7d13cc8d-14e0-47f2-ae9c-fb0056cec788", "sighting--33e91005-1645-4ffd-80d1-1ecad5b488c5", "sighting--a44e9b1e-66d0-4ae2-9a51-dd1b0d961dc8", "sighting--e207ca64-53db-485d-8bbb-f61af8448ff4", "sighting--fcb93722-2bfd-4d5e-be9b-e08ce723eca9", "sighting--715d1e63-a4f8-4989-9bc3-19c189c3f447", "sighting--dc74af7a-e48a-464f-a37b-c02fcd9a0c2d", "sighting--7cf625d0-0152-43cd-96df-5749e53cffd8", "sighting--69c22c74-5fdb-4e0e-9908-410cf2335dc2", "sighting--4073c120-8b48-4a3d-935e-766943b4ffb5", "sighting--df43bc82-2d1c-4b51-8e87-36f3952610df", "sighting--7caaf6e4-8b31-48f1-a25a-caba96dfbaaf", "sighting--f0de5727-3a82-4663-af8c-f8797b8aface", "sighting--56dde928-ad5d-4eef-8246-e176d74b6189", "sighting--ba6d897f-4d2a-4ca9-8f7c-7f5e9399df28", "sighting--7df3afa3-29b6-4c41-a0e6-4b0d6b4af10d", "sighting--88c4995c-83d8-4564-ac57-b0f6482b4d54", "sighting--f22b3ca3-cd6b-4e57-8c2f-2bd5e5920902", "sighting--2c57fb0d-038b-478f-9f4c-451207664c13", "sighting--e52c3211-c801-477e-8f0b-94f01f14dc03", "sighting--1ddba184-b02d-477e-ae4d-1a527ec2deb6", "sighting--928365f7-0bb5-427d-a653-c982a124ff8e", "sighting--0a0bf00b-7799-4eee-a582-f6315deab949", "sighting--bfc2989e-91a0-4c74-b4f5-2abcb865fce1", "sighting--3ea8657a-77c1-47c6-a994-6ed69eb7c1dd", "sighting--021a236e-8e7a-41e2-9287-1321bbdf984d", "sighting--bcafab0f-9eed-400f-99c8-c94f2e0c1936", "sighting--dd33ed9f-2cb9-4369-99df-807f71ec5264", "sighting--edaaf51f-3e01-45ac-ad28-7d803141445a", "sighting--8ec83cf5-b543-4f3a-86e8-fc1e885b6ece", "sighting--ab330ed1-3347-4674-96ea-b07dc89787d0", "sighting--56a0270c-1dd7-4d07-8081-deb435058fb7", "sighting--55464cc8-27df-4c78-abf5-e1b4f0f2eb45", "sighting--2c72ff41-c768-457e-8565-c9caf487ae7a", "sighting--8fb70336-0f14-4e7c-8579-b9d579a0ef94", "sighting--868d715e-9a47-439c-a627-2ec016a30562", "sighting--1be4e607-6834-4951-9f6f-bf6a9b63aefc", "sighting--b50b13e0-7eac-4794-9ff7-de6f846d7741", "sighting--2e9eee96-5892-4adc-8f41-dd5c45468b31", "sighting--e2ab24fd-ba04-4b0b-a2cf-3ac87495341b", "sighting--e38e5bb8-24c6-47bb-980f-5ff906ef77fd", "sighting--fe9a221d-971c-4e9d-be5d-5ec93594fc90", "sighting--2926782c-2740-415b-b901-6cdd7723a2ec", "sighting--e366369f-fce5-44c6-829f-ccdb52c97de6", "sighting--857d5380-e557-40d8-b868-4a6dc101ca75", "sighting--b06327cb-5afa-4327-9f19-5e0fa6ec09c0", "sighting--83bf0f4c-dd69-496c-a91a-5ffc9e994a04", "sighting--27d76710-4dfe-4199-85a8-d6f11412fa5c", "sighting--f08482c9-6b8f-4fe5-9aed-99d5199d6169", "sighting--8189dcbe-ae64-44c5-97ac-a336345bf356", "sighting--565a1349-cad8-4eb0-a66e-b0547906a4d4", "sighting--5ced6de7-a1ac-4af5-8747-765b164c7256", "sighting--cd32966b-e2fc-4b19-82e3-031b4cec9c3a", "sighting--2b4f1249-774d-4b62-86e5-562667df2511", "sighting--cce30d05-7d3e-49d4-9255-361e773296ec", "sighting--39e21ae8-7809-4fc6-9364-cda7da35e438", "sighting--d96fc13a-7ae4-491f-a6b4-4eba853be79f", "sighting--ec09d8c4-5684-44a9-9583-3d4715fce894", "sighting--04028c62-616d-41f8-8949-381c88108b1d", "sighting--37d4eb44-cb2f-465f-9be8-45cd81b5849f", "sighting--94aa11db-0753-4d56-9016-ac8541f372b6", "sighting--30d6c6d2-0a37-4972-802b-dbe1bdadcff7", "sighting--c24db6ac-ead9-4b02-88b9-1ac60d3e3084", "sighting--dd63e6c5-1431-40d3-8799-ab147d8340b7", "sighting--f815149c-d974-47ce-940c-f478fff23553", "sighting--f74e103b-2b0a-41fa-b218-ac247a32e517", "sighting--c8f83c8c-4c9e-42e4-a129-e7d0fc5bb92d", "sighting--a87b6aff-de9e-48e2-af65-9bf927615d21", "sighting--a2d3526f-5b94-4f52-b995-f8e189447cb3", "sighting--1aaa072c-7b91-4de9-b6a3-dfb495406597", "sighting--edd5e2aa-8bde-4c36-abb6-d320af91c111", "sighting--52934ff8-a1bf-4a1f-a3a0-8696e28cf8b0", "sighting--2c3636e8-9457-4d23-a7fc-b9bcf5ecc4fe", "sighting--fc3fe284-6b8d-4652-8ac6-ccfc180419ff", "sighting--2fc8d940-1b77-4d86-99cf-c144d00d9be9", "sighting--a87bf3a1-0eaf-4f43-a1df-3e5acf4c16f2", "sighting--af318ded-d59e-4de0-bc9b-c0a9fafefcee", "sighting--013a399a-0040-4856-bdc3-6cb0ca8035c8", "sighting--7af5cad2-2ab5-403f-8400-32e8769cf374", "sighting--d644ac31-8716-4f3a-99e9-e011b2533dcc", "sighting--bcc88523-8ce7-4fab-bb85-559e2a4a34a7", "sighting--719b673f-ffd2-4389-b8d4-e298fa5bf791", "sighting--2b539689-9640-481a-ad04-0648a1647630", "sighting--50d60a63-7d05-41f7-a098-b1fe207807f2", "sighting--63cd74c8-4eab-47dd-b9d3-3b9752122539", "sighting--99246151-f539-40dd-b4ba-56d43e4ee394", "sighting--2ee89ce3-2741-4f5f-b527-502dab276b81", "sighting--6b81308d-e40e-4a06-90f9-47a1449a8443", "sighting--d3d70e6f-c979-4c7c-973f-b55ea31f1728", "sighting--040388e1-6b1d-4aa3-9df7-324ded563b0a", "sighting--1c97a42f-9b20-44e5-8998-501a2df92a8e", "sighting--7d57eb20-b7de-44a7-98ad-7b4e80320735", "sighting--869383f5-4c66-4242-9541-2dffa0221a5f", "sighting--39d5c847-9036-433b-aaa1-d94a3fd33917", "sighting--42d6b568-968b-44b1-ac7f-70078d0fef85", "sighting--437120f7-9ee1-4aac-8ca9-6549f2914564", "sighting--8bbd03d1-dddc-497e-8fae-7c63baa2d069", "sighting--984173f1-dd52-4f0d-a6d2-0e6d28c94281", "sighting--9a4c765b-4ba9-41c5-b2ac-7852315519a1", "sighting--480037ca-bf07-4fe7-94e8-f1fb0d4ebdd1", "sighting--e8fb4b24-92d8-4a66-aff5-5cd9db0abf6b", "sighting--2589b2e6-2a30-4fc1-b5cc-c5175a7d5559", "sighting--e4613923-b2fc-45c6-a3bb-4dd95848bdf6", "sighting--25c0ce53-2aea-47c2-be2f-d6433fae89ce", "sighting--3a8ed09f-d5e1-4fc6-9d89-b205133a5e81", "sighting--8dc49e51-4522-448b-b2fc-3de409c9bd12", "sighting--9e94b52b-7ccc-4407-9a63-e1b8c5c30e92", "sighting--271afb9f-2b2a-4057-9c32-6981dd2f6b7d", "sighting--1493e204-6aef-4672-86ba-1a07e645e21a", "sighting--8578a1d3-843b-4e63-8660-953240c91b21", "sighting--279c9294-6f73-4ff3-99f8-ac0f8831afc4", "sighting--3d94efdf-a732-4df6-b213-b85edd2bedf0", "sighting--54f3d54e-d05e-4af9-a708-4bec52b35b7f", "sighting--ce057600-ec20-4325-b2a9-2d018a26f268", "sighting--8ff0d3f9-fa82-4500-8027-fc4cc282c3a2", "sighting--43acc0e6-c847-462b-8cda-79fe1e8e8529", "sighting--bda0469c-93c3-4ed5-8d9a-195041aafda0", "sighting--1b64f8f7-3f77-42cb-be72-d197cbd23086", "sighting--60769272-c698-4414-a8db-9b81749f17d8", "sighting--9187239f-8343-4c7f-ae1c-fdd6342edf30", "sighting--996f00bc-47c2-407f-8ff1-7ab1715e83a5", "sighting--e547949c-8b06-4556-adf6-52965b4cb5a2", "sighting--1934caac-d96a-42fe-b71a-71a896e2a962", "sighting--b20ef302-5118-40ad-8501-ffc5a2209192", "sighting--1444d8c5-8512-48e1-9eaa-6837a9f29d46", "sighting--33fde36d-c359-45a5-a9c6-3fc25cdc4def", "sighting--32a6fd57-2143-48af-8d18-1fd497988aeb", "sighting--b4dfb8c6-8774-472f-a590-a46d212c8074", "sighting--31f01590-d3ba-422f-9c5f-5505eac84260", "sighting--191c8087-990a-486a-8bf5-e4bc77749b07", "sighting--fac2283f-78b2-4b2a-bfe9-f75af1c1348e", "sighting--52c891b4-8a88-429a-81a3-6942a54752f9", "sighting--cc99a10d-63db-42d7-8609-27af7c09aeeb", "sighting--58bcd382-befe-4333-9268-5bf789820832", "sighting--3bd9c35c-fece-4c2b-867c-3f373e04987a", "sighting--7b5b95b1-675d-4445-a08d-f4d804632f6a", "sighting--19c1e7ae-0ec2-49ec-8e02-b02add590853", "sighting--13d14c49-ac8d-4d58-b912-1ce10796044a", "sighting--7ced9c08-1254-419e-a01d-c08a8b18b4a8", "sighting--0e4e77a1-ec6a-41e2-b513-3de082312118", "sighting--45051b17-09e5-4004-9ed8-5d422f6fd661", "sighting--0712414d-da1b-41d3-8b15-968b11e25783", "sighting--83477f79-eb3a-4d6a-a025-be18941a6a4f", "sighting--cc64dad5-5e63-4e28-84f8-af7d71cecb75", "sighting--adb451b3-0843-430b-91c2-aaf9ce5eb536", "sighting--32bcc9f3-b064-40b4-ab31-efaa42e75ae3", "sighting--46aa7b0c-c243-4dfc-981f-9606a1458a3d", "sighting--529780fc-1e73-4e54-b06d-9ade07e22605", "sighting--a00fdac3-ee27-4d60-8250-1f4fb60aec53", "sighting--c118fe4c-0ff5-4431-9983-1ed7266eb0c4", "sighting--49b2aea5-e1d9-425b-bcd6-18fc79d07b29", "sighting--7d21b6cd-a2e3-4a1c-b6df-a66fdf4640fb", "sighting--33ee4c83-b3da-433f-9c88-dff18c1a91d1", "sighting--68a642d5-d833-4f9c-9ad1-ab284fb5f199", "sighting--0c85a4a8-5365-46d4-9413-cad5aa360f73", "sighting--47d34c98-df5e-4230-9b22-aa02b76c33c0", "sighting--7ac02b3d-5e18-4241-924e-f84d7a1b3ba7", "sighting--8231da24-e72e-4e5c-b0fb-e63c049deccc", "sighting--e573df94-f11d-4a26-bc3d-89d35631b11b", "sighting--93da0e2a-63a7-4093-86da-a6139dd4bbae", "sighting--fcabf214-64a4-4443-81f6-d85834857ef4", "sighting--3831cbbd-4e20-42ee-980e-5f41278b6bd6", "sighting--28aff2d9-dad1-4083-be2e-7d00079595ac", "sighting--58b4b4fb-b151-4d08-a3cc-fbc70a2ca640", "sighting--db215acc-7fa6-4c6c-ae5a-d4de9f5e97ef", "sighting--91a9b81a-85a8-4882-bf5f-5124cc83dc01", "sighting--5223cc99-445c-4aed-937b-99fd053988cc", "sighting--0fd08d93-0c92-426e-b39f-856a98693f6e", "sighting--7cba0cb6-b351-473f-88b6-3dc04ee7650b", "sighting--7634e96c-a8fd-4ac0-8aed-ad8c9f1b4717", "sighting--2c9d0469-0eef-4968-bbf6-cc388f306ccb", "sighting--93b22c04-edf6-46cf-8856-fb100c7a43b7", "sighting--7b531f9f-a36c-458c-90ec-d778703199b4", "sighting--cf6d834d-4f43-4321-8037-b9eee7e956ff", "sighting--d32d5d99-5c29-4e0d-b326-3b79eae43385", "sighting--47040ea7-e00b-462b-8dab-1966bb97cdbc", "sighting--6b751d1d-5d05-43e8-b78b-5f805fdd4ae1", "sighting--e270860a-e77f-4dfc-94d7-4a71641dc19d", "sighting--d3c58214-89af-4e23-afcd-18b70cee4e94", "sighting--ddc96287-5621-4649-94ec-38fee13d5e72", "sighting--736b3c76-6c7b-444a-8e6b-f64e9f74e100", "sighting--f3434382-6064-471e-884c-2576aed320d4", "sighting--d7de13b9-fab3-4287-83d5-b2ab63ea22d7", "sighting--8f78b2ed-810c-4adc-bf2c-3d7d65691611", "sighting--6ee1f62c-f688-49b4-b43a-01b697cae974", "sighting--61df0717-11e1-4246-a4a1-c16ff4d0bec1", "sighting--655732d9-0e0a-48f0-8817-bfe4776164a8", "sighting--38972f15-b11e-400e-99fa-cae6490f2a6c", "sighting--67674414-b64e-40ba-b4ac-a95fd39b50cc", "sighting--86c81eae-103e-422a-88a4-2b12573f4636", "sighting--61b6a970-74b4-4933-94eb-f2c9950fdbae", "sighting--1400d298-84cb-42e7-9d1c-b6ec0d78724e", "sighting--efa4f6f1-9139-4c20-a88e-455ccd6e43dc", "sighting--e7d2c639-fee6-47db-8270-6162e6ba3302", "sighting--c3021f5e-a30d-4a4c-888b-992280a344c2", "sighting--8f7b09c9-c38f-40ab-a4d1-69117cab070d", "sighting--661d3ee8-d832-4852-89dc-078901506b37", "sighting--74b596ca-d6ee-4fd8-8c30-b672d44acdd7", "sighting--f404ccc9-40a6-47a7-867a-ee12841ae568", "sighting--4bf174ae-f860-4ef2-a7c5-b22bbcc3a026", "sighting--1a9e9d0b-5775-462c-bd00-a79a7cf7e550", "sighting--4a4c857d-95e2-47a8-8b8f-40f33735ff0a", "sighting--cea05145-471a-4f1e-a935-1e8dcbc0dc04", "sighting--5c6d11b0-d670-4417-9147-60f8d9a69a08", "sighting--a2019735-cb3a-4d8f-8cfa-234e7f098766", "sighting--7b05e5cb-ebce-4504-9a54-79b273b02bc2", "sighting--b9c4a1ff-f94f-46f4-98ac-847f61f4c581", "sighting--4f407a9c-e5ae-4cf5-99b8-cd1e3b9b60d7", "sighting--2ce28853-a2e9-4255-9402-abebf47410a5", "sighting--0d837f8e-6a68-486a-ba98-aefbe9f62c9a", "sighting--c9375da3-99a9-4fb8-96f1-28ba45b7301a", "sighting--f41ee5a1-2734-4cfd-9059-0479085ed958", "sighting--f909b92f-b0a6-473d-a7ac-4ac60d5fad2f", "sighting--141a4ea8-8f5c-482e-bdcf-a2597fe4f648", "sighting--9923ada5-2ad3-4b97-a946-9c3be33a0098", "sighting--c8afcfaf-8efd-41e3-8fb4-82ff39260cdf", "sighting--284b5f7f-dd42-48f6-a0d3-31538fa75a88", "sighting--34a9c636-3f0a-445e-9737-8c185e98e13e", "sighting--7124592c-faf5-4872-85fb-0d73beaccdc8", "sighting--9e68187b-fe96-4a2e-af2e-c3f7e7a324a5", "sighting--59548662-3722-400e-b699-5cc841cd962b", "sighting--08a0ac4a-d058-469a-bc5e-693b13272fa9", "sighting--f47ea68b-6424-4a8b-9568-dc7bb95dce59", "sighting--4e9cfebd-a38c-4e74-a04e-c2fe877bf7ca", "sighting--98f0022c-aaa7-445d-be72-21ff70459222", "sighting--ce3155f5-a6f8-4948-a835-72e762840cb9", "sighting--e0dfa88d-ac95-4f85-877c-3e2bc04fa09b", "sighting--e6fb1c9e-2dc7-4c74-84c1-da07b0f01eaa", "sighting--30102829-666a-4fab-add7-3ae3c5d558ea", "sighting--fde19fdb-c900-4a6b-a6e7-e8729866e3fa", "sighting--9406b883-8866-4679-8761-98fd300027d0", "sighting--9820eaeb-8173-4d5e-9c66-07b7c9b21b26", "sighting--aa36f2de-7502-44eb-9c03-a51a4f606c7b", "sighting--d64afbb4-9cc5-41e6-b820-1f35e818e3a0", "sighting--d60da8b1-68f9-4b61-8fb3-3f7527c93771", "sighting--772ccd9d-9ada-4478-a65e-fc5e6fbf6a67", "sighting--39b8120f-c8f2-4992-b23e-65aefab33a8a", "sighting--1c4adb95-6f1b-49a6-b434-2ae36b945c4d", "sighting--2f941a6e-f377-4082-870c-5976979afe90", "sighting--ac6b8aeb-597c-46dc-95ae-5cf96d09f88b", "sighting--e2f56f6e-f60f-4306-bc4c-4ec9f04cd0d8", "sighting--105f5265-684e-45e0-b9d0-b6302799bcca", "sighting--910d317c-4a93-4988-b0b1-e80c5c711ebd", "sighting--c614b8fa-e2e4-42bc-810b-ccbc612e4338", "sighting--406bab16-38b1-4bd4-9f6c-64c4a92b208d", "sighting--0d6233a9-9452-4433-8afd-1687cc16fab9", "sighting--d73b1f44-389f-48e1-bc6e-74fdc0959c8b", "sighting--29a295b2-9712-4fb0-b8ad-aa9104e0d00e", "sighting--8892b867-df4b-41be-ba0c-96fa70a03316", "sighting--f81d4931-4908-4fdb-9128-19fb31b530e8", "sighting--7b6e8ff1-fcb5-42d6-b90e-3f6951ba6f4b", "sighting--94f8e827-9706-497f-b5fc-20794baa7890", "sighting--fc6d9ffc-bb69-492e-bf64-cfb1e77a7cdc", "sighting--f08f82e3-7b2c-4b14-b3c3-add99520ba01", "sighting--9a88a482-4712-4d9b-afad-ba8e82a10bf0", "sighting--5ae7490d-4c94-4b3f-8789-c74908643703", "sighting--24750a7b-9ae6-4905-8046-829a263ecd2d", "sighting--aa74e445-f196-47e7-8d41-80f3354d32fd", "sighting--3de8df77-cd2b-4d4a-8ec6-a550d4867b4a", "sighting--1f6f7625-c3b2-4747-8f38-56caa821a336", "sighting--ccddc374-047e-46a1-a883-a1c2f2ebc040", "sighting--6a4517ec-a508-4aad-8f25-b452159bb2c8", "sighting--36bb116e-35d0-4887-b020-9c5115398164", "sighting--df4d6f05-50e0-46d4-9dc0-ca9d1eee5985", "sighting--ce801bb5-74a1-438b-8d48-e00da161624c", "sighting--8a633d9d-99ca-4553-b502-4131ab164d78", "sighting--32244394-6832-4dbc-ad58-6036d07eeef7", "sighting--1ac540d1-7f7f-4223-aabb-a8238f31a93d", "sighting--0abd7626-d333-4ff1-9be9-d0aba3fe495d", "sighting--0e1cd216-8b7b-40cc-9706-88d988d4e55c", "sighting--02b689d2-0841-4d84-9a70-695d4d0b32c1", "sighting--db2be3ef-5610-4e31-a162-a95182ea129d", "sighting--246e7a02-241f-4199-b2a2-950168dcab89", "sighting--1b03583b-6b68-4d39-b73d-cb340a52d512", "sighting--95c5292d-84d9-4a24-b9f0-4627874a3d32", "sighting--4a3668ad-4efc-493a-afa0-ea5f4375565d", "sighting--2a2f80de-7102-46c4-ab18-54df24680706", "sighting--5fff83e0-443d-46a3-8f2e-d176f8c23ccf", "sighting--93650459-5489-44bd-b654-2c96ae54b660", "sighting--8eb47ad8-9393-4b2a-9e74-3e91dd63e421", "sighting--90ae169b-c60f-439c-bd1a-127ee0188db7", "sighting--d16bab03-50a6-4982-b4bd-d05710512bfc", "sighting--1e1cd928-09d6-4e6b-a901-cb7188ff3998", "sighting--ae45649e-63a7-4ffb-a9db-313e19a60073", "sighting--ef55d30f-1b99-4a38-ac35-cbceef0344c1", "sighting--b22f9a7e-801c-493e-b3ec-fd46d9e1bd99", "sighting--baaf2a83-3b40-49c3-ad5f-5e1171dc29a9", "sighting--113535e6-5ba0-46f7-8c31-ad072056d354", "sighting--d8c9a588-fbc8-4a4f-9cb6-da145f052bc5", "sighting--4a8f6afa-401d-4969-9e58-e79e866aa767", "sighting--f73879fe-5196-454b-a0c7-b6271fde1992", "sighting--47dcede0-8656-4009-9178-e61020b7d2c8", "sighting--54a0a773-5599-456d-8a7d-ddd3f03822ce", "sighting--90bf1809-2909-47c2-9fd8-c2cd64ced900", "sighting--76fc1a68-7607-4ca0-9f12-5ee686791638", "sighting--2498d226-32e3-4401-9b84-70f1b6f60e86", "sighting--b47fe600-8593-40ff-b761-2c30b1fcd548", "sighting--14472657-5779-42bc-aed2-d39ae7984027", "sighting--bf3a69b2-eb14-4d34-a47a-1107506085a2", "sighting--52d3478f-99e3-4210-8eef-8b281a8ce694", "sighting--e4c3c1c1-8678-4c05-a9be-076ba6bd5501", "sighting--9238914e-75cb-4b51-a202-d51e76039e6c", "sighting--f4d210c2-c542-4d87-aa0c-08f7768bac15", "sighting--d870a446-e5a7-45bb-a231-92e93612f4b0", "sighting--b297c903-2b8e-45fc-b5b0-10d8ead659c1", "sighting--7e55ec7c-eb2d-43ac-a41f-59f76e489867", "sighting--bf9cf750-044e-4d7c-83b6-c68e2aea29f3", "sighting--aedb2ae6-1cc6-46d4-865f-11f1f3483541", "sighting--c7163183-3c31-438e-ba0c-efc882d4da13", "sighting--7de0af86-5346-4f7b-8872-a57f1cce9c74", "sighting--2164a1ef-47b4-4a6e-baf2-54de5cb230ad", "sighting--39a4902c-1342-4455-b6c3-76754ec773cb", "sighting--e259aab2-8291-4710-9f8c-4a4c8ce647e0", "sighting--b70368d6-4e54-4c62-8dfb-68f69af95c26", "sighting--2a06f1ed-38d0-47da-9afa-24b13745c279", "sighting--a5086bfd-eac6-4405-b074-942901eb8dad", "sighting--f6430af7-48a6-43e4-a47e-c6c22ceca5cb", "sighting--e626b6d9-7bf6-4ca5-b800-77ef108ddffe", "sighting--8c3db99a-1905-40f9-a9a2-01a4a7212390", "sighting--fad4c2a8-9612-4182-a462-6dfdc9499f39", "sighting--526cc2ca-174c-468f-bdc4-e2b1da635ce1", "sighting--d28b0778-f1a2-46ab-8e95-6157ee58048a", "sighting--f3d64aa6-f21a-4577-8458-3d5fec49df1e", "sighting--5aa7bffa-16fa-4b71-908a-86bef365e2dc", "sighting--118fafa0-a480-495b-abbb-3017e7edcaf9", "sighting--5a778bd0-56d5-489b-b484-b705eb5e466f", "sighting--b4f888bf-41c4-43c0-8d7f-28aefea98b92", "sighting--7d222573-4a36-4eb1-9c61-e02a3e85cee9", "sighting--141a4556-ed31-41a4-947b-ca6dc3c26683", "sighting--9f77ce09-4e6f-4f24-8c97-893b02525c78", "sighting--44c559a3-584d-49fa-ac7d-aa122b3de1d7", "sighting--cec2c581-49fe-48b0-8fc0-2328809c20da", "sighting--ab803be9-34f3-41b2-a2b4-8c669f501c67", "sighting--f59d8ebe-36b7-4091-936d-ad5071e7b93d", "sighting--97eb46c0-1142-477f-8ade-d30d0947474b", "sighting--bb45d06b-66c7-44a4-80c7-bb4b70126b80", "sighting--ab14eb09-bb54-42be-b3c8-69a31917b509", "sighting--4176721f-fa40-431c-865b-9291504ccc9d", "sighting--272a0c3e-ef6c-4f28-a2be-f08f8e5f69dd", "sighting--0c240061-c7fa-4622-a8e9-b2ae2f86ba8e", "sighting--84ce0151-1e50-42e1-a075-183ba8fb3810", "sighting--60bc27c8-3503-4583-a2b9-6b7cd696136c", "sighting--5bef2fdb-9321-4b08-a29a-d18f04c5da4b", "sighting--31f86e49-0d38-47f7-9227-a1e3c645aeab", "sighting--188f14a5-e589-494f-9dde-8d1faef1443d", "sighting--a5129eab-06d1-43c4-8050-45f3bdc33bc6", "sighting--88a0c0a8-7153-4dc9-8f0b-71edc518288f", "sighting--7dc2a9e9-8ccc-4c7c-908c-c5e78f2fb11a", "sighting--a57d53e0-33aa-4624-b276-f9b5f56a575e", "sighting--7ecdfcfd-37bd-43a1-a892-3e8f45e6e5a2", "sighting--29a043cf-85d5-4cae-973e-ab2b32a3585c", "sighting--03001c81-582c-4f65-865b-d6c661c7173f", "sighting--9be7d9d1-eb1f-41dd-9b6d-997ade1629c8", "sighting--e4a73401-e3a1-4c4f-a99b-21767dcf9d2f", "sighting--c5e37515-4684-4a48-a70d-cb1ab9346d10", "sighting--cafacfd3-9c2f-4b63-81d4-0986ecfc30dd", "sighting--05a1c676-4a69-4102-88f0-d2da362315cc", "sighting--ef0769db-b765-4f92-b7b2-d773962435dd", "sighting--99f79276-901c-48cd-a04f-faa172733bb3", "sighting--8eaff813-5b4e-415d-b806-7e4e846abe7e", "sighting--65186562-b7ab-4825-b622-d90372dbecbc", "sighting--c9a2e240-087e-4217-9a71-c8e159f0a030", "sighting--cdfb81dd-d24e-4771-995f-438ac13993dd", "sighting--301fa78c-726f-4417-a844-481d1cd3742a", "sighting--8cd7ea94-386a-4fa4-908c-c79c01e43a23", "sighting--7974e4a6-b590-4feb-8522-250b2c341907", "sighting--b36227ef-c99c-421f-9211-8f6899cab052", "sighting--eb8d840e-03af-43ed-a2a8-e730cf5e6ba0", "sighting--36b58969-8ab4-4294-87de-077f1af4a419", "sighting--e7637c54-690b-4073-b1e3-3088d44591a3", "sighting--05e4a8c6-dd56-42cc-8b67-27449a6b7d81", "sighting--8f592756-b131-4e7c-9fe3-3152299a4b6e", "sighting--6247f561-f4f3-43d2-b328-91a6446378d2", "sighting--8281ade5-f054-40e8-afab-990c6c9ac9fc", "sighting--e0419706-c05c-4719-ad4f-fcd2e115a323", "sighting--ba8288c9-5d4e-49b2-a8be-5303b5a24359", "sighting--710f8e0a-acd8-4b11-91f5-0ff6bceebc11", "sighting--78ff6b22-1e59-4cbe-a59b-1236c843228c", "sighting--450a3d7a-b7d8-4e21-b1d4-1a54d2fbd397", "sighting--9a5ba514-123d-48b8-b2c2-54392ddc19c3", "sighting--eb5b5140-6103-4574-9e3c-a7602479b291", "sighting--8c7ba200-f1a9-4860-98b5-fde6cf1bbab5", "sighting--fa073e1f-51ba-4a20-92bd-b1aa5a8a4830", "sighting--e362aff2-fa33-4d39-85cb-20a2eb2a9b6f", "sighting--354f321d-b71d-40d2-8f4f-5758d2abaa52", "sighting--0221c2cd-6901-4f3d-8829-166db2ef799e", "sighting--79ce9850-9419-4ad5-adff-2b289657254b", "sighting--36f425a1-7f56-43e9-8d3b-8cb0b3065d0a", "sighting--7230c020-0e88-4097-a605-6d7a40a0c201", "sighting--b0d6c219-f1f6-4ef5-978d-6ef6e87822bb", "sighting--dc8b1bf9-3193-48f4-a2ae-fd7d3c31ccf1", "sighting--74b89337-78d2-48d8-8013-1aab68b0fade", "sighting--4d7e16cd-bafc-4bad-806e-3f0185649166", "sighting--c6c2b112-8cac-40f6-b46c-4f9a7afd8b13", "sighting--86c17562-2d43-499b-ad6e-4d1dd2d04408", "sighting--bad27354-237b-41ef-8ed9-3de7b686f236", "sighting--ccd655aa-d31b-4be1-a58c-c422d7587b5d", "sighting--bad61c75-8338-45ab-ac10-ac1ee48a7151", "sighting--a0f6c7ce-ed26-42b5-9b51-a64e26f65391", "sighting--3ebe1560-1d66-4291-80a4-97e1df827d8c", "sighting--6cdd473f-7e76-4e0e-b8ac-8732e06d8e03", "sighting--5cad6d82-455e-496b-a315-7e5273f2a251", "sighting--cdbc8bc3-dc11-432a-88c6-79a746833ff9", "sighting--2d56d985-f025-40a7-9b91-b009a264382e", "sighting--7948fb22-1175-46e7-9345-660d2b3c524e", "sighting--794fbc14-7f69-46d9-ba23-acf58eb44a5e", "sighting--02d3f27e-1996-43c7-a03d-80974b6a37c0", "sighting--e09d5df7-2ec4-4863-af74-a3b230313304", "sighting--6213fb8f-b253-4b5f-ad77-cac0f2f445aa", "sighting--bc7ea7e5-b543-47e6-ae2c-3dcfb591ea76", "sighting--002acecf-4527-4f6f-8787-d5d7ca864d85", "sighting--93c8ed05-bc55-4edf-b1fd-56a02b316485", "sighting--27fccfe4-f750-460b-839f-60880861239b", "sighting--f0f365c4-26f1-43ba-a100-77f377cf7423", "sighting--f0c23f15-1005-4647-bde5-e044fac042cb", "sighting--9790d07f-01d5-44f3-bf33-f253dd978a55", "sighting--b3fc7281-2d27-452a-a1f0-6cf51c7e62f6", "sighting--ecf1d444-4ab3-4ecf-82f8-d3730a6fff77", "sighting--a3ac2aa2-93e3-4ef2-8169-c95cca511780", "sighting--30185f3d-8ac2-405d-8f26-ebe4d15636f3", "sighting--a6855f97-8039-4182-b2d9-073136bb5109", "sighting--e4da65f7-ef3e-406f-8da5-f085c15883ed", "sighting--4e290ee3-c2bb-40d8-a2c2-51a512b644e9", "sighting--2d9cbebd-6a82-4e2b-b4ae-694e16d74d0e", "sighting--52a66282-12ae-4148-8b7d-c5780c253fea", "sighting--4220bf8f-24bb-438b-a06c-88de5412837b", "sighting--bc281005-b4b1-4c11-af64-32b9b8fd7b13", "sighting--888a6733-45c3-4075-bdde-010d133f32ad", "sighting--3670acf1-0b83-4dc5-919d-559d511c9647", "sighting--b978d492-fe33-4891-8d8b-3ab8f8e362ad", "sighting--4a7c3c67-5e08-4ea8-9f45-880de6680007", "sighting--7bda2813-c017-430f-b0e0-707898a791d7", "sighting--de12b22b-1a58-4aca-b646-43ec957a744e", "sighting--ada07a20-c5a2-44b9-b1b6-95c8acf63193", "sighting--6da28578-01d6-467b-a172-665b06b036f2", "sighting--26a4923a-a546-4931-a4c3-234fd99b64cc", "sighting--9c4fe0b0-566d-4092-9a25-0e8dc90f9f05", "sighting--a6f54adb-c3e7-4110-8247-6d1d6db2a89c", "sighting--db2f89cd-abb2-47c8-89dd-75a3ecf35fea", "sighting--74643743-2555-4ce6-b432-d955fb165682", "sighting--97ad9759-0f64-4dec-b7d9-ebe43351ed50", "sighting--ec64e795-dd03-4934-988e-54e4798ee8f8", "sighting--e23ad53a-1812-41f6-a179-2ad76b1bdcdb", "sighting--f1dfb5d2-8569-430a-b2ac-45f357ccc679", "sighting--6f2436c8-6f96-47ba-b895-d554e6be16be", "sighting--76866851-3c8e-4f1a-abd3-fac6cf7ef018", "sighting--aac1d6f3-2009-4950-9773-483bec8f7924", "sighting--62f8f711-ca07-4d43-9744-b6f984267422", "sighting--8361ddad-f62a-446b-a288-4f4a03fc52a4", "sighting--5c118839-a714-497e-b40d-129dfc582cd1", "sighting--94be2297-a280-4195-9229-2020e75779b4", "sighting--87384d32-148e-4d72-83b1-105c35ef96da", "sighting--ccb25ba8-1dcb-4c89-951d-62c7443ff50c", "sighting--d2ff5618-b2d6-44ac-9096-13e6329b2e45", "sighting--c42da2f4-19a4-4ce3-95f6-da58c6eb242b", "sighting--ecce8059-f2d0-444d-b40d-ab8720baac1a", "sighting--9146bdc2-c740-4858-bd0c-88d95966dbef", "sighting--1754b044-8ed1-481f-807d-1024e8e3980e", "sighting--e51de294-f7fa-4b52-9349-73fbe1ae12a2", "sighting--aac723fe-efe2-4da1-95fd-c69592f4f01d", "sighting--2361241f-1776-46ff-9fa0-c8de6c1a5f0a", "sighting--fb6f9724-63cd-499f-b093-5108ede95c96", "sighting--b7807163-3ec9-455a-82cc-0c9c37da5044", "sighting--41dbf38f-0e99-448a-8561-97c1ab505ee8", "sighting--e63d825c-d6b2-4028-b3e1-93e653bc791d", "sighting--4cb1e213-5ff0-4567-b863-854da1a81f59", "sighting--54f575c9-569d-4d3d-91af-bbfbb7c38c25", "sighting--794ea03a-4063-4d47-bdab-4a75d6bcc9d6", "sighting--286794c0-ded9-4669-b76c-d22a4563bf7b", "sighting--01073d6c-241d-47ba-b7c1-f23feb551976", "sighting--cdad9b16-6cdd-464d-af42-9280bcf28005", "sighting--2f986480-f66d-4c7c-890f-ba4c9e30372d", "sighting--4cc87475-6cf7-4c3f-94ca-59b651a88312", "sighting--13b57f38-6cee-44da-be2c-74ece58eb8ff", "sighting--b7b147ec-f342-47f5-b80a-c4a1a11beed3", "sighting--7d564625-171a-4d53-958c-c0da573cd434", "sighting--0ba1db39-9595-4c07-ab1a-c4474b1bac38", "sighting--a7cabfcf-a870-405e-91d1-cfbb81febdab", "sighting--93c04345-7f19-403f-8e6e-b13ab55724cd", "sighting--25e7de80-0639-4969-a847-124984df3278", "sighting--2111f60d-e745-412f-a124-c47a67096130", "sighting--f1dbeb41-1675-48de-b1fd-b76006f5501f", "sighting--cb687017-78b0-4431-9e79-309330b413d3", "sighting--44540620-e878-46d9-807a-e03c2eafd684", "sighting--099c301f-f4a1-4393-8565-66207e57c3be", "sighting--27ff1e8b-1bf0-4e81-8dac-720bfee544f4", "sighting--72c02897-5f1d-4797-b9da-926547230f96", "sighting--e32a963a-9ea8-4f82-bb82-05f1d52466a0", "sighting--0858f670-e314-47fc-9e51-ae3796d4568a", "sighting--5150d2e8-c641-40a9-8faf-da53f4f30cb1", "sighting--3c9666ae-e90e-4d56-a772-90a8797e0639", "sighting--57947e4d-2b38-4139-a7e6-ccb346cf3d2f", "sighting--ce5d9171-8395-49b9-bf22-600035d945eb", "sighting--85d81199-8554-40a4-b2c6-8e0b70c26685", "sighting--be6f4320-ba36-4f38-9103-97686521ce2b", "sighting--63340057-1b98-417b-a123-30972b39c750", "sighting--e334641a-f705-49f8-93f3-e3054243e7a1", "sighting--82408a0e-9d07-4534-88d7-44a7e752947a", "sighting--322e7eb7-e7d6-4044-a0ea-102a324f4fed", "sighting--3a18e47e-0c36-45ff-bc6e-c0d2dcc7b107", "sighting--93f0d6f5-e8e3-4c7d-9311-e047bf968ec0", "sighting--0f4c0a3e-5506-4e80-91fa-15f0493fcac0", "sighting--75f09310-5976-429b-9da6-724130cefa6a", "sighting--91b34cc8-da5a-4238-8014-f49bc8fd92d5", "sighting--5f6e23df-ef13-412c-b4a5-cc11fe1dd6a3", "sighting--a5a3b0b3-727a-4d57-9976-4b0c4a810528", "sighting--84b17421-3a90-4388-b006-f70f9edc1342", "sighting--d9ad336e-196b-4afa-ac21-1a1002ebf0bf", "sighting--698eef61-eb8d-462c-9ba8-3c3c6a1c540e", "sighting--5ba3aa93-d184-46e2-9a69-793f1a37b22c", "sighting--6d4a39d8-27fb-455d-a2fc-350008924d7a", "sighting--3a2e6ef9-ba93-4af8-b87c-edc401f4ad5a", "sighting--10a48a9c-13f7-4c9a-9c3c-7a15d3c34880", "sighting--22d8cc79-c696-410f-91f2-1cba9d51c359", "sighting--bf17a0d5-6d17-415f-bc29-7dd58d856bd0", "sighting--aab2cd42-9f1f-4f12-a21d-58fdfa6040dc", "sighting--9734906f-b0c0-4fa3-9a0e-6930c1c55e2b", "sighting--082b622d-762f-4f88-8e20-95682877bbc5", "sighting--408cc3f4-e518-43ed-ab06-95678e7a73ea", "sighting--4339a966-b02b-4454-b8f8-df20015bbac1", "sighting--26d79cdf-72f7-4cb8-ba27-89257a955f4a", "sighting--7053aa05-4a5a-43f4-876a-d00015644bbc", "sighting--c696a693-81e4-4cb4-af13-9796113edfe6", "sighting--2b1050c8-1274-4917-abaf-aea5ab01e486", "sighting--2114df95-80f6-4a24-a8a9-206325ad75aa", "sighting--fe554a8c-e3a1-4e38-92ec-167cbdd12a56", "sighting--a5cec121-0e13-4ecb-9449-5c7343aeeef8", "sighting--76968b8a-8573-4e14-b4ff-5851095956df", "sighting--e7ca8521-4e61-46e6-8862-dd78a3816dea", "sighting--a449bb5e-5792-47b9-af77-a9a53e625c8b", "sighting--9d51fbf6-bbe4-4db4-a941-d661329813b9", "sighting--da4a70fd-5f76-4d38-8273-fbda90d4094c", "sighting--4f3b7f7f-13c7-462e-8718-9d271305f435", "sighting--a114a2d6-b126-4b70-97c2-472b3c37f5e9", "sighting--6ca841bc-17cf-4fd7-8659-35707327434e", "sighting--8abbfad5-059b-4c86-baa5-f3e3c73dd992", "sighting--5afe2efe-db74-40ea-8cd8-50cb9c80e2f8", "sighting--17511859-d14f-47e8-9ad0-74693adad888", "sighting--a548c403-504d-410b-a84e-85dc91adda3a", "sighting--68d58efc-84aa-4ad0-a825-a4ab9e321a8f", "sighting--a57cd8e7-9234-49b4-8f17-07b113e8827e", "sighting--c844328c-ee7b-4f33-91ef-feb0029efe8a", "sighting--66f6ad57-7284-4106-966d-2415ffab3e04", "sighting--c6416df1-58ac-468a-a124-91b5e345cc5b", "sighting--8721e152-e2f2-4573-9a03-a5db56db90aa", "sighting--45ea2332-34ad-4c91-990b-705d20ef7eec", "sighting--e516bb7e-8727-4253-8506-ad4dd47d5f79", "sighting--7d73f623-68d7-43b0-a607-e6d95ab328ea", "sighting--c9962046-6337-4c21-bb43-0d988d5349cf", "sighting--8455be11-da73-40e2-87e3-e69e947aec52", "sighting--87e41f1c-9fe8-4870-8b39-094b11b1cc50", "sighting--2a630514-379c-4253-b971-88884f744f0b", "sighting--136eaf36-f31c-492e-b3bb-dd96b5584b89", "sighting--f4fa31a7-a012-420d-bca6-6025c48f5082", "sighting--0f5503ec-de57-4ee3-93ae-2e2788ccf46e", "sighting--9307fc65-866d-4618-86f9-5938390cea39", "sighting--b2fde6b7-7ab2-47bd-a407-e2fc0aeb95a6", "sighting--3f858503-5cb0-4aba-9fa2-dafc7a7c45b6", "sighting--09313570-4139-42b8-a865-0fbf371259dd", "sighting--03970708-233b-4bd8-892f-3c6345c8a0d0", "sighting--1aa43de8-bcd6-4f2f-b07c-d1fb5800aa8f", "sighting--a9e1990b-db0b-4f63-8738-6fcd29fc7d07", "sighting--c31cd151-54dc-4103-a6b7-307b37f57ece", "sighting--b5bb7f74-bee8-44fe-8277-554e584eabb6", "sighting--b62a9f48-f633-45ee-bef2-a24a4863136d", "sighting--f62d097b-75a6-40ce-a32d-0ed656e25fd1", "sighting--3613a852-0f4d-4187-a14a-294470bfabd6", "sighting--5b33cd06-b295-4003-9197-c17fca090f65", "sighting--e63f2232-100f-4fda-b160-25a3fd60d522", "sighting--69b46f48-c5a4-4854-af1a-eb8eec4d1f79", "sighting--726e9e2b-3750-44af-921c-792b31ec5848", "sighting--89db7a56-0766-4a90-9375-2d39a32d7432", "sighting--591388c1-1f75-41d2-ac6f-847c41e748cc", "sighting--7bdf280f-2d4e-498a-ac36-ca7087e8dfd4", "sighting--dea27147-a015-4264-94de-fdc7066879da", "sighting--c7fc71fd-3fcb-41f8-ae74-01ec423007a9", "sighting--e15e7a48-2a81-4a9e-be7b-662fd3198ef6", "sighting--74eeb469-9157-47b5-93a7-795eb0b61928", "sighting--6a9181bf-7588-40e1-9023-4e8e9d67a11e", "sighting--e66e2576-a966-498a-a4f1-eb699b7b9976", "sighting--ab858c92-0947-4bf3-97ca-c55711f11eb2", "sighting--41c920f4-5d00-42e3-bf62-a51d14ae60e2", "sighting--6d53a541-8ecf-4692-acc1-bcb821c04310", "sighting--b17fb87d-3a8c-4f1d-83e0-1c73d8fa95ab", "sighting--6ff52fb1-da23-4fbf-83e1-34d7d092ed82", "sighting--1bd7356c-6415-47c0-9490-abca8d4b6ddf", "sighting--6c7dd62e-fc20-4857-ba31-3a694f0dc02b", "sighting--a7576d1e-2579-49af-bf20-becf25a7a2cb", "sighting--1d70b566-947f-4069-81e0-1aec55040365", "sighting--c8932a54-de1f-4d54-86af-4d66ae09e924", "sighting--8bf10987-fdf7-4704-b94a-30a9abdab395", "sighting--3d3bba94-db75-4da3-b693-52a0a0a46df9", "sighting--b6dc490b-46bc-4c01-8db0-dc7dbb2baff2", "sighting--407dff44-3a63-4a08-9a8d-cd79c5e30008", "sighting--ea3eade3-ac8f-493a-bf68-17fb4ce98aa8", "sighting--93a73ac6-0109-4d3a-8f4f-6e204f6ee95e", "sighting--9609503c-7872-4f8b-afb1-34eb2da65ba0", "sighting--cbfc1f41-5721-47b7-b598-95569f2b4a7c", "sighting--328c29b5-876c-4409-a3ed-2189659b3bda", "sighting--fbdb0e53-e72b-4633-b19a-36b980167d6f", "sighting--404a3ae2-337b-48d4-8be4-c1f51c97e946", "sighting--e82ad7b2-57bd-4c53-aa67-0f95d49ed108", "sighting--5231ef09-103d-4d75-8ed5-b2e89cc812d2", "sighting--732cc2db-0470-4342-baf0-a6ca3efd77ed", "sighting--42d432ca-e1fe-4ef5-a677-40853ab98fd8", "sighting--d9a7e51e-0a87-4a94-8ecb-e628b58a4535", "sighting--dc3898e5-7ef3-4daa-ad01-04b00054885a", "sighting--70194144-9081-4cfd-902a-5a7248d83b48", "sighting--0576a9f5-1176-4123-8e58-fbfce8674f26", "sighting--90479cd2-9719-4752-a169-c73df609225d", "sighting--27f4892b-f517-4274-94a3-8c3136f6a155", "sighting--67dc0dc7-4004-4787-8d56-8eb5954d334f", "sighting--85a24247-1ed5-4a83-8725-0a5f655a9045", "sighting--1740553a-1ba6-4337-8126-a1401569220a", "sighting--3b00ce48-a339-41b6-92c6-cab19febbe25", "sighting--edc08fd2-f815-4b51-8887-95e5e300628c", "sighting--eef15a08-761d-406e-b68e-6fd7f4cc2a70", "sighting--a3a9b808-63ed-41bf-a57d-c6aa8c4ef3c2", "sighting--cb461431-a418-4cc3-b72a-b128db35e814", "sighting--0dfa4425-66d9-42c9-a2a5-e47e726dda02", "sighting--bffb77a6-0d49-459f-8b60-ade8cdd70224", "sighting--31bd2572-ed3d-4223-bbc2-4cdbd2122193", "sighting--958914d7-41b4-42cb-9af2-dfc426dbee42", "sighting--954f4a3d-dd28-4be9-a2d6-d6134fece076", "sighting--f0112759-6bf5-4a9f-a64d-f71544129160", "sighting--8b58f6ff-4a16-4504-a222-c46f5ab3f77c", "sighting--ec17b2f1-90cb-4a2b-8a01-370b68230def", "sighting--2997bd2a-ba5c-472c-b703-ee05d7cbed52", "sighting--82472020-02d9-49c7-b53c-f4e92c8c3dbc", "sighting--e324baaa-b6a2-47a4-bff9-ab42c131819c", "sighting--5f319c75-8bac-47c7-8458-e901f5a0268b", "sighting--530298a0-6172-40d9-a3d4-06b27c5e5735", "sighting--1de30a88-5f41-4c83-85f3-54f0ddfcf972", "sighting--8e3b9fac-a44c-4d3a-b1f9-150e62d868ed", "sighting--62232369-a11a-45f5-866f-e2a4c8cbcab8", "sighting--fa1bbd44-1bbf-48e2-b5e2-d24473de355d", "sighting--0435d340-fb52-4c4b-9973-3195a420040a", "sighting--e0c7358f-d90a-42d9-a76d-4f32987e17c8", "sighting--49478d75-6237-49bb-a1b4-5113aede2fa1", "sighting--844ee250-153d-41ff-b4bc-6c783bd8c632", "sighting--2643ae2a-2a43-43de-be11-bcdbad70f341", "sighting--eb24260a-3d5c-4806-8d96-4ece3e7ce3f8", "sighting--f0f43015-91a5-4d61-a93a-4709fedd8106", "sighting--d1d2a530-790b-4879-9a04-b613f19e4864", "sighting--0b75e531-811d-4573-b063-cbbc5d63a30e", "sighting--800be272-551e-4857-a97e-2e3fb8c9afa0", "sighting--25096298-8fa1-4678-b4d6-0c29fc2889c1", "sighting--3c5641e9-e38f-4d4c-a776-1319b7d88cc0", "sighting--fbd514a5-2fdb-4e08-a7bf-c58261e41a18", "sighting--78b5aee4-8702-42f8-8a31-d0be5b6f616f", "sighting--6ce21f93-985c-472d-8374-d37c4d1fba8e", "sighting--dea76e72-74db-48fa-ae2a-dc0358a48b65", "sighting--73da87de-b612-4d3e-bc29-6fd6d484fbdf", "sighting--a3f13b2c-3353-49df-bea1-7696324225de", "sighting--823eeb35-056e-450f-abab-d0de15408365", "sighting--de807588-7a3d-469a-a663-a90c31f86f7c", "sighting--9c261405-8b4d-4d0d-8a2e-9ab0b9e2a3f6", "sighting--878c55e1-b881-48ab-9e97-296b0ced85da", "sighting--112afbf0-1fa8-4dd6-923e-c3c8636beb36", "sighting--aeb83d8c-ba1b-4cc7-bb63-44d4025f92e0", "sighting--97e82ba2-7329-459f-9eb6-d4a8a07014ad", "sighting--2811389f-294c-4608-9b78-c26ef3bd74fa", "sighting--ba84692f-ec6c-413a-a8bc-012685ed1944", "sighting--559991c8-a18e-4c25-92a4-6646a303b2a0", "sighting--25c1a90d-95cd-44ce-9c2c-7a5cc1173f8e", "sighting--167b8bfe-45b0-4ac8-9fa4-61620ef354e5", "sighting--01ed4b97-4ba7-4731-8ba7-cb590b307149", "sighting--6104325b-2d50-493b-981a-70808055d8e4", "sighting--bccd2bce-b9b6-4a25-92b2-1a741b628a9a", "sighting--7ff5f97f-b0df-47f2-9299-e793f4add5e6", "sighting--80f4667e-3e61-4d8c-b014-0e9780060307", "sighting--24b5de6f-bdb6-4d89-844b-8026073701e1", "sighting--0581a960-181b-4494-bc0d-4700fb6a421e", "sighting--dc85b34f-3658-4e32-a924-7a6591ff4b40", "sighting--9660eb32-2b88-45c1-9580-234f5ef0a73b", "sighting--49bdbfb9-4da1-40a5-9670-b666adb2cf2f", "sighting--e35cf64b-8903-4a95-981e-0b4c9bfbb897", "sighting--1e274c2c-7eb2-4b6f-9e6c-1368f1f9b41a", "sighting--7d4b9231-9b84-46aa-a209-27b70edf367e", "sighting--4b27d8a8-4004-463c-ae01-18a3b33ec30d", "sighting--acfe914c-5a4c-463d-9480-4473f6ea3951", "sighting--b6c75b4a-3493-4c2e-b74d-a652fa61c2c0", "sighting--a6515dc6-d4ef-4b3d-b9cd-1e640e4dc707", "sighting--3c2515e4-ef9a-4a6f-aae7-b4bb0c4f2455", "sighting--ea705d97-6e98-4cac-a8a5-2cd9274a3281", "sighting--0e5ec59e-ee40-49c8-8670-8be359dc63f9", "sighting--ea3bf60d-4496-41ac-90b1-60b7395598c6", "sighting--8eae7d1b-4f0a-4973-ae9e-0a9c1c880d7c", "sighting--5e4d6ccf-5d6d-4061-9a27-550962a78947", "sighting--4f204136-bd0f-4855-a048-220919d40c09", "sighting--d8ba64f5-36d0-4d7d-934c-353bce90e57f", "sighting--7a534acf-d3e7-4edf-86b1-39d83b0c1c2a", "sighting--75c3bd79-d965-41da-841b-96acbf1f07b9", "sighting--f22d1c28-4c85-4a4c-9111-21b663dba246", "sighting--8b448257-c18b-464c-8012-ad365d04f00e", "sighting--a3f80ba8-0142-4ef5-8571-879156217280", "sighting--224fea4e-5141-4d4a-8ad8-3b26d555e45a", "sighting--effe4dc2-89d6-410c-9f77-c1497d2593d0", "sighting--ebdea9d4-ecbf-4615-87b3-fd81bea6c648", "sighting--9386b222-9068-4db9-8c8b-48db73e0b3a0", "sighting--9c1200ab-794f-4324-be62-8373a258d3f7", "sighting--4ed88940-52d1-4f04-8379-32b98be5b518", "sighting--2458c92e-6039-4997-a0be-508f8dae9f08", "sighting--9bc5ce3a-8c2a-444a-94aa-6998ce7965f7", "sighting--59459fb5-01de-4403-8fb0-2db1a7ad308d", "sighting--87d14ff6-922c-49f1-bb44-c8e55cbccc1f", "sighting--1255a20d-cded-4828-a215-63e50e8d898f", "sighting--2913d1d8-251e-4e7e-a54e-ce644fce07ae", "sighting--31fc7ae6-9769-4c0f-997c-e9d91d94143a", "sighting--c18c532a-a11e-428e-8d9f-361b0aac393f", "sighting--44c056f6-04ff-4cc4-a62b-fe175fc0788e", "sighting--1e700aef-8b5b-4ca9-93d8-9b9920db40f1", "sighting--82939856-3689-4153-b3f8-7ffd67118b59", "sighting--0a94aad8-d523-4130-9e70-57c1af77ffbf", "sighting--8d2ab187-5580-4122-91e7-1b77b9c19a65", "sighting--35a2ca2e-982a-4497-a7e0-1012ae920d1e", "sighting--0790b39e-c6d5-43e9-9f87-6b9bb05d0c0d", "sighting--a44392a2-29fa-4404-a533-f8025bd0fbf1", "sighting--2eff944f-b8fe-4751-b1d8-ea5f820ea245", "sighting--03ab81be-85a1-495e-ae96-f3b501a15d04", "sighting--42c80084-2172-4b86-8948-a720648855b0", "sighting--039fedd7-1745-477d-a5c9-dfa1f0c9ddf8", "sighting--afc51709-c46c-4346-9107-11a7ab1954be", "sighting--973c5c2a-d8df-4574-abd9-9672e6af6b75", "sighting--af7f4a21-4070-41f6-b130-9e3344e0a05f", "sighting--c36cfaab-8668-49fc-9612-16afecbd023b", "sighting--48ad1713-2f45-40df-a393-3df6b70da294", "sighting--247ce1ad-8332-4f09-8f24-950b7ff8df4f", "sighting--4e1ff79b-b958-4a1e-917e-330bc3417d76", "sighting--e4da08fc-0185-4e34-99e0-c7183d4ca84b", "sighting--d1c0f7f5-ce61-464a-a2d0-bfab4761014b", "sighting--5a167655-4081-4837-b047-eb37d7887048", "sighting--d399d15c-f78f-444b-99b4-dca4ab14f579", "sighting--0a4ed963-8ec6-43ad-a8e2-35598191d140", "sighting--4d253baa-0a92-4f04-882c-4396bb020a2d", "sighting--7f0f69c3-a02f-40be-aab4-5eae56aab020", "sighting--c6c2e780-be22-401b-a144-03d800835ce7", "sighting--de30a5b0-1349-4c0e-96b0-dadc8b7d9108", "sighting--5f7c2736-e055-4d96-8ddd-d646497d266f", "sighting--0e0abc7c-220c-4b11-a2a1-8d7fd525ea95", "sighting--0a6c6ae0-b2c1-4a74-b32a-3f663e31a763", "sighting--065573ab-1cea-4f9f-a0ab-8bcea10b809a", "sighting--34f715ca-0ac4-4c28-8575-12c7366df068", "sighting--a5aef770-1229-4e4c-929b-dbe078b5e4b6", "sighting--100fccda-4357-426d-9902-52bb0ef23349", "sighting--9f0f4366-8b24-4380-bba8-6f8343c6d1c6", "sighting--d365847f-55b5-429a-8597-9834f356999b", "sighting--d41d9953-174b-482c-8b9c-ba8cbda11fe0", "sighting--32d5f137-a9b6-420a-81d0-0c949f7473d3", "sighting--ec7a8351-7d3e-40de-b60c-20d972259b3b", "sighting--759151ec-4df6-4f42-8f63-13e25fd1b301", "sighting--dd8fa35e-1146-4870-99af-8889c4048228", "sighting--f3b15239-42be-46c2-bcd8-9be15fd97350", "sighting--17ac415a-acf9-4142-b1dd-85514a1c2937", "sighting--18695bcb-174a-4c8b-bee0-8067d93499be", "sighting--78e2aa97-7d5e-4652-9531-59b8b77d1758", "sighting--2a357a47-1a00-4d3e-b5ea-edab05bdf73a", "sighting--9142a10b-a7ff-40a9-83e3-699a2dc4ec73", "sighting--c191998e-7f2a-4ab5-9dbb-bd60b8717456", "sighting--e03bec6e-0640-477d-bcf2-62c4fd5711a9", "sighting--cd14bd76-8dbd-4903-940d-f7165e11420b", "sighting--0c2ac2ca-70d1-4675-8162-77c7f0e5ce46", "sighting--d0f2e3e5-dd64-445e-802b-44a93ebe3315", "sighting--4c2f112b-78b8-4dd8-9a89-69d6d338dd5e", "sighting--51442ecf-fd75-46f2-9262-834c2c8c7c65", "sighting--558a9675-8b11-4287-8620-5b2477370728", "sighting--89b706fc-f8e3-423f-b3e9-2c1769f1f67d", "sighting--1af69fdc-8792-4f62-b585-3dfa08cb4ee4", "sighting--fbd3ee12-0ebc-476d-9942-6c18ec0e79e5", "sighting--fb0fd6c3-2007-4a65-bcac-3889850d94f4", "sighting--2d089aa9-6151-42b8-b393-7470a7aeea3f", "sighting--2f4ea985-df30-4ba8-88f5-5e7f8ee29700", "sighting--d25be49d-5869-4b59-a06d-794aaad9657f", "sighting--5b8cc5c7-e07c-4c3c-99f8-6f35f21c6721", "sighting--76aaaf91-6d8b-4c63-83c5-4f6c447f6666", "sighting--bbd994dc-ae04-43ee-850d-d8ba66c2918d", "sighting--e8868e06-ae2b-4b61-8747-6339e79b6fa4", "sighting--64352226-b1cb-41e1-bfb6-9869affc375f", "sighting--6086660f-f835-478a-8cf8-e74661ec7875", "sighting--b4e47a88-3a19-423b-b7a9-5e46ac19247e", "sighting--aaecb146-2a04-4277-a224-43be040498b9", "sighting--75b952eb-65f3-43fa-9268-f583eb561ff6", "sighting--8dd3eaa8-c198-4ac5-98ab-e35eca4e7226", "sighting--177c5c0a-0bff-468e-b1ae-a9e56f7683ef", "sighting--6d5b13af-be6a-42a5-ba79-e45d5fedcbd7", "sighting--e57452e8-1a04-4661-8e5e-070aa95c33af", "sighting--d0e7cf52-b0c8-4572-a036-7eca93bdd8b9", "sighting--7b0a38c8-0ab1-4b32-92ba-f7b3b5ef0d28", "sighting--95aeff15-d126-4016-9b63-0a8d3e7c444b", "sighting--b1609334-123c-42af-9305-605a4a1ba651", "sighting--b3a9662d-f8fc-416f-ae18-bcc52fdadf05", "sighting--1c5f8375-dfa3-4bd5-a810-25266ec0f73b", "sighting--fb3c98eb-2a21-4f50-b9bc-4815899f8413", "sighting--ee5b72c4-526d-4d9a-9056-f71eafd779f5", "sighting--70ed42c2-68b6-4ba8-9bab-8f44761339e9", "sighting--f3ed67d3-1bb3-4e9d-8232-437efdb20b80", "sighting--42333874-a93e-4a27-8406-bbf74c823ef5", "sighting--34b97bb6-947c-4d84-986d-bc32768e7f6f", "sighting--fdd94e3f-3bfc-440c-86c0-f30698dcf2b5", "sighting--b0094ee9-01c9-466a-8240-94d3de3e0645", "sighting--4c316bef-376e-4561-8bcc-c7249bf68618", "sighting--295f72e4-ff07-4c02-9a00-4de12715f98d", "sighting--c7042822-c17b-49ec-bcf8-da53b858d7df", "sighting--d5acbf55-82ae-4a41-b2d1-4a40457c8f03", "sighting--ee45c205-83e1-4a6b-b0f8-0763807c8bd3", "sighting--287b9353-d810-4cbe-8b27-74cb0bba39e9", "sighting--3470351d-cbc6-4a01-8a03-8c5300aab229", "sighting--c1e3e87f-6007-4d32-9b1c-35d31ad9ade0", "sighting--a048c45a-9ac7-4073-bcbc-120b2bbfee89", "sighting--bb2169e9-14d7-4789-973b-72f5c46aff59", "sighting--0bb0d154-a09e-41c3-90a4-79b745f62226", "sighting--4c5967a5-7384-4969-87d5-1a3461a4a82c", "sighting--e1174723-aadd-4e27-b0a7-dafc292aefa8", "sighting--0ae1a9c7-7d53-40ac-94dc-8283e37f2fdf", "sighting--5f9c0893-e4d5-4ef8-8a8f-f912c569b9e6", "sighting--a5c9a4c7-3061-4e2a-93ab-fcc3e1b820cc", "sighting--7570b406-7d4e-4ab5-896f-61b1636d1ab1", "sighting--a624642d-01b8-4f4b-9278-a6062a0639d0", "sighting--8768faca-9803-441f-8238-c26af65ff6fa", "sighting--d751fc38-e3c1-4640-b768-a5daab5ec35f", "sighting--6634208b-cac6-4253-ac27-2b42abed29f0", "sighting--f9ea82b7-ecd3-49b5-97c3-49d37f3bb09b", "sighting--f6a41aea-4cdd-482b-86f8-4429ee3c0192", "sighting--e9a413d1-c102-489d-99cb-d61efc6e9c7b", "sighting--c7921c82-33f7-4acb-86a7-a5871fcaacae", "sighting--0e17f9c5-d8e9-4896-a465-5083cbd44c27", "sighting--64e0dc62-e4fb-4b92-bca0-8f8df63c6816", "sighting--f4821417-7816-41e8-a0eb-54c2062a0f56", "sighting--4aaa0ed5-954f-42e4-8c38-677f4662cf59", "sighting--775f8807-3767-488b-a90a-4588f362d432", "sighting--3ccc0dc0-51f4-4b9a-bb91-231ead28d29d", "sighting--3ff9c474-1c7f-443c-998d-534fe04f9d25", "sighting--ddff9087-c623-454b-9aaf-f0655d5c0951", "sighting--7a73d5f7-aa4a-45f5-a773-8ebe6bd3924a", "sighting--b9984f57-ab80-4ca1-a93b-2b4bf8ea1487", "sighting--2d2720e7-05e8-4865-bff5-29cdf5c79130", "sighting--e9b8b972-4f29-4ee7-80b8-8dbf40fd2b47", "sighting--15e666c1-3be1-462e-bb05-7160b531c26c", "sighting--0ca6a1e0-e482-4012-adfe-a9d1eb22f2f1", "sighting--f2895413-a11b-4cae-a1c0-9346f93999e8", "sighting--7d96f52e-f1b2-40c1-b168-7ad579789c4f", "sighting--a0333265-a729-4f6a-8358-c9f7278998da", "sighting--96ad62a9-e4df-484e-be78-38725d2060f7", "sighting--f0411258-2462-458c-a424-f13580ac58ff", "sighting--990489bc-27c7-47bf-934e-aaefb8b8c23f", "sighting--a23c01ca-80d6-452c-8d0b-562974f0ae73", "sighting--0cd3c157-95ca-44d7-afdb-9ad80cd12400", "sighting--c0ec1fb3-1791-465f-b5e7-f2970cc497fb", "sighting--1e7d2f14-a490-44a0-97b2-ba25827566c2", "sighting--285a68ca-4433-4411-a34e-812856e5a03f", "sighting--1bcc6ffd-07aa-49ab-98b9-b2ee3d1af635", "sighting--d81a2cff-cbd8-46f8-86df-19c51c76abf9", "sighting--6e9adf23-2b40-4fcc-89b8-349ca3e65171", "sighting--51f49194-35d0-4de4-a3ce-9d8af6e070bd", "sighting--e2fd9af7-fbdd-4ae6-989d-8e45222e00ef", "sighting--fccb4bfb-e0e5-4ccf-b928-2b9ae1f487cd", "sighting--e2d1a139-3cd2-43c6-b59c-e79dbc15573b", "sighting--ef4f99a6-e5d6-4032-8a49-c493668201f1", "sighting--43921969-b30b-4b76-b7fe-901aa692d4fe", "sighting--9017b358-4f89-4c1b-b9b8-30de16616154", "sighting--e3f028cf-e2fc-4e99-8435-930052466c80", "sighting--3de9e348-a71c-414b-a4d9-260746f76074", "sighting--838219ac-5b0c-4e15-8f5c-65d35b3763a4", "sighting--f28c48a7-317c-4d60-98bc-68a482a0c8bd", "sighting--2125b3f6-103f-461b-b0dd-1fe0e2753d7b", "sighting--e58ae481-2ebb-427f-a65d-d471d0986515", "sighting--e82c3f52-7879-4ecc-9fff-b44e0c497eb4", "sighting--70cc1254-4f78-4206-961d-e9d1aa916950", "sighting--c3799222-60ab-4d6d-baad-fcb79205f85e", "sighting--48177249-4fdb-4b2e-beae-567eda3ff973", "sighting--2d3b1dea-55f2-4b00-83be-3a45643819f2", "sighting--945c6bcd-17b8-4098-ad68-045981a8531b", "sighting--158403b4-bfbd-46f1-923f-5187c500b2d0", "sighting--dbe1bae9-d139-4a82-9f71-905a89a74da9", "sighting--c5baf7b4-c17a-42a3-8a28-d3a1442b8d90", "sighting--60b6fbf9-575e-4ec2-b8dc-5db23e78034d", "sighting--d83211fd-6af6-4fb6-a095-b83e1d942819", "sighting--0c5da4f2-2f78-42db-8dfb-ab8dc710d79c", "sighting--fdc4d175-1705-4868-8ebd-1d2e22dfaaf8", "sighting--f50b5f12-10cb-41b6-b96c-1a10275ab65c", "sighting--4ee43162-bb6f-4843-b3b5-72e7ab344ce5", "sighting--021549a5-4138-4921-83a4-98109015b771", "sighting--53c85216-d7d4-4f4a-997b-b34726b2cf0f", "sighting--51935542-5e57-4e44-9532-d62dd35388c1", "sighting--197d6bf3-b117-43ec-ab98-c62c91fae804", "sighting--f59aadeb-1662-44f0-ab31-dca11c9206c3", "sighting--4913c4d9-e13c-4f04-ba2c-f89b900f3c61", "sighting--029f0428-23d9-4f5e-8f75-3e4ccbaf198f", "sighting--87e2495a-5d50-4609-81ea-e87e3e2958fe", "sighting--5eac7678-a61c-4e1f-8033-d55a6fd73054", "sighting--af474839-ad3e-4c4e-ad32-df5e56243130", "sighting--f8497395-0969-4071-9f00-9b18cd6f1cf7", "sighting--d7fd9ef3-b403-40ad-895f-38d9a8f097b3", "sighting--47e33d8c-325f-4c30-93ad-86e97f28ea5c", "sighting--767010b6-5718-49ce-b615-872598115c5e", "sighting--972722b6-1dc4-48df-9675-88287de88a01", "sighting--14c10e8b-08f4-417c-af5e-d74ade9461b6", "sighting--290f49b5-6bce-4fe3-80db-2b9f85b85386", "sighting--b647ab70-42a2-41a2-9049-d3cfbdc5b6b3", "sighting--761c5862-7e58-4501-8954-4c4dfdda3a22", "sighting--b46fdb8e-9329-429a-9ee5-4a4d263d3ad4", "sighting--64ccffd0-9119-4fcc-acc3-4331bb9b7d50", "sighting--a5cdfc05-589e-411b-9502-c9309e63729f", "sighting--ffe17cf5-48f5-439c-8ebe-73c421e30245", "sighting--feb47c90-e6b1-4c4c-8b42-566e54f03679", "sighting--939abbc0-3ff8-45ca-9d46-4e69bbd3d7d4", "sighting--94167bd6-198a-4211-ab11-2d384ece97b7", "sighting--9b065b87-dba7-474b-a1ac-e2efd2b3bcaf", "sighting--e82da5fd-de79-432c-bdb0-40d56232cfbf", "sighting--b908fb5f-f982-4355-b690-a64126274b7f", "sighting--407f53e8-23a5-4852-8c44-481e0a2f44e1", "sighting--7ab88831-0133-4b22-b038-43f5500bd39e", "sighting--56c41d39-4759-47e4-b100-00dd1271e1a3", "sighting--c1e1ac3e-1c43-41fc-b155-67e6789517c8", "sighting--35db282f-3fce-4411-9f56-04629f04c0e6", "sighting--46167121-61de-49b0-862b-0d2b335bc9ed", "sighting--da799b0f-96c9-45de-9067-4510bc968fd2", "sighting--617e6c28-540a-4f2f-89dd-eef5e23a3a6c", "sighting--30a4a81e-6c66-4ff7-86c6-b57c4bde32c0", "sighting--408f6638-d307-49b4-be5e-6857e3ab962a", "sighting--fb254fc0-7e33-4139-bde2-8cc287c4736d", "sighting--9d7f64cf-9a92-416e-9589-03c7c958c384", "sighting--eaf39f2a-938a-4a1f-b965-f356887e9598", "sighting--c8c6b677-145d-4a40-9cc5-0dfe1142efd5", "sighting--9345a21b-58fd-4a95-86d9-67bc035b27b1", "sighting--4ec26bb2-cfef-4383-b233-50b44c542dc7", "sighting--65de3581-8bed-43c2-9011-6b506fcdf89d", "sighting--86e367cd-bc3c-4ed4-98dd-a154803d5997", "sighting--b83c64bb-1210-4166-bd6a-c97f0254fa3e", "sighting--91e91afe-98b0-4ea5-b421-905e8ebe1920", "sighting--9d865eef-7f78-46e6-a75a-edce38d38945", "sighting--a2ceee62-86ea-4a60-8e02-f0d9e53e1276", "sighting--6c156ed3-e0b9-4cc1-aa09-246ba97cf587", "sighting--fa0c8aa0-2180-41dc-9a5f-b42f85aa1d72", "sighting--edf81f2b-ab7a-47da-8b06-18d6f920605a", "sighting--269d7f20-dea3-4d2e-8b50-211ca7f41fb1", "sighting--dc37a1a1-593c-4991-b5fc-7b368a240d25", "sighting--d7430615-069e-4949-8113-c46568dcfecc", "sighting--6eead03a-4b67-4ac8-ab5e-aa23e2810043", "sighting--1872b368-be8a-4bd5-9e3b-a7c443387e0f", "sighting--d394d07b-5d69-420a-92cb-ee5ef859c483", "sighting--3e2e1a59-3d2a-4a7f-9a54-7876b78fa558", "sighting--fdab0614-3b4e-46b9-8bcd-ce7e0e87e5fd", "sighting--da609b17-6a67-4951-b960-b00cce7394aa", "sighting--54077fd0-f622-4be6-aa64-fd5b8e20f42f", "sighting--aabb7b4b-860e-4afc-836a-ec31c9a3d762", "sighting--9a6f6d9d-fd76-4357-8d09-aab21d0de0ec", "sighting--f8106d92-8839-4d53-9d4d-26180208b919", "sighting--de9aa4c6-e8f9-4c48-acaf-f99dc48fca30", "sighting--6033e8bb-ffb9-4856-9ef7-a1a980df38ab", "sighting--c3edb0c1-f530-464d-9c64-e06148ab4dfe", "sighting--8d72cdaa-172e-4c7b-b58d-77f38060181e", "sighting--d2547fc5-67d4-47d1-8669-36447ff30fa2", "sighting--19d63a05-b160-4863-8670-dbafba5f4c45", "sighting--4f1db421-3063-4752-9f25-2c1f013dc4eb", "sighting--9cec4607-305b-4ae0-9fa1-fd842c862686", "sighting--fa7dedbb-4d29-4bdc-a9c4-d8c50a5b8e9b", "sighting--56192a8b-3551-4be9-b5cc-99e657273e4f", "sighting--256eb8eb-010e-4e6b-98ea-8b81e8b0357b", "sighting--1919be88-6a72-470c-ba34-f8b9cd8990d4", "sighting--15544315-0e08-47ca-b0bc-69e2d2f71d3a", "sighting--cc85e5ef-f01a-4565-b9c0-0f71b0ef2b82", "sighting--d3b49863-20ab-4b77-a20b-dd4cda534115", "sighting--146e7ff9-fb02-4be7-b735-6e76cec5dfda", "sighting--2c430307-9832-4b33-88b5-398337631eb3", "sighting--afd47c41-fc87-49b5-ab9f-067ae894d7c5", "sighting--9de6f6f6-dddb-4aee-a9dc-62502eb4baf7", "sighting--3d3a6288-4625-4e37-aa30-dd5fd27abca7", "sighting--27b89a4d-f4b6-4181-911a-c24f1f93c402", "sighting--79668df5-55a5-4340-9719-ad7d60e234a3", "sighting--e6c2e18b-7393-4ca0-8eb0-f5b5058b9a01", "sighting--af2101de-f612-4331-bcf7-b7cff0323715", "sighting--1e448515-3b6f-45ab-a55b-fc85286a0903", "sighting--354b3df4-98f3-49b3-9dc1-1e0f937895cc", "sighting--1c3f1a2e-ea43-4f2b-bd69-fe3bf4985ca7", "sighting--a59764d9-fca3-42bb-b59d-5364ef357fcb", "sighting--68036178-2e80-4aa5-b01f-2b46e6a3cc15", "sighting--0430ca6b-2d4f-401e-a8f5-9ed51643633d", "sighting--1a6aea58-d143-43fe-82fb-146ffe76754f", "sighting--c6f058e2-2442-4db0-b70f-cc9a3acf42d4", "sighting--5c8171cf-a119-4e60-9c4a-d97514d916cf", "sighting--d558d373-0f54-4c0e-9f8c-7576b3e6fcb3", "sighting--3968d907-045c-47cc-9025-b5ef5d785c25", "sighting--6c12340a-8809-48c8-a978-d9b74a30b47f", "sighting--1a8b523e-2378-4c24-8e1c-d95bb5dc6dea", "sighting--f20ac31b-c9b3-43ed-a350-d342ed7b510e", "sighting--69cd796b-78c9-42f0-8a81-21b8998337b5", "sighting--f17b85b0-16cc-432b-aa3e-7e2416ac2da7", "sighting--8f9d167d-8e96-49a7-aec6-2bcb6df5cb9b", "sighting--3b088a87-ff6b-4839-bf6d-add0b7be2899", "sighting--a8905127-a57e-41a8-af14-653e68781f4d", "sighting--5bacb9f0-a2e9-4d51-ad25-ee6eff46e723", "sighting--6aca1949-f1d0-4bda-9dfa-f0e17574d5e4", "sighting--28247f5d-8458-4b43-a43c-d6c194e91aac", "sighting--9e821782-6f24-446d-ac87-d02136be97c5", "sighting--639e4218-9229-4d71-8cf0-8b39548e9065", "sighting--931ad214-2673-48db-94f7-e1019fec74dc", "sighting--7d802c16-efeb-464e-a8e4-251a5da1de8c", "sighting--560f67ef-c2a5-4b49-a1c7-58d5436bc928", "sighting--bf80ade7-9578-42bc-b5c0-3d33304d12ab", "sighting--afbce827-5a64-4ad4-b454-72f6cc88a0c7", "sighting--24696a21-0f25-427b-b045-0b3c6c2c5dc5", "sighting--8a713808-df42-44e7-a040-197e11b5672c", "sighting--5c690d10-2b94-442f-b64a-c3735203e5c5", "sighting--2098906f-ecca-4646-9dc6-027af8eb453a", "sighting--b3a50d6b-90b9-4c3c-b27e-4cbe4e255d0a", "sighting--bc299fa6-eac8-4223-951e-f7d9f619f3e8", "sighting--1fa38253-fb46-4f23-992f-3ba70a8e81c7", "sighting--7e141944-bb90-4b67-9278-96bbfb64347f", "sighting--5ba7bc5e-1bc3-498c-89c7-bcf8d26aac95", "sighting--4dde5eb7-5682-4929-9009-f52ae69a811f", "sighting--0d2c8847-31e8-437d-8223-f7d1d65bee6c", "sighting--160e95cf-d7d9-4858-9ad3-35ab9791984d", "sighting--f8a95dc1-89ac-4ccb-9aab-f6b73103e479", "sighting--de81e31f-2b0e-40c0-b798-4dc17ec90cbb", "sighting--1e1d82de-10e1-41a3-a5de-8486d00160fe", "sighting--67116d57-e88b-44bd-b1f0-882df0215652", "sighting--c8978331-8c3a-4e80-9994-04585b93b850", "sighting--3e35294a-30dd-418e-b85d-847033bad6e7", "sighting--5a0bfdcd-ba6b-432c-a96a-aab62504140c", "sighting--141c45b2-9d72-4633-b6fb-c5715a94b048", "sighting--c6cdfb63-9d24-4750-9508-2155e61e5eef", "sighting--51ba4643-809a-4674-a4ed-8fce389afa60", "sighting--f505c496-572e-4374-9762-17c986fbec87", "sighting--1b7a6ce4-4cb3-42ce-a2e1-e01ca4314411", "sighting--b45e5d75-f822-4595-8dd1-2f65094768e0", "sighting--7bc74c11-cfa9-4236-bf71-cc3efa67df5b", "sighting--02a92e3b-4f00-4f8a-9075-27452777d262", "sighting--07fb6572-7c43-4537-b961-fbee88685437", "sighting--94387c74-de7c-423b-b27c-9929c3b5c286", "sighting--64577ba3-86b5-49af-a97f-96d3822932bf", "sighting--0abe79fb-dea1-4b42-b6a4-6d0d41e61223", "sighting--56f0d58d-e9be-4e0f-b9ca-8b25d07e4722", "sighting--6903400c-e41b-4368-9587-88d3376736bd", "sighting--c370d425-299b-41b1-bbb1-fa38c31f1f1e", "sighting--351e317c-68b5-4091-8e73-ebed3bc92e92", "sighting--6c80677a-ade7-4b9c-ae5d-8e7658a5dc25", "sighting--ba312d63-bcfc-42bf-a90a-e013b5b24b78", "sighting--36762f88-5a7f-42c7-8c04-6b8c00d8e390", "sighting--d1ba953c-d9d7-45d1-9924-7f945cd7a56b", "sighting--92b7e694-6664-422e-a896-97da87d872cc", "sighting--1d9acd26-b8f6-4488-aa7b-2674949dcc54", "sighting--15832b4e-e296-42ab-9e84-1c4690b843ba", "sighting--fe816c6d-641b-42f6-a421-3ca2e840c0ce", "sighting--a67e7870-dcd2-4dba-a6d7-767ad2a7fb50", "sighting--ee02171b-6170-423e-b36e-1cedda5f555c", "sighting--c6990120-f0b8-4ffb-8837-9a2b4a4be7ff", "sighting--bbdf2a59-1ee7-4eb8-8b8a-61494b5bd495", "sighting--07623cc9-8ff0-4897-bf02-37a9c396ae65", "sighting--349d6ae4-a1eb-4144-8b65-750223ee8d2a", "sighting--ffad1545-aee6-4ccb-a214-ab29532bdfaf", "sighting--bb2b674b-3ad4-4d02-9be6-75a7e40375c1", "sighting--de3d7b41-7bc0-487a-aca0-4ee8ea56662b", "sighting--a4ab377e-ebe0-4141-9b42-9d89c48ee2dd", "sighting--dcefae2c-a294-43c8-b3fb-5461d6aa2182", "sighting--28eee74d-f95b-4549-8fb3-f8a29c1d31c5", "sighting--7b7b186e-a43a-4d6c-8467-1aee95016669", "sighting--703e6a01-c868-46f5-a18c-03a8a87b3d8b", "sighting--9a09a003-9a8d-42de-afae-b83fca2ce545", "sighting--38cdc7f9-3375-4163-bf83-056b845fc2c6", "sighting--18dd5c9e-d793-4bb5-ab27-da0ce9aa53fd", "sighting--61c7d29c-7b1f-4184-9830-a7526c8b889f", "sighting--9c244b48-283a-4504-86ef-3482ad5dec68", "sighting--ee81cc32-8efb-41af-9fb3-ac33859f1c54", "sighting--f136e5ee-a304-420c-95b0-7ebbcaac6183", "sighting--0433d4f7-8224-4296-a258-50941a90ff7c", "sighting--f1bc4191-d6f2-4be5-ad4e-cb3ded2e392b", "sighting--139e9c8e-dc7a-4ca9-89ab-4ebff4c99f67", "sighting--f949fa26-8516-4737-94c8-c76d424f1112", "sighting--9c0147b0-b863-481c-98aa-e75db78d1a6b", "sighting--92987b91-8b9e-4acb-b207-d217db3c8566", "sighting--27eb9c5e-c214-45da-8a54-dd5fec00e988", "sighting--b4cc4c6c-89f5-4ddf-ac77-5717732d8e5b", "sighting--563fe388-571c-49a3-b755-cc426445b4d3", "sighting--2083701a-2e0d-455c-83da-34f4c8e9ef63", "sighting--3afc46d1-7d9c-4036-85f6-da701b1ea406", "sighting--fa700a58-e992-419e-92e2-f99a0ace7eae", "sighting--b82c2945-00f1-4482-baac-f96773d8e969", "sighting--24980ff4-cb28-4633-940c-a682d9402601", "sighting--3f51f5ea-4211-434c-b00c-ba98945602bf", "sighting--3921f1d4-7697-4881-9753-506e6186dec0", "sighting--7b35ea88-9cdb-49c7-8ba0-264a42e9e071", "sighting--f0417c7b-3cb1-41b5-8d8e-e22494b47e29", "sighting--ff510cc7-343a-4721-ae39-7d215b677057", "sighting--78e6b3bf-6242-4981-91aa-b0d537594b3e", "sighting--9f49d4cf-843c-4a17-8f1e-6f04bb972d75", "sighting--8afeeae2-5fde-4598-84c3-75847075169f", "sighting--d84d253f-fbfd-436f-bba7-a0cd33e8b85d", "sighting--0a213864-5387-4d33-aeb6-e205fc1f2bdb", "sighting--869fc45e-ebfd-4944-b5fb-532671ddb89b", "sighting--4794a193-b8a6-40a9-99c2-9cc864e539f2", "sighting--c049ef8b-c3d6-4d32-84c2-33ba03e9b425", "sighting--ab2abe23-aba2-4dc1-9eb9-155395b071aa", "sighting--f98f37ff-8fcf-4bc4-a9bc-bdfb6518f563", "sighting--0271ff16-33c0-4a57-bd6a-391057a6f0e0", "sighting--b5028dc2-9228-429f-8b02-818634a65584", "sighting--0c60c179-00ce-45d3-b191-943b1fc13561", "sighting--cc87fe1f-6e4d-4382-a85f-9b734c209140", "sighting--e671a49a-1a85-4282-b417-5ac5d345911a", "sighting--35a583ee-da70-4801-95d8-c1a4efae93b5", "sighting--2b088b57-cbf2-4bc2-a16b-77954c0a9e29", "sighting--98463ba3-6c44-4480-9bf7-55f613533aaf", "sighting--51af2e0d-4cc4-47f3-a1c0-f19ceabaf6b0", "sighting--94067a6b-ba7f-41ad-84fb-03b3f3a22e1f", "sighting--29beca0e-0a51-48b2-87df-a4cb54facf05", "sighting--5313e8b2-1b02-4302-b170-50a6328dcb7b", "sighting--218560f7-aa53-4b3b-93a9-a21c7b723ffb", "sighting--80beba7c-3125-4076-a1cd-9681391f514b", "sighting--769f8ca1-2135-4e18-bf85-251fc2eb7827", "sighting--dfe16ba6-3780-487b-8998-0e385efe6648", "sighting--93c15f72-79d2-48f3-b9b9-d2b7fc6e80d3", "sighting--b89e1636-cd97-414c-a163-47562ee29195", "sighting--9e293f46-7c29-4349-91f8-66d97e56b9b6", "sighting--edb99589-e267-41cc-8d56-b494a7aa889a", "sighting--f51ad0a0-f49b-4c65-94c3-0ccb6f9e15a4", "sighting--e7301948-6d7e-45f8-92bb-f058746bc750", "sighting--29af15d1-c92c-439e-a2d2-b2199c3fec75", "sighting--10f615fb-2dca-471b-ab3c-8b208434c2ea", "sighting--b79ec060-806e-4b1d-8f7f-c91ff6c625be", "sighting--54195f45-447b-4610-a5d8-334a668cd32f", "sighting--bf4e5855-1204-4909-8275-2de04ff708ec", "sighting--adb93cd4-353b-4f13-a2c7-c738e5d5768c", "sighting--5af39855-f972-43b2-934a-11897c58b08a", "sighting--4b2247f8-0de9-41cd-ba49-9f67ce2167ea", "sighting--414c3673-4e90-4bd5-9a5e-2f872bb6c02c", "sighting--85f35b0a-2b56-4a4d-8b50-73234ceab070", "sighting--605fea45-f970-4369-b361-ea3019a7cd35", "sighting--f4ef2664-456c-44b5-b299-57f12caf22eb", "sighting--69f4706b-d130-4a66-958b-4bf29fd9a655", "sighting--2b6e97af-8f0a-4a31-8413-98706c857322", "sighting--0277e2bd-6fc8-4a1f-8452-4f09e0d03881", "sighting--c8a16851-428e-46bb-b513-c22b6398c4c5", "sighting--6af7d3ef-4c8f-4a15-a858-548b4158e7b6", "sighting--d09ad054-ceff-4a5f-b3bc-ce6066cbfca1", "sighting--020f7b85-3403-4cf8-9fe8-9686f24cf750", "sighting--88036879-3478-452e-bf75-b232e201d725", "sighting--21b928f5-8646-4457-a451-8332a0602b4e", "sighting--6df1a3bb-9773-411d-8adf-f822dcbef43a", "sighting--6001d741-f746-4f87-9682-84153f9b374b", "sighting--4b8c4dd9-a4e6-426c-b771-776b4d437730", "sighting--954ab1a8-d253-4538-88aa-5d4a0e2ad3e9", "sighting--027bb998-72a9-4125-b669-6d08b8a1165c", "sighting--357d5c1d-8f36-4e7d-9401-c71b855e1efa", "sighting--74a656c3-34a5-4a54-ab38-c47fbf92bd18", "sighting--149657a0-e151-4f81-85bd-6110cbd875f7", "sighting--18d87b07-1bff-48f4-a437-eb72f5300a26", "sighting--1c6fa2d5-13e7-4fa3-b508-3fed2b738bdb", "sighting--af8e304e-155e-4cd2-88c0-45a5a4f0dd53", "sighting--c28acd16-8607-400b-aa90-6578b076009f", "sighting--13b0aea5-0e61-413f-bc50-5a21f0b8d5f4", "sighting--6e57f613-3155-46ee-a95b-aa497cd83e5a", "sighting--4c9bda7f-c87c-4edd-9acf-ff08fd24cc4e", "sighting--2cc6256d-0b95-4343-a8bf-faa8731b323c", "sighting--f69e066a-1982-4ed6-b2e8-c75afbdee0b6", "sighting--f87e82ae-53d5-41ba-89fc-23bc0fa5fda8", "sighting--86870157-1423-45c5-98a2-894b3f0def4c", "sighting--f822cda5-4ecf-43e1-9dc8-21dd89583186", "sighting--229120f9-1f0b-4b58-bbc0-71f78aea89e8", "sighting--f0a8e50f-ed02-4e9a-a5f9-2c504dea5434", "sighting--45286bee-117e-4c6f-bfe0-19d42449c754", "sighting--553953e0-5cdc-443c-84a5-78ccb14128e7", "sighting--0296694d-b629-4a07-b599-527f7e81cb07", "sighting--16348942-4bae-4952-a06a-3e47b3c828b1", "sighting--5913be8f-57ce-4c34-adb9-d186ff1cb8ee", "sighting--edd54fa9-f75e-4e16-850f-14961c5bc826", "sighting--5308c6cf-b4fc-47c6-bc1b-25957893a09a", "sighting--2938859c-19d9-4b07-b351-dd4f8de90202", "sighting--631e6122-75a8-40a5-b48e-35ce59b01d6a", "sighting--a1c30c5d-22a7-40f9-b170-40b0c5618737", "sighting--8cc81646-8dca-43a6-9843-0f359b3275d0", "sighting--0413efed-c18b-4b79-bb0a-efbed4543820", "sighting--57c1caf0-c76f-4689-bf14-a648549b2d3e", "sighting--9901db16-d501-4054-ace8-da3ebbbe58a6", "sighting--e69f2ab4-3349-4df5-b5ee-5818147a8699", "sighting--e4046897-0d48-454d-bc49-977a7c704ed3", "sighting--a47aaf37-015c-4502-b3c9-f2a338983011", "sighting--f23dc478-280d-478e-8fb5-903bf2a8482c", "sighting--50ade234-f63b-40f5-89db-199eb89dd577", "sighting--472a20d9-5cb5-4795-8408-a04af01728e2", "sighting--e8a87c09-c5ff-4f60-817b-23e83ef20edb", "sighting--3f7b7355-be67-4c38-ac83-815b829aee8a", "sighting--9b6f2b8b-2040-428d-a242-a47547ba426a", "sighting--02477a28-7afe-453d-aad8-ee41ac2aa50d", "sighting--ccf03de7-844f-4a65-9af2-7ca0ad102cd7", "sighting--909a094a-84bb-4461-8e1a-678885ec6cc7", "sighting--79bd5184-2858-494e-a6ad-d43f4ad3a1e6", "sighting--b56db32b-6830-4011-aa1d-4b49bf876479", "sighting--05f60b97-ce2f-49af-a5f7-82a8e8afaf47", "sighting--5c04dcc6-d219-480f-af1a-09c5d9ff3f43", "sighting--d7ac8848-9f2b-4a22-8266-9fb343173565", "sighting--09875c60-e2ee-4b90-a0f8-b67d1119eab8", "sighting--1236b222-4fda-4d2b-99f9-53cd7512f00e", "sighting--94baed8c-70c8-46b9-ad76-739c7dd29777", "sighting--612f96bd-3cc7-4217-ab7a-4c707863c16d", "sighting--8dc6903b-de8d-4c95-8075-1c5b9d5cfc28", "sighting--1a1f7064-0949-4a1d-aa30-b669db1871ee", "sighting--e325a738-913c-4200-9b40-3135e1c5927d", "sighting--bf1b4866-ed22-47b0-ad22-e8e3da5ed86a", "sighting--1e658d7b-5d63-4e9f-9785-aa310a3aae09", "sighting--279942c4-4ebf-41b3-9b76-bb7ef23a5c25", "sighting--3ab41675-3409-49fd-b48c-1fa909585bd3", "sighting--c5c85a51-65cc-4b14-b554-e06569221531", "sighting--a5763516-228e-4c80-a5d6-947de7306fc8", "sighting--029f75c7-1452-48cd-8273-4e2596a9f2fd", "sighting--1c93c6e4-b122-475e-bf60-c1fe55bba0d3", "sighting--85590dde-9735-4cda-bfc8-cfebc483cb92", "sighting--7b39580d-b656-4be4-a715-18ac4f23f83f", "sighting--78c5c181-9105-4ef3-bafd-8042ee72c7d4", "sighting--e6a257a5-ac93-4ed4-bc7f-3e23fc07406b", "sighting--a4b51812-bf30-4996-bde9-46bdca8cf83b", "sighting--a8ba292e-5c7e-43e0-b79c-0c8b20c5441c", "sighting--754d107b-2b1a-40e5-ad8c-add98ccdabae", "sighting--40843122-2c42-4c73-a086-b402df9dcba7", "sighting--54207906-18e1-4471-8796-aff2bbeaa3c0", "sighting--6851fa1d-3f0c-4e88-a905-b49abd81e2fa", "sighting--e6bf26e2-651e-4775-8b28-c0128c26ca8b", "sighting--0cebd249-f77f-4f58-8ee6-3032483561d2", "sighting--61c03400-0f23-4f2c-b8f9-2ba49667b25d", "sighting--2365a242-2b1e-4264-b2cb-a6caf963b091", "sighting--b582b2f7-a61f-40a7-97b6-30a7aeb72cab", "sighting--e8b1cefe-c3a8-4709-a5cd-546c97e15094", "sighting--3c2bd4f6-0ede-4bc9-90e5-c081f5e49d3d", "sighting--b64c19a3-6618-4bb1-99db-effbcbe3faab", "sighting--836d0a41-384c-4316-9248-e05c860f59fc", "sighting--deb39bec-06fe-4894-b131-2529502f76b1", "sighting--29c2bf1a-068f-4243-914b-de2aa92586df", "sighting--dd6e2b3b-5e1c-4679-9c26-daa9d09ccb2d", "sighting--b77a3e64-8864-41a9-b0e0-7adb0d3dbe3d", "sighting--ca210026-d63b-4784-bc66-189168567b9a", "sighting--6c7e81cd-0029-462f-8ad1-50ab6ea96896", "sighting--2465f914-a5a7-4a04-9c0c-a9cd0fb338eb", "sighting--1c2bb137-862f-4d2d-ac77-83caf92f0888", "sighting--1556b393-f1d7-4dc9-a0ec-d69b8d9af577", "sighting--81830848-13d7-4bc5-89b0-e5da33e35095", "sighting--a9dd05d5-f3ce-45cc-b774-b0c446aaad78", "sighting--d4d301d5-fbd2-4891-bb3a-851cb87d31c1", "sighting--66cd6c58-e13d-4f83-9a7f-74c490287b17", "sighting--ebcedd00-88fd-4611-9da8-f796f4fc5254", "sighting--611739cb-a348-41bb-800c-18bc0b94f6f5", "sighting--d2b7384e-baa4-439f-abd6-0abb2915d17c", "sighting--0605cd78-dc16-4822-aed1-ae51b7a4de30", "sighting--3c0e98fb-8f42-43df-9cf4-d3aba7c7abe1", "sighting--fa15f463-7ebc-4084-a6f7-6a46a53c2f3d", "sighting--313b36ac-1ae2-450f-a808-6cf4ff265869", "sighting--fe026dd1-6210-457c-a619-3bf8194b674e", "sighting--c94a48f7-3fa4-462a-8372-ffbbd1176238", "sighting--d61358fa-59c9-45a7-af81-f2925b5f8f43", "sighting--7f1b2bc4-3cc2-4316-98bd-ab53c8c0752a", "sighting--8582e79f-dc9a-4580-8f85-1592aed1cd94", "sighting--f8c7d898-fc02-4258-a439-fc08c66682d2", "sighting--bcf646b4-7da8-468a-8502-7ea29677b3ac", "sighting--64a3d373-a551-47b5-8db8-492863174852", "sighting--4a06a306-50c6-48f1-b9f1-18ec13e9a879", "sighting--36519819-de1a-4a4d-babd-d8c56cb69676", "sighting--574291e1-f57a-493c-8211-0ce37d714184", "sighting--cff97b8e-d545-497c-b4fd-f73e4e20f694", "sighting--3760d920-80df-4a2e-b7a6-89eb00f612b6", "sighting--997a5e3e-9a9a-4ab3-a36b-927bf6f45a82", "sighting--9021d5e6-2a97-45e8-9e59-3ecb703e5ca9", "sighting--865ae470-dc80-43e2-b195-7417471612e3", "sighting--01017b81-7107-4bc2-be45-f44247519d50", "sighting--8f5c4bab-8f1b-4e4f-8860-d482c683417a", "sighting--eac16664-746e-47e9-b62b-98b7a8e9d2fe", "sighting--3e4102e9-0729-43d6-890f-0fa4ce724997", "sighting--7e1c4ea9-0510-4064-a6a1-4e42f18bc1f8", "sighting--a9a7dbf7-1b73-4d04-b254-67628401ac27", "sighting--acbbba7a-a787-467c-a9d0-6803874c0e69", "sighting--d43f1477-a22e-42ec-a2e2-b2c6f8e20477", "sighting--23c57b11-355a-42dc-949f-9c467b235fd3", "sighting--f14e9ae1-d9f9-4fd1-8526-9466497536d3", "sighting--3b296f7a-1876-489f-846f-ba6b0f7c6dbe", "sighting--eca05a2e-049c-419f-8e90-2ce8c1f2c648", "sighting--151a0f48-dec0-40d7-8a1f-16d883636b83", "sighting--f5258ba8-501c-4897-9656-5efa2527d460", "sighting--1c978fd9-553a-4878-9647-9d8f24d9ecc1", "sighting--467f4711-ac60-450c-91ca-ca40256025de", "sighting--a4fcbb04-cd8f-4f53-8226-91dd9646fdb7", "sighting--7b62a9f3-398f-4fce-a0bf-23c8ba78dade", "sighting--2b91b47c-e90e-4231-accf-4a38ea3cafef", "sighting--fbb8c0e7-0855-4687-8d7e-da30922f66bb", "sighting--f9eab732-8533-4c16-b939-7df077269305", "sighting--3bf87ec0-48b4-4f24-b030-c62cea9fa462", "sighting--9f1c292e-69c4-4e70-962d-39f185dcd046", "sighting--b8518f54-fd04-4487-82e9-0365cfe5b809", "sighting--4eacea2b-0962-4db8-bacc-d1e4e9bb1616", "sighting--31787e35-ba27-4555-adb8-bdc400205e9b", "sighting--dc0535d5-7af0-4f8d-84ba-9e1f970dd499", "sighting--b7b213aa-7063-4cce-af78-0ba8c8b9ba49", "sighting--365d388a-5ac4-439a-af51-c390c8664a04", "sighting--aff08897-0bea-469f-9d46-d8cf71445928", "sighting--f8132ee0-2c29-4d87-a13f-9700f18a4ebb", "sighting--1f94dffc-66c0-4a58-8cdc-e3066620ee1d", "sighting--50978bf8-515a-4ff4-a08e-e0ce773635ed", "sighting--f8212dff-e2fa-472e-959f-57a214054957", "sighting--4dcfd908-425d-440b-9daf-31d996ba506d", "sighting--906da2b8-3ee6-47ad-b934-0cca06cb9720", "sighting--30af484f-99d1-4c03-ba4f-7747e3aa6d9e", "sighting--05c32d3d-2daa-4e8d-803f-d927b1afc2f4", "sighting--be18f4ff-8fb7-4533-9bf3-e41d6ae71a53", "sighting--41f00f54-370d-46c1-b2a4-81e40c5afe34", "sighting--f56956a2-d862-47d8-903d-0ea35cfa1a00", "sighting--b783fe2d-16a9-4304-a0ac-43230d6878ed", "sighting--99b73f21-12f4-4f60-bd49-59e9a2185189", "sighting--48c587e1-bba1-4b9f-aa0d-a172926e0638", "sighting--f42cea7e-6d44-482b-a292-a5cb6d44bfeb", "sighting--ca0fe1d3-529f-4a55-af15-40c8c4943ef2", "sighting--20ab4484-ed2d-4041-9c23-88154dce2fc6", "sighting--150d70e4-4a84-47ce-9618-c654a44002c5", "sighting--4225a768-cf8e-464a-914d-9df2844784ca", "sighting--de800ae2-804a-4d0c-9478-c148b091d096", "sighting--e2e8236c-014b-4ea2-bd20-3a94561b752c", "sighting--9e23fc27-23ab-47c9-a3b6-6c0cf44733b9", "sighting--ae5ce50b-f285-4a0a-bc56-6c18a847a752", "sighting--0804afd1-453f-429a-ac91-c9e9b4c271ac", "sighting--3c16f55f-67c4-40cb-a8bb-83f7fc1bd866", "sighting--7a1e547b-1976-4f3e-81d3-330d1e90d9fa", "sighting--d5a1e42c-44dc-4a4a-b666-1170b83fd07c", "sighting--035e899e-3ba4-41cf-b49f-e0174400be92", "sighting--37533b52-6b1f-46ce-87b6-f272707224cd", "sighting--c726df33-fdd8-49c4-912f-f84c7c206e9c", "sighting--ec4babc3-fe1c-49b9-960c-d25c01bc59f6", "sighting--4df0e1f3-5e18-4b66-925b-c055f3488205", "sighting--5eca3a2e-301b-4ab2-9f43-d55d4b7264d0", "sighting--64134463-0fda-4e62-8d53-a56b909e563d", "sighting--08a9bb1a-ca86-4e9e-afb1-373459b0057f", "sighting--9e75d72b-7293-40ff-8e5e-22fda6a891b2", "sighting--d436f317-c285-48d8-afcb-9d40d2f617ba", "sighting--2012d56d-ac5b-45e0-a36a-7418eb6df78b", "sighting--44d5119a-ab8c-42ab-bb59-d9c07724877e", "sighting--6d213d04-b815-4b26-b7af-4fe291fc5d00", "sighting--15a7a2f6-1b15-4971-87e5-559a30ff8226", "sighting--60350d2f-6114-44ea-b3e0-12d8a8f64e0c", "sighting--3fad08c0-e035-4f17-a394-50830db94b5d", "sighting--2d3a53f4-482a-4a06-a5d1-42ab0d6f19ae", "sighting--a9519a4b-2326-4de0-b339-77a6a8626a1a", "sighting--4ed8a65a-a4db-4a62-bce1-f451698da826", "sighting--d794ffa9-0111-41fb-bf3a-be48af4de28f", "sighting--9d4dbfb4-e018-4723-be10-4faf845db41e", "sighting--cc298071-a130-4f9f-a6c6-d19914660294", "sighting--f5618945-f64d-40dc-9abe-20bfc8583359", "sighting--f397f0ac-b2a7-472b-ad26-ee72c0927302", "sighting--832eb7cb-e14f-48b5-ba39-3995d7c148da", "sighting--0372e932-b8b2-49d5-816f-339d4e2bd7be", "sighting--ba8a4777-3f89-4d62-a64d-7f5064b4f587", "sighting--6acd6ea1-6db7-4a41-b2a4-d66ba4cf8d71", "sighting--2adc6db6-f040-41ca-932a-22c4cbe6b020", "sighting--a7ac7482-67a7-4bd2-ba28-cece0ab44105", "sighting--347a5105-13cf-4924-82b0-7ec54bbdf913", "sighting--b57e2658-5e8e-4d3b-b15e-f0438e19d6ce", "sighting--17cc6578-3edb-4d42-b3e1-cf48c2e4780e", "sighting--9ed9b457-b7c9-4313-be93-f8d0b911c17b", "sighting--c63c7a3f-e555-4c74-ba4f-0463fa7228fe", "sighting--4222419f-98c6-46d5-8e0d-f33dbd84d071", "sighting--73bcd853-1b9c-49fc-8e41-734b2b6a2d83", "sighting--8a1db5aa-0d4b-42ab-aa74-772262ce6a2a", "sighting--0f01e31c-2a3b-4b1a-9d6d-6838813a5ed8", "sighting--db54aa52-e90b-45e3-82c8-100c6b033ffa", "sighting--5d7b5243-4fd3-4a28-8ac4-ee935b0fbf36", "sighting--5612648d-e9df-4df5-806a-147ab00c00f9", "sighting--b1f6cf94-e74e-48af-bb48-52ebd53f2bc2", "sighting--c5842e55-19df-49a3-8055-3f3f2107527a", "sighting--49c8d74e-b77e-4df4-8b35-f4277a4a5edb", "sighting--d6db5247-116d-4259-a278-97388248422b", "sighting--d60f1757-cdfd-4fb1-bcc1-7d737dfee342", "sighting--a2763a84-0507-45c1-9506-d48779d83c54", "sighting--f24e2d54-f65e-4e9d-8d56-5622add5c24d", "sighting--08bb60d4-3170-4b01-9c82-15d440c8e596", "sighting--63c5b031-cae1-4cab-8d6e-3b2ecb776d68", "sighting--f16c6481-c5a1-45ab-a439-6a52bbb65583", "sighting--bac05bf1-8fe4-4f6b-b850-254d036cfce8", "sighting--328bdd2e-fa37-48ed-9295-a60048771145", "sighting--0faff751-176c-4e93-a0e5-754815fa20f3", "sighting--ffaff436-bdba-4efa-9edc-7f0b36765bde", "sighting--a162b9ca-5f08-4e72-826a-d1847f702d62", "sighting--e84a9770-f7d6-4445-ba83-a6135f44ec50", "sighting--4fe07009-6c7a-4e72-b1be-ca4e477b9455", "sighting--324b44e2-4684-4d3e-9727-c06d07a576cf", "sighting--b58b125a-09bf-4432-8a08-13dc3d9ee203", "sighting--c22b3bb3-e2b3-4370-b28e-7341574907d2", "sighting--0e156df3-6f43-4d3d-a55a-b87faae46066", "sighting--a4ac26f3-a4cf-45eb-b9be-ba1300ef7471", "sighting--02638c14-41ef-4bd6-990a-09f5cdf1ea15", "sighting--0afad6e2-0806-42f4-a6ce-3945c9521120", "sighting--8909318b-1759-4446-8f73-865610078f4a", "sighting--0423c74d-baff-4850-a22f-1007804dd66e", "sighting--560e7d2a-4c48-4113-907f-a0c9cf2b7740", "sighting--c29355ed-50c5-422f-ac32-312d474828eb", "sighting--2a5388d0-b9b2-4c07-8db5-60a0909f0c7a", "sighting--b2988cf7-1a28-457b-9fa9-b91d83879960", "sighting--6dfb19fe-8bbc-4797-b620-5669eb1b1a35", "sighting--5e1f28e4-84cb-46e6-8e8c-073edee475e1", "sighting--15c50bed-ea02-48e4-a107-6d367a92e644", "sighting--7b9e118e-72b1-426b-8db6-465081c00c4e", "sighting--ebc5fef2-50e8-4b84-9b02-84a3fecd2542", "sighting--19cabacb-8c83-4251-89c3-ac8cc2c5960b", "sighting--df178922-08b4-43f5-95b1-5b78699b2f34", "sighting--1c4cf81e-c599-4ca5-b562-3ce185061199", "sighting--097ccc8f-9069-45ef-9c12-506ff7f5754e", "sighting--28b0a458-022c-4f19-911a-f327945c4e55", "sighting--e2bc253b-ea24-4d34-a3f0-3da2e208842b", "sighting--0773eab2-4dd5-4840-9e9b-380ab265bb7d", "sighting--5592e3fd-8486-4ba0-b5d7-ebbefa5888b0", "sighting--44c71ef1-cd8d-4005-884c-e3bf686fb5a8", "sighting--f146350c-de6f-46c9-9832-48ab4082aaf9", "sighting--192fc96c-75d7-42c3-9a93-af7efa9742a0", "sighting--b2d8d619-a946-4133-8075-9bbcbb3144c8", "sighting--7c7b3d39-0a31-4c6b-848b-c2ebe3a2953a", "sighting--e230265e-a1bc-49d9-bb97-9c92e3cd5bd6", "sighting--18763944-bacc-49d6-8632-6f636be502a0", "sighting--54386350-263b-47be-abbc-56d4017a7a6a", "sighting--a7967bc9-1656-4984-92ea-7bfca50bce35", "sighting--6f1e3c41-8a43-475d-bc19-543ebc8c335e", "sighting--91167953-5441-4057-bd10-20be8ad8016a", "sighting--8b6244bd-ccfc-4583-8ab8-1957d4d520a2", "sighting--c91edbe6-24b4-4554-b38a-3235b8a28294", "sighting--49177f0f-f012-41d7-a6b0-606d7e35d99f", "sighting--fe5b63a1-1563-4728-b607-3f5b36caca3c", "sighting--d6383e06-7ff3-4218-baee-0cfe70cf4bfa", "sighting--eb1afaab-6dc2-4f61-89ef-12304e56854f", "sighting--7dfc79b9-b5b8-47ed-9f2c-f902b92fe046", "sighting--8c7522b4-d7ce-4074-888e-52c221180f2f", "sighting--c492cbaa-ad81-47f9-96c9-f5dacd36cf0e", "sighting--a2d2501e-dada-4182-a197-8b7adf5c79af", "sighting--d95387b8-d408-4e7f-8fc6-c2a79bfd53c7", "sighting--8cb04968-0c1d-43fb-9eea-5b3d2a13f462", "sighting--b4295b01-316f-4177-9fb0-8e294b1a7119", "sighting--a7e05548-92d3-417e-ac6d-bee74cb63c2a", "sighting--d15e79a7-6e66-476d-9ac3-1033741695bf", "sighting--33da2652-6093-4059-9973-ef47d2824de6", "sighting--c83ecf5b-510a-4e81-8960-900a1f9d2d34", "sighting--b33fed22-6893-4a66-b3ff-fa36b229ace8", "sighting--70901a88-1279-4e64-8ec5-a7001db0f3ed", "sighting--e9f9aac1-8038-42e7-95a4-669df47b76b4", "sighting--e341bef7-a507-474f-84e7-1a7d182c88d5", "sighting--2b46f9f2-a350-42aa-a9cb-6e3077edec36", "sighting--f5d85256-e9bb-4a46-ac72-e5a589509994", "sighting--6550780b-9906-4d0c-8203-e00b3ff0754b", "sighting--f0c0580d-2179-4eb4-8a6d-d17f38ac2728", "sighting--36a82aab-d00a-4cd1-abe2-8ce8c2a695ba", "sighting--5e2345ea-4f62-4014-91e5-a0e2d4cdd166", "sighting--af31c087-a947-42df-9ffe-8cf9ca59f656", "sighting--7dbe315d-7d93-4fb5-8bb6-6d1902641b93", "sighting--28e99cdf-aa25-4c7b-8436-6a21ab426833", "sighting--946f1421-edda-4c59-9410-85f7126c1f75", "sighting--54f44f4c-b938-4e46-9bf5-57e88253f942", "sighting--b594814e-322f-4672-a720-54d6653ba479", "sighting--25709e9c-9c0d-4410-979c-bd815d7e7412", "sighting--1727e1c9-56c8-48fd-b73b-5ea9a3c06020", "sighting--07d3296f-31e4-4ca6-9837-29c0005103f5", "sighting--585b885b-4264-45ee-a04d-80da18557852", "sighting--938ccacf-7af7-48d5-881e-328366718ebb", "sighting--47273572-b766-4b0b-b7bf-a8a5dd00372c", "sighting--4bf35983-2d8d-48cc-a309-21abd7a19e46", "sighting--d278ab29-c9a8-45a6-84bf-daf220702970", "sighting--e9cfd27d-9cac-446a-8e3d-91e772bfacc5", "sighting--393032d3-82c4-4a4a-8cf1-0751998e2112", "sighting--e6e804c3-b055-4a3f-9d69-747d46907460", "sighting--35a5c6ce-5307-4956-81c7-1f8357293620", "sighting--33a83ce0-2315-429f-89bd-aa0024361e2e", "sighting--42ec4efa-de6e-462c-9a89-b9413ad7f832", "sighting--0d47eb20-8ae9-48ec-b6e7-645c595710dc", "sighting--d3f3c031-dc23-40b7-9ca3-feddc74e62cc", "sighting--078d4426-05c2-41a4-81ea-40ccbb87f3ca", "sighting--97077884-d1dd-40b0-8128-9fccb1d79a37", "sighting--f7608b63-1d57-4f40-b20c-814309072292", "sighting--85d652e5-0be2-40dd-a1d7-7721e97838b1", "sighting--6f2b367d-aa4c-4c38-9b00-5e564c880d2b", "sighting--99741871-2504-47b3-9bbe-e6ad2dca3abc", "sighting--25d150db-744e-466a-9533-2baf7eb28e72", "sighting--2f879505-17de-4520-8cde-749c092fae07", "sighting--474b85ab-28a1-4ebc-af5c-2f75e26e2804", "sighting--33f238c6-1bf2-4150-8943-207047d8dcc0", "sighting--7691491e-0707-491b-86dc-1d8230f00f84", "sighting--ccec6618-041c-49d4-aa5d-09bbda390f45", "sighting--b433dde1-5ac7-4e60-9ba7-3e300b2cf409", "sighting--fc700c42-32b7-4918-bbf2-70fe416715f5", "sighting--81393c06-6ddc-4b51-88ec-341f92206b39", "sighting--e8c252fc-2464-48a2-90bc-90a9611cc3db", "sighting--ac13a928-d18e-496f-bcd9-e4a42ee5555a", "sighting--cda1c6b8-2b7e-4722-8f48-10a1bc076944", "sighting--d837f5c2-d910-4163-80e2-a6b026a223cd", "sighting--3d6f4e99-2a8e-4774-8e90-4af14c812625", "sighting--5320526e-ec13-4296-9b5f-3220e962a7ef", "sighting--f832ea9c-a271-41c5-bec1-df7bcdc4f23b", "sighting--38ae21f2-d6c0-4be0-a9fe-df5ef51a6304", "sighting--9b93b8b3-a037-4ba8-8d89-83043ef3cb81", "sighting--ad412046-a594-4d55-94f1-e093b1fa494d", "sighting--ea84cb1a-b7d0-41fd-9ee5-2805105a5404", "sighting--ef063863-b30f-4357-807b-2a327480eb3e", "sighting--fef32201-f803-4d8a-9677-06385140485b", "sighting--78326d3f-0b49-4959-a30b-9d7c60b1eb93", "sighting--37d1270a-aeb8-48af-93ed-a6ce0d4c4c46", "sighting--dbe97b5c-17c8-41a5-ac19-354d45450508", "sighting--ca810f84-d7ed-47d6-9dee-3cea8b1028c1", "sighting--7dfd5850-be02-4678-80f3-7be5919a76f8", "sighting--cde52f06-c28b-48e7-b857-69035aae08f7", "sighting--9eb986ef-e936-4a82-8c72-0c970aae509d", "sighting--69b26994-ff8b-4031-bbf3-a5d3b8d37e23", "sighting--51e2fa12-e086-4b3e-9c5d-69c4d826a65e", "sighting--75a107d2-1da7-4b88-87fa-ae633d659d3e", "sighting--de160614-fc81-419d-af34-22e9045d0de5", "sighting--19cd85f1-b06f-4faf-8f16-06438dd1e0b3", "sighting--21168ffd-a817-4403-a634-9fb77ce38eca", "sighting--2f3f6b17-69dd-4ec2-bfc5-b66c2b26cce2", "sighting--f8d541f8-7bcd-45b5-8e05-c2cf701e73cf", "sighting--07139022-dd3b-4268-a6aa-530b5d1a7ef5", "sighting--7f40f81d-11c2-46e1-8bfd-1d96da9ac234", "sighting--446bfd63-484d-4832-b672-afb598ab6b23", "sighting--eca71791-bafd-4495-8f16-1476b6e6d8d0", "sighting--40d30400-9b86-4a7b-a71e-d5b7aaa81cec", "sighting--048e0ffa-5a15-49e6-91a3-dbc79a3fc493", "sighting--5e889106-fac0-4385-913e-52971b9f99f8", "sighting--b8997581-5a99-4370-aa75-1469ff6315aa", "sighting--246afe20-34a6-436a-9c2c-285f82534ec6", "sighting--ff5730bf-0874-4088-a964-9c7a482a0f31", "sighting--598f782a-832a-4ce1-a4c8-1b8795add2c5", "sighting--9d69a703-8fc6-4134-b401-01dfc967b2b6", "sighting--72f264a3-23a2-49bc-9054-58e1b5a6a0ce", "sighting--070318a4-890d-4c38-87a6-9ff040e77b74", "sighting--a4cad06b-0e99-4722-896c-9adaa9d2dc21", "sighting--69d98cc5-6153-4ecf-9b70-4828947cd49c", "sighting--7ed11751-8fa3-4809-8d5e-e1fbd34a4088", "sighting--c4810977-8538-42f6-9d7f-1cac332a6dcd", "sighting--06bc80a2-9e01-4ff9-8e12-f22012423320", "sighting--6355f99b-bec3-4c55-857d-0cf2d3140de3", "sighting--176842d5-69ac-4014-9386-fab595a1b100", "sighting--c56784ec-7575-44a9-bf07-be1c6934beff", "sighting--8e6423fc-766f-4837-88ba-4aeda6aa135b", "sighting--946c0c97-c454-4c6d-853a-160ae7524f26", "sighting--f0cfa527-2c09-434c-9864-5e5cf63f0c2d", "sighting--4e6da89a-96b5-4662-b71f-d5398a4fe72f", "sighting--47496317-424e-4262-8f6f-f4fb7461367b", "sighting--a6804708-9292-47d1-9fe0-efe26de9e0d1", "sighting--17e35bd5-107b-4787-8179-cec79b753f1a", "sighting--7db7ddc1-b30e-483a-812e-df66139f5e4a", "sighting--283ce868-3dad-49ca-a268-1a43f6e23b78", "sighting--868262bd-1e2c-4494-b8ea-a8ade37c406e", "sighting--de863ed0-990a-42df-a02e-d128c82aff35", "sighting--67be05db-ec65-449b-8be3-b14d302a32ec", "sighting--44659f0f-b8b6-42ed-b3d2-ce3122a2fb9a", "sighting--dfeeab28-2ffd-457f-a4ee-19b753cef619", "sighting--65ec292e-93de-4af4-b456-843ef3fd925a", "sighting--92cfbc7e-48c9-4632-a9a9-e5c833280a14", "sighting--d50aedaa-04ba-4618-b457-dabe4641cf4b", "sighting--9d54bd83-46f4-4c3c-b483-19bcc51c86fd", "sighting--1043545b-06a2-4720-9d0c-b42c206b0fe0", "sighting--f08e9974-57fa-4f5e-9d82-b7f58ed7ca27", "sighting--6dd304b2-02f7-4862-9d0f-088270ccb9b0", "sighting--d6478b0c-dc48-4e53-9158-b12e5b1400e9", "sighting--37e41d6a-de99-4019-95a0-ad6eed1087da", "sighting--359d2dbe-f5fb-4dd5-bdc8-1976b386a31b", "sighting--ccd53d42-f301-436b-b256-1fed7821d0bd", "sighting--94a762f8-f8dc-4d19-a173-a532a1dc60a3", "sighting--08fb6d1f-1998-4b94-88b4-97444aec225d", "sighting--b0f94082-06a9-4926-abf4-d471eaaeed53", "sighting--b5d0a4ea-7d90-4fcf-be8f-da5e340890ce", "sighting--206248b0-fcfb-4fe4-b861-a3502b0766dc", "sighting--18955aaf-b12c-4796-9a28-fb415585810a", "sighting--4105f0e2-dc55-4cd7-aad9-317edcf86424", "sighting--fb5ed371-4e6e-4b7a-bc44-fdc1ab35e6e2", "sighting--ae0dd29d-7626-485b-8e31-8d238cb6c189", "sighting--7a919193-c46f-45aa-b0e0-1e2415160a42", "sighting--b9441c41-c712-422b-a030-2431b335f265", "sighting--87addcb4-7d8a-401d-a6e5-852fcb25cd59", "sighting--4930669d-360d-4ac7-94f0-aa04d6c27346", "sighting--1c6bb609-28c5-461f-964d-1bce78e48f2e", "sighting--59f4b242-c101-4485-8376-36b1e9b5197f", "sighting--f3a3e656-b2f9-4ba9-9be4-e741a0fb93f9", "sighting--067de774-32ff-43fb-85ef-424c3d914d9b", "sighting--c51c13a4-e788-41b8-96bf-adf9140d4ada", "sighting--62bd2ea6-c63c-4a23-a5ce-0cad5b854100", "sighting--e073a311-bc89-4d95-97db-fee12beb3aad", "sighting--d6441804-9cc7-4543-be5e-6dd7b38c0c76", "sighting--46ac89b3-f0be-4140-a57a-6f17458cf3a4", "sighting--778c1729-679e-4138-93aa-74242b0e24d3", "sighting--6d0e81dd-18b6-4fe9-9cd6-37da68050471", "sighting--36240d7b-faf1-4754-ae8d-3d418e33d064", "sighting--dcb9792a-275a-41e0-8a95-b3fa699068fc", "sighting--746788d3-919e-4c78-b6fb-94eac253e264", "sighting--bf5decc8-2cfe-4f64-979d-b4a8482b2748", "sighting--9fe3fe5f-28f8-4302-a3e4-ed6326a88d46", "sighting--180568b2-5ff3-4113-9558-e64498ae9dd8", "sighting--70f17537-7b50-40dd-b1fd-73730d256355", "sighting--104776cc-031a-4689-9be1-cb235a278ebb", "sighting--2f9704f2-d8ee-4c43-94f3-3c78a1861bbe", "sighting--b8631975-bde4-4a9a-9db3-302d93a0ec3c", "sighting--e5fff083-0bb3-47d2-b415-392814dec777", "sighting--cae0f088-6c24-4422-82b4-73e6babebbac", "sighting--a6daf662-4083-4508-88f9-99481f641399", "sighting--9fef2a5e-da37-4118-9cda-d0aaf05a4eba", "sighting--03837783-c6a8-4158-8a41-3d76f29ff360", "sighting--cbf90eb1-6c0b-41b8-b19b-1ac89850995d", "sighting--91b90735-5e2d-4464-850c-5aae8d03783e", "sighting--90047a3d-7177-4728-9274-b8b99e0b61b6", "sighting--ac77f499-feaa-4a63-a766-eb18bc67058e", "sighting--d5c365e0-5238-4f0c-a232-85a202e46696", "sighting--ff800afd-752f-4abd-895b-11b32b66e370", "sighting--c99cf17e-5933-47f6-a5fe-a3e3a0101aa7", "sighting--b003e4c9-44e8-4345-bd38-c1aaa531de4f", "sighting--2deb8caf-7527-4743-a0e2-08b20f6cd888", "sighting--f9559226-c07d-4165-b176-fbdc5b4bea6c", "sighting--3a152833-e1ab-46e7-8283-46b1c88736cd", "sighting--d93dd0b0-09fb-4832-8757-49c2d89ed29c", "sighting--ed971759-5cc5-467a-bc54-819dfc1e4d0f", "sighting--9158452b-1ab1-47f3-a81b-7e12a2e5f3c6", "sighting--7bc17c1e-c49c-4386-a021-555649dc8236", "sighting--d0e0d6b5-fc7b-44fe-a9c5-b3ed9cb72d60", "sighting--ec979b5e-4352-4cd4-82ac-7d5368ee47e6", "sighting--d0de65b9-34a0-4023-9db9-b9d057cb051d", "sighting--5448520d-918c-4184-aee0-e44ab4604108", "sighting--b84e5c7e-1d8e-4247-80fc-0abd4b2256fe", "sighting--ad63c2df-c227-4ef0-b473-e2476e2433bd", "sighting--fe5226fa-3ad3-4048-a702-6bca0c4357a8", "sighting--12913d71-6d3c-4828-8113-6402e30fee18", "sighting--aaeb0fdd-0436-4566-a5dc-bdbc9e03c061", "sighting--a75239a9-7e22-4983-a7f2-7954c1456005", "sighting--0d0e6ccc-be77-46e1-b66b-987b51e781b5", "sighting--a2e1b902-df7b-4a20-88a8-e8b583febae2", "sighting--5e31398e-59c7-4780-88d0-680dccf20334", "sighting--75c5c07d-ebbe-4fee-94b3-8ec62d594fbf", "sighting--6224991d-b0c9-4220-96e7-644d5fc8cc58", "sighting--02d8a0a1-59ab-4b62-89c1-0d622cb523e5", "sighting--f7a5a9b2-0788-4483-b54c-d111df4abddc", "sighting--22cd3ad6-9e70-496f-91fb-f8e7c559da23", "sighting--c7bf7deb-3f1e-4f27-a576-e547ab711c68", "sighting--339c79bf-ef61-4494-b8b1-ec288b9de33d", "sighting--dd2481b2-313e-4d5c-872a-6a26fcfac0cc", "sighting--aec179fe-fa78-417f-87ac-858986828d84", "sighting--46f70a1c-9e01-4300-9318-7bd01cc90fae", "sighting--447da494-ac78-4928-bc4a-18e204d774ad", "sighting--e0b676d2-0439-4891-a21a-fbcd6bb5f550", "sighting--df50c44d-c21c-48ef-b5cd-22a312ed4605", "sighting--c57891a5-c3ef-4092-a1e3-70c2571cf40c", "sighting--638f4011-c809-49b0-aad4-4c2de5180352", "sighting--88ada213-af0d-4732-bcd0-98d43feaf431", "sighting--66151374-1d3f-472a-844b-342fc6b428dd", "sighting--f109023a-8795-47cf-861c-5855631d3e1d", "sighting--5009ccba-6ef7-40cc-abc4-ddeeee676e68", "sighting--4d19f6df-f7fc-46c5-bf61-0def645d62a7", "sighting--310fba83-1df4-49a7-87c1-1c0c8f5397cf", "sighting--28dd6a40-65d1-49a7-9f79-117c354ef40e", "sighting--1b6dd5c6-d51b-408b-844d-7f37f1ce2d80", "sighting--74ea2d15-b5f8-4b9f-8f37-3b248856ceab", "sighting--c15101f6-92a2-47b2-9b2b-5e18731ec252", "sighting--83be6fc6-7a77-4608-a61c-69e04f22bb01", "sighting--00542c18-8887-4fb1-b998-49bb8ec1ec15", "sighting--fea51792-9e78-4057-866d-02f4bcdf2020", "sighting--d31af347-57ee-4627-84d7-2a1fb476e62c", "sighting--51a23a91-203b-48e4-b71b-72bcafc37654", "sighting--9675eb03-ca20-47cc-b160-8bfccb3acb2d", "sighting--8d7255a8-66ab-4c1f-b014-c3ce93a72185", "sighting--43461223-8f20-4070-b086-c993aac81029", "sighting--4f7a3bcb-6640-4b1c-9132-df4dab07cd5e", "sighting--f22b2ec4-8b4c-49b2-913d-f7efa1bc6df2", "sighting--084fe5d1-5f6f-4d72-955e-8d7c6ef0a3df", "sighting--5b2bb8c5-c3f0-407c-9267-3e2d196de806", "sighting--18163411-d8c1-4a61-86f6-2779c62689e3", "sighting--c7bd9b05-73b8-4c52-a21a-a33678f1382c", "sighting--09079c0a-b14a-4242-8f9b-cb93d9ab31cb", "sighting--e68c92f4-f2bf-43e0-8e75-ad9a0f6666d1", "sighting--5bf176ad-03b7-4b02-9f2c-624d603ec184", "sighting--d5b149e6-b7fe-4dc7-8fad-da5fc57b46a4", "sighting--66bc931d-ed0e-4ad2-91e7-53626ffedb5b", "sighting--8c7c5bce-9d6a-42ac-b682-ad2a0dc1d8f4", "sighting--c15e1696-4f2b-4790-a5cf-482f7e7b5000", "sighting--d2f3044c-62e1-46f5-8677-8cf9ffb69070", "sighting--b4550f28-8c66-445b-a919-ec329e80613b", "sighting--8438fe32-b328-4765-a604-aba2426e30e1", "sighting--6691fd2d-35cd-4283-95ac-7b29f93665dc", "sighting--86b2f30b-c9db-4b42-957e-7ee61d404eaa", "sighting--5779a4e7-5498-476b-824e-e73a3f5b07c9", "sighting--a5763702-117c-428d-81a8-053eda66e164", "sighting--67e246d9-eeb2-4707-9664-e9dfffdfc413", "sighting--4f961ad9-6409-43dc-a117-4757e1788825", "sighting--0f19a0fc-a023-4448-84d5-260178e59d53", "sighting--f8e05211-36da-4093-87b7-e8866fc759bf", "sighting--6bbb60e7-4365-428f-a84f-1b9f11a90a17", "sighting--724b7736-e996-4801-9435-de6b96080fc4", "sighting--38226f93-3fea-4549-9090-e72932bbd1f0", "sighting--ec54ff74-7fc4-4853-9f1d-afcd9c957e63", "sighting--d3059871-1152-487c-8d80-8a981e54b5d0", "sighting--b85aaa8b-c910-475d-a9a7-696560a099b3", "sighting--3ae98734-05d7-48a5-8cea-a2efac0f128f", "sighting--cc71f9b3-05db-4180-be21-6e17ee978482", "sighting--fa449c68-874b-42ac-b462-bf9bf1049f13", "sighting--b6459eb6-8eb5-44e2-915f-b62cd995b046", "sighting--d4055198-dda0-4106-a2bd-e92253e5418f", "sighting--dde4fdea-6e7f-446d-9dba-c26cfba82749", "sighting--ec79770e-dfbe-491c-a542-05213ed8f8a8", "sighting--3003d65a-56f9-4636-9d8c-0c3d3118c55f", "sighting--d7e5c624-7d67-4a77-8255-ae2f2a2bd34a", "sighting--a500b8b3-0faf-4d09-9b03-b5f30b31ad65", "sighting--962fcba2-5a65-4fc6-8b12-2f7b800e74da", "sighting--81e7275e-eaab-411e-8bc3-c0b5f8214271", "sighting--60620c75-82d4-4a6a-9689-8004602b7fcf", "sighting--34344836-60fe-4496-83b8-38cbd7cd812d", "sighting--71953905-1774-48a4-a496-153d4f5b4925", "sighting--cf14e830-077c-43ce-abfb-a188443ac8ca", "sighting--960a3717-233d-4ea9-8bcc-5b3644befa5b", "sighting--49fce138-4f5b-404c-a1ea-96a32d4c55b5", "sighting--a3588653-15ae-4a37-b72b-479b1d010fbb", "sighting--88b98a95-8fe0-4276-a40c-3c9c4dd7635f", "sighting--7387f26e-b675-4999-b712-d5e3ad7fab29", "sighting--2c8f2e53-2b0a-42e5-a7df-4f6e16f8070c", "sighting--5c383e53-1cc2-4298-a34d-9bfa319cfca6", "sighting--3763a420-3200-44a5-9642-abb0be7fac46", "sighting--c651041c-c40f-4712-b472-d7d65a8aae28", "sighting--1d0ea948-6106-4fde-ba4e-1ba710c31d8c", "sighting--36fd09c8-7c91-46ea-b753-1a936eeef193", "sighting--91132d20-67a6-492c-aa5f-783104f231a5", "sighting--26f3dbf7-71e0-48b4-b25e-670f01f77351", "sighting--11aa3dae-b599-497a-958d-d29b84e6d0b6", "sighting--93299112-676c-41c6-8d80-8b54c89e9c89", "sighting--7e15a289-4917-443e-aad6-e90723b5ad83", "sighting--99e6f3fd-1f92-42fa-ae95-847dbf4a1b47", "sighting--d8c38fb5-9740-432f-bdfd-5bc36b3d4fcd", "sighting--96ac35d8-dd0a-4851-b47d-692a502111dc", "sighting--6a7edd2b-56b0-4346-8b3e-b792f5575478", "sighting--483ea7d4-2ebc-4bdb-b718-f56fc99f9cbd", "sighting--6590909f-283f-4491-bd71-c378fa026983", "sighting--1803b639-dc39-49e2-9480-3391881c8a68", "sighting--2f35eb83-fb35-4be6-a89f-93484d96470e", "sighting--226fd358-083c-498c-9fff-47aa27ce5802", "sighting--b34bfa9d-f170-4916-8e97-8f6c6f8f9f19", "sighting--7a23f1c3-dd2c-45a8-848e-79f868045c72", "sighting--6dc93606-ac6c-489b-ad77-7c557e70d122", "sighting--fe030bcc-946a-4a0b-b065-1617fb9434f0", "sighting--cd7729aa-46b9-4e56-9ff1-fbd84cd9d205", "sighting--ca8a528b-920a-4708-8307-23fcb6ac2d31", "sighting--9040b6ff-2aa6-42ce-9ba3-daa1722d9ba2", "sighting--5c2bb8c8-d534-4c20-be30-3375e52a1b2f", "sighting--b659d0bd-a3b9-4b5a-ac90-e5bfaf0bfa45", "sighting--8c755f29-62c6-4c04-a1c2-4ac8bf034112", "sighting--da8e7aad-4945-4243-87b9-2fb0d08c310d", "sighting--08e8e584-5efc-4b20-8c22-15deb2c28c28", "sighting--613cde27-2df2-4865-9dda-ef1a317ab260", "sighting--86b6e7a0-9ed2-4d87-a3d8-211284477c9d", "sighting--6fa468af-b14a-41aa-874b-dcae433e3bcc", "sighting--8588a919-0d10-458f-b321-f17b3e3b07ac", "sighting--9af34ed1-e01e-4b7b-ac07-975edc7beb7b", "sighting--cd8abf11-ba87-40a2-8ecb-fe9f115b30d5", "sighting--495c022b-2c2b-4ba2-8c0b-52e2696b2cbb", "sighting--5aafbb67-2b45-4c6f-b791-759fe562f715", "sighting--344d59fe-dc52-4973-9029-a924a283e370", "sighting--9361067a-4784-4040-9a17-791242147c46", "sighting--7d0f4f03-112f-4b6b-ba6a-2ce7ce750bb7", "sighting--aeb24522-21df-4ca7-ac2d-fbff915576d5", "sighting--1606eadb-0c52-4e75-9989-9641f951c4a4", "sighting--d93e0aaa-1f5b-4162-bb49-78bb1536ff6a", "sighting--5eb4798f-5bd2-4574-ad08-a99bb1b73791", "sighting--51c5b72c-b338-4ba8-a5f6-7daf5b796c47", "sighting--2228deed-8cba-4791-8258-95cdc7dfaa6d", "sighting--eb1e0506-8346-4184-971a-69407c33ab5c", "sighting--710a6710-5b85-4e0d-a16d-10363a73b6bc", "sighting--9d20c0ab-580f-4179-8438-121ff6f93d52", "sighting--d25fff3b-faca-4255-8b59-2b879d37dbd4", "sighting--eeb817db-3bc1-4567-a608-c81299583137", "sighting--3a43021f-e9c1-4866-9bdc-98881cbe4c78", "sighting--2e29a4af-49d1-4841-9383-07e7a5ceb72e", "sighting--ec3da530-ea6a-478e-994a-1728a7a8424f", "sighting--93236a28-8053-4edf-ac15-cb98923c6f90", "sighting--63a0d9e4-7f66-4f83-94c7-532230f82273", "sighting--d2f3ad86-17ef-4603-a571-23d6e499a858", "sighting--7bdf7d23-0748-4139-99a6-04e16eb3f38d", "sighting--057d7f01-6f56-4c29-89c3-bba5b75ce941", "sighting--49af3717-364e-4fa7-abd9-03ae1ce2e44c", "sighting--9e11faba-d648-42c4-9e0d-4473520b178e", "sighting--52f78043-cb0c-4b33-b36e-061965bbe736", "sighting--fa3248db-7d7f-4987-bcc2-00d2709be691", "sighting--574875fd-0906-443d-ba61-dc2bb4056bfd", "sighting--8e7bc7d9-6ef9-4663-b015-4bb51a956058", "sighting--d989c5a1-c01a-4c7b-b09d-b4aca52074bf", "sighting--ffdb1bcf-3cee-42af-9db4-b195bf825ed5", "sighting--b2c5505a-d9fa-4119-bad0-8f86508b526f", "sighting--08b65b6f-1318-4a6e-9528-852613927c69", "sighting--72918e7c-1e9e-441b-bb76-7344fbea2341", "sighting--b7752d55-2edf-4c36-9f00-4802bf348011", "sighting--a18862d8-cbca-4462-9244-a6424e445077", "sighting--dcddf154-2f85-40f3-b9b5-577e3ee1c6b4", "sighting--c672ccd6-fb7c-442c-8b9e-3ce9da2b979a", "sighting--650518e2-8e75-4157-8ca4-0ae5ab981701", "sighting--df023cc7-1011-4a1c-983b-a38f3ed2d184", "sighting--90037fca-2824-489a-939f-2dac215e7a7c", "sighting--ddef9247-65ae-4ef7-873f-2600c041037e", "sighting--67bacfd4-93f2-42c3-8b14-73abcc779bb3", "sighting--7e56dc9e-291e-438a-9b79-27dd9ee36999", "sighting--bf964d0f-1a27-4799-b9ce-08cc92f2e3aa", "sighting--95b0336d-b353-4a9c-a0a2-e254c517a235", "sighting--0173f064-1ef7-4164-8799-1fd5836722e8", "sighting--1c392339-207a-4483-bd59-d09d278f8706", "sighting--db53266f-42b2-4200-a56d-afe4def290eb", "sighting--3875110c-c87e-4d28-b3b8-288a4009a5f1", "sighting--0b24a79b-de5a-4f51-8c03-004b7b0914a2", "sighting--a4102bf8-1860-4ff6-9755-4c1f9e2e13a7", "sighting--c2fd8bff-0642-4bf1-a687-07f71388e144", "sighting--797e228d-d840-435d-8dd2-d236d31eaf6d", "sighting--dc54c515-ec4a-483d-9316-b64bba37c83c", "sighting--24818973-bd2c-4de7-ba98-8520ed3311c4", "sighting--0039e616-84d3-4583-8bb6-8191b8bc0f9c", "sighting--82e5cb78-f708-4371-bcac-97b67916605c", "sighting--e506518d-ab43-43e7-8c7c-2838d3d70946", "sighting--b0b376cf-45ac-4fd5-9dee-16824159a151", "sighting--7a5e3058-b30b-4319-9dbb-4e078e37d72b", "sighting--b0cc38a3-6767-4697-82ce-a08551fd0132", "sighting--205d3a66-6afa-41bc-840d-70cf842cc103", "sighting--3b55db63-fcf7-41e0-832a-6952ec82529a", "sighting--7b2c65d0-8fb7-45f5-93a2-73472ce40c4f", "sighting--5baf44e2-a3ab-4c19-bed1-17166be4db81", "sighting--c95aae7a-9c58-4c13-a023-0b30e75d52cf", "sighting--df9f1f07-e5cf-4b32-ac18-168a5402763f", "sighting--b58b5367-b64c-487b-9cab-a4fe29406665", "sighting--9af065e3-6b85-4e36-be67-f364360b430f", "sighting--7c8c669c-01f1-4780-bc8a-188b02c7d052", "sighting--42ddd025-8473-4403-87e4-51b430bf5a99", "sighting--a066c1df-32d8-40fd-a4a1-9cb9ce3dd1dd", "sighting--9f2765e5-8640-46d3-99c3-2fbfeb89a072", "sighting--0d507705-c5ca-46d6-8678-b3d610f29858", "sighting--bfe2c9de-c52b-40de-b4c6-ade9dd6f673e", "sighting--b5c2dd4e-e9fd-4ad7-a861-3e47a29f2674", "sighting--c9d95bd7-9979-41e9-8777-0a57930c37a3", "sighting--c7ac42aa-26a4-404b-b090-0f8aa8265ba3", "sighting--b0943454-bcdf-4180-b634-9243fccb357d", "sighting--07c9a204-e54a-4113-a5bb-591264588ba4", "sighting--1ea3120d-806b-4922-be55-426ed092329e", "sighting--d8480f52-816b-42e5-bc9f-3fba700d30b8", "sighting--917b53e7-c4b3-41a7-9e68-73be36826b90", "sighting--3763cc1d-2fcb-4d5c-b837-44c2c137331a", "sighting--4196e1fc-845a-44fc-9ab8-ff54bda7c024", "sighting--71fa21c6-4b78-47bf-8937-653c5a98928a", "sighting--84c1011c-ec55-4603-b56f-edb17dc9b55c", "sighting--d6d6f181-7c16-4868-b4d8-d004051ac6bb", "sighting--f279d132-5931-4995-bdaf-134d920dca62", "sighting--1d51834a-a978-4e20-8c90-c8acbdf27a47", "sighting--a127326d-c595-49b2-9d2c-9cb3b57e385a", "sighting--e4187e8f-478f-47e2-be1c-7d3cfdafe998", "sighting--d73b55d2-c2ac-42bc-88dc-0285de9714f5", "sighting--ba725fe0-8872-407c-a76f-78b8bfd9a496", "sighting--e343de0b-e632-436e-8bfd-7e3c998a7d65", "sighting--d6bc3c71-2be7-43fe-85bf-a8cdee7fa357", "sighting--c218f9ce-2e0d-45a7-831c-d5f7000e1806", "sighting--537f8037-24f3-4aa9-8e0e-e1b8074e38ca", "sighting--dc9b8b47-15ad-409b-b011-31581bbfed9e", "sighting--5d162fc6-18e1-4b73-95ea-d0fb933e9de0", "sighting--ff03b73e-ab99-43f2-8701-bcf182568dc4", "sighting--8807a1b5-2592-4880-9de7-17e7e1bd8b87", "sighting--5f70a9f9-e4ed-4b2b-a3d3-057f6aefa355", "sighting--2bb1efd8-6ab4-45e3-bb28-139f2257b367", "sighting--f4f3c711-6fe0-460b-930d-d61d89199bf6", "sighting--828c8602-c163-4881-868f-9d8a148cc427", "sighting--c5f75ecc-3734-4ab1-baac-07f637c55b8c", "sighting--f86ca5a8-fa5b-4813-ba2c-8b3aa9c32b7b", "sighting--1fb625d6-fda3-4b99-99b6-f4c5684eb384", "sighting--a27d1234-b0b6-401a-bbf0-fb07089b55f9", "sighting--3d8a9f19-6be0-4a6e-aabe-5349bcd476f1", "sighting--41f692bb-c5f7-4063-83d6-fc31c55843e7", "sighting--4c77bbec-e870-44d4-a97b-4f0db64c6c5f", "sighting--e22d6d5e-54a0-4ed0-a608-d153f7de884d", "sighting--851a801e-4423-4989-8564-dae4be14890c", "sighting--827f7409-0e29-481f-b104-b9f2a65f1e6a", "sighting--c5ae44a6-212c-4967-9401-b960d23ad6db", "sighting--52256de0-1766-47ce-a7d7-16d1cce44af8", "sighting--f7ff1332-65ce-449b-83ac-8a76247f1293", "sighting--512c00e0-c805-492b-8b05-62db78fff04b", "sighting--bc7f2681-94e3-4101-8a39-6a6ddf321bee", "sighting--671d6176-c18e-41c9-8e16-fbbad4a55e1e", "sighting--52f05b23-c3de-4b11-8f6d-619be3bde8f1", "sighting--aed1ea8e-7795-4351-8476-2775f1be535c", "sighting--dc2c8ba5-9c15-4003-8598-e93b081115da", "sighting--ddc1abb1-4765-4046-89ad-2ce7a5ca3339", "sighting--566f0c93-9996-467d-b157-ab3ab12d2a3f", "sighting--67408e80-6009-476b-a91e-75d925b36bdc", "sighting--a84b7117-79da-43da-b719-59dda845cc04", "sighting--f1e610fd-d8f0-40a3-8d37-a1759cdaf350", "sighting--8b98a82c-0060-4fa8-bd74-39d02badc173", "sighting--2f4761e6-2486-479d-b003-615615e8c063", "sighting--080ba0dc-020b-4e78-b519-3fbf25434d5b", "sighting--9b7a532d-2352-41e6-85c6-582d87cf88d2", "sighting--500113d5-d6eb-4bbe-bc43-d80d7195cb24", "sighting--2a78a326-9526-4254-8e9c-521afb6b623e", "sighting--1858cb65-0481-4586-9576-aea45cce3b35", "sighting--18575379-e45d-4692-8336-60070329c86f", "sighting--696978a7-6a2b-4c61-96fd-d7b109dbe663", "sighting--fb2c7cec-26c8-4065-a510-4788438dfa7e", "sighting--147e8fb7-b043-4517-a10a-c11dbbfdaba7", "sighting--a70825ce-b23a-431b-8151-60c106b09990", "sighting--0fdfba02-24b6-427f-b07b-3886a22871ee", "sighting--5d4f7bfc-4dbb-4281-b102-a55b09e8015b", "sighting--b4e7f66e-3c7f-49b6-ac5c-1dde2ad1f790", "sighting--688ae6ee-dab1-4809-a8d6-a90dd8d3588b", "sighting--65456efa-d3ac-4ea2-ae8d-96e083c39cb3", "sighting--799137c2-0a0c-48bc-83c4-d2cf15a137e0", "sighting--2148c8b1-f23d-412c-9b28-3b5eba777660", "sighting--2579bd97-b4c2-4ad3-b73a-3249c864dcfc", "sighting--de9cd7fd-9abf-44a0-81d1-a7157d58c8e6", "sighting--b7cd5934-c7d0-4a8c-a127-ad769016ca6c", "sighting--98253084-3ac7-4fd0-9134-529cff66221f", "sighting--3978e635-180d-4a43-83f8-ac5fa2fed105", "sighting--4ffa8a69-1f67-49e7-81c2-2865897b3829", "sighting--b2391a85-8585-49a1-a0a2-2257dc7e0900", "sighting--04cfc9df-8a69-49bb-b118-03f66a751f8b", "sighting--36b3986e-8f34-47b1-92c3-bd76d2fd7751", "sighting--40953d3f-48fb-4cd3-9d09-709928c48e5c", "sighting--a0fad6ef-7165-41fc-93df-d088cbce471b", "sighting--70328fc3-213a-41fb-aa64-0d3805cab9c1", "sighting--fa849071-c9ea-4b13-8532-23090a2c9e62", "sighting--910b9003-dd9d-486a-bcb3-0c3a8ceafef4", "sighting--5ac87ec6-97f4-40a9-b355-18c2fd615605", "sighting--a5dea0a2-f2ea-4183-972e-22e084a3268b", "sighting--f4bf612e-6ed2-4949-91d5-377c4dc791d7", "sighting--34374b90-5b5e-4a38-bd34-eb05c5221271", "sighting--8969c12f-a895-4607-a3d5-15b11ab6c91b", "sighting--0df6d8a5-35c2-4bed-a4f8-4e1072e2ad6a", "sighting--2f0aa4e9-c020-4df1-9de2-9b6085e9ba36", "sighting--8481386b-e9b0-4271-92bf-5e3608988e3d", "sighting--d206fa49-2e58-4907-a84d-f0f983e2ea01", "sighting--ea807ce3-64f3-4537-840d-e597bedb3487", "sighting--1c05dad4-1fa3-4af6-9d3b-a59295dcce5a", "sighting--db1ba165-19a2-4bdf-85f6-85286c56c64c", "sighting--5a14b2c8-26d4-448c-aece-6740c16f401f", "sighting--161d59e2-bd1d-4b13-8b85-323f4209b3c4", "sighting--aeb41b7d-bbf0-4b1d-9796-2f28b526e793", "sighting--71c95c4e-ffd9-4148-be2b-eb2bbae50c73", "sighting--4b597a27-4682-4509-8e95-59a5a6d52c87", "sighting--9c37885f-8920-4112-b325-facf5543414b", "sighting--93a301f9-20eb-4c98-82bf-135597f8dc46", "sighting--66683d6b-e72f-4301-89fe-289bf8027494", "sighting--270e0f44-7686-4acf-b69e-c708247b7c37", "sighting--90475f34-e3f7-4d08-8146-0147ca333b0f", "sighting--267fc34e-c1fa-473c-b1eb-fb549f1d67f1", "sighting--e6db3576-411b-4e7c-a6e4-dcda3848b3de", "sighting--95786a49-4a92-4a9e-98ba-a2379e0884a0", "sighting--b9a1b8b1-f04f-42d0-a80b-4d6e7e1dfb53", "sighting--5ec55158-c57e-4d64-a1b5-e9bc2155fd43", "sighting--3196f133-327e-48e9-98e3-fa5a1e23ee97", "sighting--bd4fabcc-500a-412d-9fbe-2b7dd354a080", "sighting--e0095f66-0a4a-471d-bbb8-b8b62fb392e9", "sighting--a9935331-78fa-485a-b054-5b68e724d070", "sighting--94ac4678-8d8e-49e5-893a-6d8cd6222241", "sighting--47022c85-14df-4a4c-b3ce-b0c73405d41a", "sighting--99ad50e0-247d-4512-b845-ffa62d1ab99c", "sighting--cde6c635-cb2d-4caa-bc7d-a3d2b32bb291", "sighting--7e23bdb9-1da8-4f97-bd71-5dd420054aec", "sighting--04c4bb38-0aee-4c58-946b-71706e297014", "sighting--99eca2a9-7eef-4853-9dbc-aae97b8fbeda", "sighting--586567eb-1714-4010-bd1e-833b393e3801", "sighting--90f4ad75-888b-4ae0-95cb-ce3ba1642ce5", "sighting--b5ba361b-7278-4291-81e3-f05e4f5af95b", "sighting--2ea89a93-9e0d-4bfc-b11f-f801c4369429", "sighting--3402e849-bc57-47c4-81d5-efaf1837ae76", "sighting--92390cb5-503f-4a67-bb59-6322779bc197", "sighting--0d69780d-8726-4b98-8c99-4413892330c6", "sighting--833391e4-ee59-49f4-8cb9-a759304f1ec7", "sighting--d29fad8e-bcf5-4624-9fa7-a697d37ea8ec", "sighting--82784504-bc80-4369-8ca6-55259058ac9b", "sighting--5db744ed-e5fa-4c17-8c40-c1d2f0ece826", "sighting--f125b00e-83f3-4879-89bb-9ff0553e5201", "sighting--68d4e416-c1f4-42a3-a713-97ab2ab67913", "sighting--8f0ca074-1658-4a2a-a8dc-88f011641986", "sighting--0cb072fd-7ceb-4e06-8f33-2fceee2c242a", "sighting--bd123621-931f-4815-b1f8-28ef1b3f59e4", "sighting--537d61c9-c9f9-4452-acd6-5c166e753b67", "sighting--29cd0323-fbe3-41ff-8ab6-4e7e0798a808", "sighting--b8d7cc0a-da5f-458f-bb64-26ba83d629e6", "sighting--249dfc10-1403-452f-ab8c-00ff5f4b4d2c", "sighting--df93433e-0d0d-46fe-b547-153a88be470e", "sighting--816e8a1b-9171-4494-b5f4-dc59a277825b", "sighting--8e57991b-24ce-457f-82ae-ec0c57798d3f", "sighting--d0b97c38-0072-4cdf-8e40-a79799c4121a", "sighting--6d06b3b9-98af-4b70-b977-dbcd960cb631", "sighting--1ec10c32-4bb5-4cb8-97a3-3f7a0976a6ee", "sighting--3eb1a715-2c04-4bab-9fe0-08d9868f96c3", "sighting--72b18e75-3b00-4d74-9f14-67b2d7242a53", "sighting--c1d053ed-28f5-4e09-91f0-a59cede619c0", "sighting--f0be08b5-19d3-4091-91df-5bd9bcb29a06", "sighting--d311f6c3-35af-45b1-aae1-b1e77b2c833c", "sighting--a7960af2-548e-4023-9c6e-7d5417e2852b", "sighting--79eed1b1-db06-4c70-ad2d-690c75994a19", "sighting--d506392e-309f-4b7c-8164-ac7470104acc", "sighting--b6fb0457-4a0b-442c-89e2-1fe479468291", "sighting--587b5e11-64b6-42d0-85b5-22ecbf9c7996", "sighting--dbeb7a6b-bd2d-47d7-89cc-098139a2d815", "sighting--4dc70b2b-f838-406c-bc15-afc62f27f3ce", "sighting--c7389979-1c55-440f-b2cc-bf6c9f5b1cde", "sighting--17adfb5e-f0ca-4a4f-aa9f-af0c0d9b4e9d", "sighting--ec358358-8556-44a2-938d-506e99b269dc", "sighting--bcc6028a-2060-4b75-9d85-772d80a8840f", "sighting--5dda05a9-f94e-493f-b074-aa8aaa6a1df1", "sighting--1ef45311-2664-466f-9603-8cb0ee328b29", "sighting--475c2297-aed4-4bb9-ac2c-8a6a39cb6d76", "sighting--6a43f83b-2edd-424f-9672-609f6bde87b8", "sighting--8d457f56-039b-4f83-9ffa-4b59dbba4073", "sighting--ae741423-76c9-4331-a765-faf91756484d", "sighting--d44d841a-ee67-4f24-be63-f3753e9f54fa", "sighting--43b573a5-5c5a-4641-980a-cbf0eab094bb", "sighting--20ba09f8-f03b-4ddd-a4e1-fab8381d2e3b", "sighting--a5ba4248-663c-413f-bd0f-32356facadee", "sighting--76b01317-3eb2-46a4-b05d-99b35a76b906", "sighting--444ad047-0bf2-4d55-86c5-6b29ad73f107", "sighting--30b685c3-9e30-449c-a7ac-8401602e5969", "sighting--ce137843-3948-4d9c-8ecf-0bd9496bf748", "sighting--97a35d47-1c5b-49cb-8716-9e84888d1b72", "sighting--af7f4537-f298-4ea6-9791-df359113787a", "sighting--6622bbde-e445-4425-91b4-54f7e4dfc12b", "sighting--efa658f7-3f83-469a-997d-8fa070434e41", "sighting--682071b9-4a97-4783-acd1-41fbdc5be6d2", "sighting--f86b4ffa-309c-4d08-96f5-f5dc581705e9", "sighting--6281a773-a73c-4647-a2ca-9e6b6dd2de91", "sighting--2927c84b-697b-40c4-9b8e-e73f26a31e96", "sighting--c4477655-6d12-4e70-ade1-407fada63a6f", "sighting--48fbb47a-9e46-4db4-b7cf-8d72fd70eae3", "sighting--594f17d6-4787-4797-b9d1-213739e24dac", "sighting--78c121f0-13ae-4b4b-b073-36260559bbd5", "sighting--95613f65-0d97-45a3-9313-7298cd05a15b", "sighting--ccdd8d8c-62fa-4514-8ba9-cbcf5af33fc2", "sighting--060ece5b-2ea1-469b-b2ae-c3d964e94cd8", "sighting--4d128b07-7a43-4b69-8210-3fe335eab492", "sighting--77437f9c-cf8c-44c2-bba0-33aa04dd1801", "sighting--35a7567c-545e-48da-8dd6-7be58b88c6dc", "sighting--2baac3c1-7ecb-4d29-b528-a2da8a7c009c", "sighting--4caf0bf9-42e4-4ecc-b953-038fd6a02dc6", "sighting--f8a5dcbf-9114-463b-b9cc-d5cc7f927f9b", "sighting--9c80a40c-c628-4160-acb4-6324a08259b4", "sighting--a02b9fe8-6c54-4631-b980-880c9403ee59", "sighting--43de4f4e-a332-45b0-aa49-3b45dfc5d092", "sighting--3a217bd1-4299-41f1-9f94-7bd47d72ee68", "sighting--846c0427-4d10-4ef7-8ebd-14f1a33e6f09", "sighting--51a63cae-a711-4cfa-a830-8fcdeaef144d", "sighting--6687c87d-da30-4105-8bd7-3ddfd7e656e5", "sighting--868dd284-6790-4858-b960-89b8e15441c4", "sighting--8837ea8e-5a66-4a45-ada8-051b20b40645", "sighting--0c3fa221-5bb3-4693-be66-c3e0156dad44", "sighting--f0e89a33-a636-4683-8bc8-01f47ce3ed9c", "sighting--d5b4bb82-5b41-4f30-b772-1981e66b588a", "sighting--71d1c763-ccb0-4313-abe3-646ea6f65ec4", "sighting--0f7de3fc-8db1-434f-9fae-49940603423a", "sighting--2264ec0f-e11d-497e-869e-5a7464c3163d", "sighting--1a82f5c6-23b9-4d04-a319-ad9b8f0c47a0", "sighting--ba4eaae1-8bdf-4ae9-aa2d-6ed34829e03f", "sighting--068e8f47-4913-4fe9-b96c-d47fddfd0837", "sighting--42a3de7a-84eb-4138-ab54-64339fbecac1", "sighting--fddc8a81-5418-43f4-93d2-490677fad6a8", "sighting--1bd03436-0e4d-4ad5-8c0b-e9e4151cfb61", "sighting--c88f80b7-27df-49bf-9f97-5fb49b81dd72", "sighting--68ce6598-e430-4f33-beb1-4cae6387c113", "sighting--1863b41c-7292-4385-8b51-83fab7828efe", "sighting--bd0b7d9b-33a1-47a4-8904-2e010067ed1e", "sighting--189ca241-4058-49f4-a7d2-d0236c89bf23", "sighting--7cceefcc-b6be-4b65-b66e-0ca155b027a5", "sighting--73828f85-d9ac-4365-abb5-8fac92305061", "sighting--32be6b05-3cdc-4243-beab-6bb65b51d86e", "sighting--26f78445-8fd6-42c6-a60a-cde62a9fa408", "sighting--942865e2-1a8e-45d5-bc23-2bb519ed387c", "sighting--2672b169-4470-48fe-816c-4ba846ddd52d", "sighting--21f28321-8631-4ef3-a55a-9ef645f16a71", "sighting--f673c1a7-4a18-4462-ae0d-f439f3892b36", "sighting--66ca5cc5-5002-421e-aa98-dbd3cb4c40e4", "sighting--818608a4-2b04-4950-b03d-a75ee3fc3f84", "sighting--2026c401-4232-4f78-8ca2-88b4a626258b", "sighting--b11da47c-d71f-4853-8b5d-538138b46226", "sighting--3f180b01-405e-4ce2-ba9f-7f385fe54c47", "sighting--ac8a1cec-b041-41b9-8b94-1c8c2e4003d0", "sighting--86047dfc-1122-44fa-ae4a-e59d093aa9fe", "sighting--e1d99a9d-4b3d-40ea-8aad-bfcd71c5aaf7", "sighting--5a0e4495-60be-4320-85fa-453a0c649289", "sighting--f6ccdf88-8e59-44fb-9377-6760ba28f42f", "sighting--35879433-4f20-472b-a074-13370a5c73fb", "sighting--e0a42c44-0852-4066-99b2-b84aa5ed4c60", "sighting--e7a2184c-f7be-4ff9-b7c3-274e2f4d1de0", "sighting--ad6e40b5-a031-452b-8c39-242f6b23c4c7", "sighting--1e013396-7dd3-4d42-906f-d04de039dd32", "sighting--95bac2ef-cff1-4597-9df4-dd1837df9558", "sighting--2467883e-bdf5-4bdd-b1ef-e08ed97b877d", "sighting--7b0f820f-9a6e-4120-a527-91e9eba0844f", "sighting--16114b16-28bb-4af4-8996-2ae5831fa4aa", "sighting--fcbfcc80-5b5d-491a-8851-b857fd0b84f7", "sighting--bd16845c-a5bb-440f-9f4a-2469ae1cb33d", "sighting--cd29848d-8421-4cb5-b0bc-57708063f564", "sighting--29e5db02-d96a-4cd6-90ea-c06e21c24086", "sighting--5565a4f7-f889-4aba-a5d9-128df023f17c", "sighting--d1f1fb64-e4a7-4e06-933a-c0e5d7559afe", "sighting--6e44a77a-c5e4-48ca-a5c7-ae577e6b7eee", "sighting--40842784-3953-4c9c-b9ca-b1014469898f", "sighting--71189405-c2ae-4d61-a72d-d467d24062b3", "sighting--f4ac1256-a6ef-42e0-81b6-fc8073d17078", "sighting--b607955d-7c3b-4be0-ba43-527ac5795706", "sighting--819005c9-553e-4ab9-889f-daa5e930f70d", "sighting--45e09fb3-8948-467d-8594-f910aaead5de", "sighting--a44bc583-9368-45c3-9ecd-b6cbff32089d", "sighting--8c3f5e2b-29bd-4f0a-996c-ee75e1fd464f", "sighting--c2db2083-fba5-4c89-b210-eb87c848deb6", "sighting--02293025-1403-4124-adf8-550abaaf5422", "sighting--4c4da456-7b61-45b0-bef5-baa63c76cda0", "sighting--c4c3a12b-6da8-4398-91b2-c87ae66a3b60", "sighting--90ef50fd-06cc-47df-b27a-c2ec51280763", "sighting--59b09c67-1db6-45d5-83ac-c1db7d2e5689", "sighting--169e128a-b803-47b9-9660-511312273b56", "sighting--2fa54367-c3fd-445a-8d3a-1bb109e0eac6", "sighting--ba059b8e-5f5d-48c5-ba48-e3fa11b07392", "sighting--6ec4b7c5-508a-44d9-bbce-06666e962c4b", "sighting--7d4cb506-1ee4-4c6f-acde-dedd55f939bc", "sighting--1b7eb2e0-d5e8-4a0a-ab0c-05b32aa1044a", "sighting--db5f29dd-ea0d-46e2-a38a-887a34707070", "sighting--4bef6dda-7e72-4623-93a1-f6b07caf9cb6", "sighting--17cd86e7-8222-4252-9b1d-92db4f96a778", "sighting--eb478849-841b-464d-ae96-a9fc6ee262c2", "sighting--4bf97c0a-c1a6-435c-b5b9-f031b80fa2db", "sighting--1cc0a405-e8f1-4123-b7a5-eea8d368c8ec", "sighting--fb063322-b467-4a8a-a4a8-9d9693097656", "sighting--5174c3d0-d76c-4e11-8567-8eff9d750b7b", "sighting--0b64a0f9-312b-4521-b789-64dc544cfe2d", "sighting--c32caa3d-8dd5-4fb9-bc9a-96cd003217d7", "sighting--61e89a2e-5038-43dd-854d-1febebcf73e4", "sighting--f58b15ff-5334-48d3-b79c-63eaeb177259", "sighting--36977932-adf6-4ade-a777-4aa1991cdcd4", "sighting--4a7050fd-311c-4d86-bc68-f16f9ca44a5f", "sighting--ae93d7e5-9282-43b7-a6e3-c52c015b170d", "sighting--a696dd5a-2cf8-4fb5-addd-dba40d7e8818", "sighting--44bbca3f-a8a6-412b-84ae-2075ea025e41", "sighting--c1062849-ed09-4af8-8098-58d7c2b33633", "sighting--56c5745b-460c-4d08-bfa4-1f0d8e092b34", "sighting--a70a681d-3793-499a-9237-a3edd389be2a", "sighting--756ada1a-bc7b-4cca-8ce3-bb3cd264bcbe", "sighting--6ea22fcd-823d-4d26-b50f-3389a7595c08", "sighting--7c40d663-5d65-4411-b214-3dbfde006aa8", "sighting--bd9290c7-183a-43cd-98af-65a4378430bd", "sighting--fff20ec4-3f21-4c2e-ba4d-2b6d117466b8", "sighting--01a37659-6c61-4335-b405-7f7c26701841", "sighting--01994642-6d85-4a9c-8aaa-6c4c5d5d17b9", "sighting--07264a37-1ba6-4167-af0a-156509e1a376", "sighting--c753697e-06f8-4fc7-9140-5345801e0058", "sighting--25e3aaa7-6666-4a20-a5f7-10895518ea9b", "sighting--ff152d56-ac9c-403e-a7bc-6d3e4cd38a8b", "sighting--c815fc1f-27a4-47b4-ae78-39615710b9b6", "sighting--e23f59ad-a96d-40a3-a150-422673d35316", "sighting--c9feb6d2-ef21-4a4f-b9ec-900fbe5b3c4b", "sighting--ff84455c-961c-40b9-89fc-937fcd5ba50e", "sighting--d7eb574d-f128-4cb9-8549-2323d1490775", "sighting--1ed8b03f-31e8-4dff-b432-28b58bf6b6eb", "sighting--bcb63825-458e-442f-9ba0-6f952ce5361e", "sighting--bd241d0c-19c3-4366-acde-51d070ff1b6e", "sighting--debb9416-6cb6-4b3c-9299-d767facd10b0", "sighting--91ab0ec8-68a9-450a-8886-ea9ee3f242b2", "sighting--1c4cf6e6-2be1-4fd2-b9b4-80af7ed6a256", "sighting--746ab8e8-3639-4247-891f-25072a267e81", "sighting--159c58ef-bf10-4525-bceb-d85fbcd60101", "sighting--c67a2353-b794-49e1-a61f-2682de035d5b", "sighting--09bf5bc9-4fd9-4999-8325-f0ba6f65c37b", "sighting--ede82351-bacc-4f70-8e84-88b1383e11b9", "sighting--5462162b-03cf-476a-bde4-67d2b483ca56", "sighting--0c315045-9508-424a-bd76-abb369fcd831", "sighting--1751dad8-934d-42f8-bf79-8c05f9b3c2f5", "sighting--79705a10-e401-4c00-a0e1-b2bc7669e84f", "sighting--29f659e7-e4e9-405f-96f1-908118506de7", "sighting--019f4612-8851-49ba-ade3-a7dc21b3b6e8", "sighting--0312fc76-0138-4974-93cf-d968268267bd", "sighting--dd018f69-896d-4710-9d55-d1b0761e242c", "sighting--8e9d2d6d-199f-44b1-bbb4-c32511da7592", "sighting--420198bc-afda-47bf-a960-b7e7b92a9ad1", "sighting--b97f6e19-7886-4cc9-b170-92db18c8094f", "sighting--018ae030-475d-4811-a73e-a337e7c6cf83", "sighting--6bc23585-c9d1-4850-ab5c-f95a399a2f2b", "sighting--16df01e5-4d52-4f81-aee2-89d7134c9b86", "sighting--df99cecf-4335-4b5b-9b75-f62d41da8c55", "sighting--e7b0f665-e7e4-479d-a2f6-2a4b66257cd7", "sighting--4b4036cb-b288-4014-a3e5-9ef7167b37c0", "sighting--6a807c5d-efba-4dd0-a0a1-5e0c63a37b42", "sighting--e928bb0f-d4e8-44a1-9358-f4fdafaabd24", "sighting--e0d729f5-617d-4e9b-ac13-71ebaa8b27d7", "sighting--85300ae4-e5be-4de3-87d1-d7d0e1051347", "sighting--9d662934-a71f-4b80-bfeb-b30db6b2f24e", "sighting--05907aa1-dd5c-4507-ba55-4a08f8dbeb59", "sighting--04a3fd37-efc7-4c26-930b-c9384fb10e5b", "sighting--309f0944-5cea-4f0f-bb23-926279a7ad53", "sighting--757c26ab-6610-40dc-9443-4d354dafb92a", "sighting--cce31306-dc3e-4263-ba0d-dfa0219a8a8d", "sighting--2448d7a8-3229-407c-96ef-35af086e8cf0", "sighting--94159e24-3653-42c5-bf64-f77d9206212b", "sighting--05ff216e-0e82-4bec-868b-385edb7502d4", "sighting--bcbb8a13-0025-41d7-8490-14820900e178", "sighting--c040f03f-0b54-4172-8a92-c6ee64efe700", "sighting--66015d64-89ce-4c49-a071-78b37ab91c0f", "sighting--8e29cc7a-22f4-4249-b5a3-269b752c046c", "sighting--c1570ddf-6542-426c-b29e-e5c35658c07f", "sighting--23867e99-51e1-43f9-b8d6-172ad8daf290", "sighting--17ef1d68-9f30-47d9-a076-ccf7e9d82e77", "sighting--2b49b5ed-27cb-4ad1-9821-103990062003", "sighting--42a15f89-b234-4df1-9fc9-d01e34ba5da5", "sighting--7517a197-3804-4d68-9594-b686957270b7", "sighting--7bced0e9-3f62-4756-92f9-c975ee38a6cd", "sighting--a8a08577-56b4-4620-a2a5-4c28f9110efb", "sighting--180121e9-8760-4af4-bf5d-b9ab57757a47", "sighting--246c2183-0ab9-42f9-808d-539660fe094d", "sighting--3433ab3d-52e9-40f5-a1ff-c7c9260826b9", "sighting--03feefc2-c3e9-40c5-aa32-188d58dffdc0", "sighting--480d602b-1312-48f0-89ff-26e6cfa2b0d0", "sighting--322c1ad6-87ae-44a7-87a1-70f3a1ba5256", "sighting--d35f3b51-fbfc-4a03-bbcc-e3d4a8a51e11", "sighting--3a5cbd5c-8dd9-494b-83d2-45c8f38d9c73", "sighting--8b527cc9-e8e6-400e-a745-accf9b2bed8e", "sighting--d6ad883e-c34e-48ec-958a-9918b95cdd48", "sighting--7094266b-c4a4-4342-91cb-319b90731ce5", "sighting--96ee5cef-e840-4419-ab85-df62f74328c8", "sighting--c2d1a4c4-cada-46e3-b698-aae36b60ccf1", "sighting--b5dd8f9e-5b76-4081-a717-2182b948f192", "sighting--f1a4b2e5-9198-44ef-aeb9-06b812fb6418", "sighting--5c765ce2-95e9-485c-8535-dba7284c0653", "sighting--c0c0c204-dd75-4fc8-8ea6-31b4df9c7c2b"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-11T11:00:01.976Z", "modified": "2026-05-11T11:00:01.976Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}